- Home
- All questions
- Question 550
CompTIA Security+ study material · question 550 of 611
A mobile application pins the certificate of its backend. What does this prevent, and what does it complicate?
Show the answer
Answer: B. It prevents interception by a fraudulently issued certificate; it complicates certificate rotation
The application trusts only the pinned key or issuer, so a rotation that the app does not know about breaks it.
Source: OWASP Transport Layer Security Cheat Sheet (OWASP) — OWASP Transport Layer Security Cheat Sheet › Certificates