Which mechanism assigns trust scores to domains or IPs to indicate malicious or benign status?

• A. TLS Trust Stores
• B. OAuth Scopes
• C. JWKS
• D. DNS/IP Reputations

Answer: (D)

Trust scores for domains or IPs come from reputation-based threat intelligence. DNS/IP reputations assign a risk score to destinations based on evidence of abuse or malicious activity—things like hosting malware, phishing, botnets, open proxies, or involvement in spamming. Security tools subscribe to these reputation feeds and use the scores to decide whether to allow, block, or challenge traffic, and to raise alerts. This approach helps defend systems proactively by flagging or blocking suspicious destinations before they can cause harm, and it updates as new intelligence arrives.

Other options don’t fit because TLS trust stores are about validating TLS certificates and trust in certificate authorities during a handshake, not scoring destinations based on past behavior; OAuth scopes define what resources an application can access; and JWKS provides public keys to verify JWT signatures, not reputational status of domains or IPs.