In TLS, which element is essential to establishing trust across communications?

• A. Shared secret key
• B. Username and password
• C. Public/private keys and certificates
• D. IP addresses

Answer: (C)

Public/private keys and certificates are essential because TLS builds trust through a PKI-based authentication process. The server presents a certificate that includes its public key and identity, and this certificate is signed by a trusted Certificate Authority. The client can verify that signature against its store of trusted CAs, confirming the server’s identity before any sensitive data is exchanged. Once the server’s identity is established, the two ends use the server’s public key (and potentially other asymmetric mechanisms) to securely establish session keys, which are then used for fast symmetric encryption of the data in transit. This chain of trust is what guarantees that you’re communicating with the legitimate server and not an impostor.

Shared secret keys don’t by themselves establish identity or trust across an initial connection; they are just used for encryption once trust is already established. A username and password are for application-level authentication and don’t provide the cryptographic identity assurance TLS requires. IP addresses may identify endpoints but do not prove identity or trust in the communication channel.