Study. uk . com
  1. Home
  2. All questions
  3. Question 398

CompTIA Security+ study material · question 398 of 611

A phishing site presents a valid domain-validated certificate. What does this certificate actually prove?

  1. That the certificate holder controls the domain name
  2. That the organisation behind the site was verified
  3. That the site is free of malicious content
  4. That the site is operated in the stated jurisdiction
Show the answer

Answer: A. That the certificate holder controls the domain name

A certificate proves identity only as far as the issuing authority's validation went, and domain validation checks control of the name.

Source: OWASP Transport Layer Security Cheat Sheet (OWASP) — OWASP Transport Layer Security Cheat Sheet › Certificates

Challenge yourself on this topic → Study as cards