Study. uk . com
  1. Home
  2. All questions
  3. Question 307

CompTIA Security+ study material · question 307 of 611

Why does certificate-based authentication resist network capture better than a password?

  1. It proves possession of a private key, so nothing reusable crosses the network
  2. Certificates are longer than passwords
  3. Certificates are validated offline
  4. Certificates cannot be revoked
Show the answer

Answer: A. It proves possession of a private key, so nothing reusable crosses the network

An observer sees a proof tied to that exchange rather than a secret they can present later.

Source: NIST SP 800-57 Part 1 Rev. 5 (NIST) — SP 800-57 Part 1 Rev. 5 › Key Usage

Challenge yourself on this topic → Study as cards