Company XYZ Has Decided to Make Use of a Cloud-Based

question 394

Multiple Choice

Company XYZ has decided to make use of a cloud-based service that requires mutual, certificate- based authentication with its users. The company uses SSL-inspecting IDS at its network boundary and is concerned about the confidentiality of the mutual authentication. Which of the following model prevents the IDS from capturing credentials used to authenticate users to the new service or keys to decrypt that communication?

• A) Use of OATH between the user and the service and attestation from the company domain
• B) Use of active directory federation between the company and the cloud-based service
• C) Use of smartcards that store x.509 keys, signed by a global CA
• D) Use of a third-party, SAML-based authentication service for attestation

---

Definitions:

Matter of Law

Issues resolved by a judge, concerning the application or interpretation of the law, as opposed to matters of fact, which are decided by a jury.

Recross-examination

The questioning of a witness by the opposing side after re-examination, intended to clarify or counter information that came up during re-examination.

Redirect Examination

A stage in a court proceeding where the party who originally called a witness has an opportunity to question the witness again after cross-examination.

Adverse Party

An adverse party refers to a person or entity that stands in opposition in a legal dispute or litigation.