nerdexam
Cisco

210-250 · Question #36

Which cryptographic key is contained in an X.509 certificate?

The correct answer is B. public. An X.509 digital certificate is designed to bind an identity to a public key, and only the public key is embedded in the certificate structure.

Security Technologies

Question

Which cryptographic key is contained in an X.509 certificate?

Options

  • Asymmetric
  • Bpublic
  • Cprivate
  • Dasymmetric

How the community answered

(16 responses)
  • A
    6% (1)
  • B
    88% (14)
  • D
    6% (1)

Why each option

An X.509 digital certificate is designed to bind an identity to a public key, and only the public key is embedded in the certificate structure.

Asymmetric

Symmetric keys are shared secret keys used in algorithms like AES and are never embedded in X.509 certificates, which are specifically designed for public-key infrastructure.

BpublicCorrect

As defined in RFC 5280, an X.509 certificate contains the subject's public key in the SubjectPublicKeyInfo field, which is signed by a trusted Certificate Authority to bind the key to the subject's identity. This public key can then be used by others to encrypt data for the subject or to verify the subject's digital signatures. The corresponding private key is never included in the certificate and must remain exclusively under the subject's control.

Cprivate

The private key must remain secret and is never distributed via an X.509 certificate - including it would completely compromise the security model of PKI.

Dasymmetric

Asymmetric describes a category of cryptographic system, not a specific key type - X.509 certificates specifically carry only the public half of an asymmetric key pair.

Concept tested: X.509 certificate public key contents

Source: https://datatracker.ietf.org/doc/html/rfc5280

Topics

#X.509 certificate#public key#PKI#asymmetric cryptography

Community Discussion

No community discussion yet for this question.

Full 210-250 Practice