Certified Ethical Hacker (CEH v12) — Question 257

Jane is working as a security professional at CyberSol Inc. She was tasked with ensuring the authentication and integrity of messages being transmitted in the corporate network. To encrypt the messages, she implemented a security model in which every user in the network maintains a ring of public keys. In this model, a user needs to encrypt a message using the receiver’s public key, and only the receiver can decrypt the message using their private key.

What is the security model implemented by Jane to secure corporate messages?

Answer options

• A. Zero trust network
• B. Secure Socket Layer (SSL)
• C. Transport Layer Security (TLS)
• D. Web of trust (WOT)

Correct answer: D

Explanation

The correct answer is D, Web of trust (WOT), because it involves users managing a network of public keys to ensure secure communication. The other options, while related to security, do not describe a model where users maintain their own public keys for encryption and decryption. Zero trust networks focus on strict access controls, SSL and TLS are protocols for securing data in transit but do not involve a decentralized public key structure.