Exam Certified Integration Architect topic 1 question 14 discussion

..agree, authentication and authorization, completely two different things, and the answer makes it tricky!

Two-way SSL enhances security when making HTTP requests because the target can verify the requestor as well as the requestor verifying the target. First, generate a certificate then integrate this into the APEX code. https://developer.salesforce.com/docs/atlas.en-us.apexcode.meta/apexcode/apex_callouts_client_certs.htm https://developer.salesforce.com/docs/atlas.en-us.apexcode.meta/apexcode/apex_callouts_client_certs_http.htm Authentication Provider is also necessary but the answer says Authorization Provider, which may be a trick

When we are using the named credentials we need to user Authentication Provider to be configured. https://developer.salesforce.com/docs/atlas.en-us.apexcode.meta/apexcode/apex_callouts_named_credentials.htm