Which statement best describes the two-way TLS handshake?

• A. The client presents a certificate and the server validates it using its truststore
• B. The server presents a certificate to the client
• C. The client presents a certificate and the server validates it using its truststore and presents its own certificate
• D. Mutual TLS does not require any certificates

Answer: (C)

Mutual TLS uses certificates on both sides to prove identities and establish trust. The client must present its certificate so the server can verify who is connecting, and the server must present its certificate so the client can verify the server’s identity. Each side checks the other’s certificate against its own trusted authorities (truststore). This exchange creates a secure, bidirectional trust relationship.

The described statement matches this: the client presents a certificate for the server to validate using its truststore, and the server then presents its own certificate for the client to validate. That captures the essence of two-way TLS, where both parties authenticate each other. The other options would describe only one-way TLS, or claim no certificates are required, which isn’t true for mutual TLS.