Which of the following describes a component of Public Key Infrastructure (PKI) where a copy of a private key is stored to provide third-party access and to facilitate recovery operations?

A key registry is not a standard PKI component - registries in PKI context refer to Registration Authorities (RAs) that verify identities, not private key storage.

A recovery agent is a person or role authorized to decrypt or recover data, not the storage mechanism where the private key copy is held.

A directory in PKI (such as LDAP) stores public certificates and certificate revocation lists, not private keys.

Key escrow is the specific PKI component that involves storing a copy of a private key with a trusted third party or escrow agent. This allows authorized access by law enforcement or administrators and supports recovery operations when the original key holder loses access. It is the storage and custody arrangement itself, not the role of the person performing recovery.