Study. uk . com
  1. Home
  2. All questions
  3. Question 550

CompTIA Security+ study material · question 550 of 611

A mobile application pins the certificate of its backend. What does this prevent, and what does it complicate?

  1. It prevents replay attacks; it complicates session resumption
  2. It prevents interception by a fraudulently issued certificate; it complicates certificate rotation
  3. It prevents downgrade attacks; it complicates cipher selection
  4. It prevents key escrow; it complicates revocation checking
Show the answer

Answer: B. It prevents interception by a fraudulently issued certificate; it complicates certificate rotation

The application trusts only the pinned key or issuer, so a rotation that the app does not know about breaks it.

Source: OWASP Transport Layer Security Cheat Sheet (OWASP) — OWASP Transport Layer Security Cheat Sheet › Certificates

Challenge yourself on this topic → Study as cards