Which solution uses digital certificates to identify hosts and establish secure tunnels for network traffic?

Which solution uses digital certificates to identify hosts and establish secure tunnels for network traffic?

• A. transport layer security (TLS) VPN
• B. IPsec VPN
• C. Web application firewall
• D. Remote access

Answer: (A)

Certificates used to identify hosts and establish encrypted channels are a hallmark of TLS-based VPNs. In a TLS VPN, the client and the VPN gateway perform a TLS handshake in which each side presents digital certificates to verify identity. Once trust is established, a secure TLS tunnel is created, and all VPN traffic is encrypted within that channel. This combination of certificate-based host authentication and an encrypted tunnel directly satisfies the requirement. The other options don’t fit as specifically. A Web Application Firewall operates at the application layer to filter traffic, not to create a secure tunnel between hosts. Remote access is a general term for gaining entry into a network and doesn’t describe how identity is verified or how traffic is tunnelled. An IPsec VPN can also use certificates for authentication, but the description emphasizing host identification via certificates and establishing a TLS-based tunnel aligns most directly with TLS VPN.

Certificates used to identify hosts and establish encrypted channels are a hallmark of TLS-based VPNs. In a TLS VPN, the client and the VPN gateway perform a TLS handshake in which each side presents digital certificates to verify identity. Once trust is established, a secure TLS tunnel is created, and all VPN traffic is encrypted within that channel. This combination of certificate-based host authentication and an encrypted tunnel directly satisfies the requirement.

The other options don’t fit as specifically. A Web Application Firewall operates at the application layer to filter traffic, not to create a secure tunnel between hosts. Remote access is a general term for gaining entry into a network and doesn’t describe how identity is verified or how traffic is tunnelled. An IPsec VPN can also use certificates for authentication, but the description emphasizing host identification via certificates and establishing a TLS-based tunnel aligns most directly with TLS VPN.