312-50V10 · Question #384
Which of the following is a characteristic of Public Key Infrastructure (PKI)?
The correct answer is B. Public-key cryptosystems distribute public-keys within digital signatures.. PKI distributes public keys through digitally signed certificates issued by a Certificate Authority, binding identities to public keys via a signature.
Question
Which of the following is a characteristic of Public Key Infrastructure (PKI)?
Options
- APublic-key cryptosystems are faster than symmetric-key cryptosystems.
- BPublic-key cryptosystems distribute public-keys within digital signatures.
- CPublic-key cryptosystems do not require a secure key distribution channel.
- DPublic-key cryptosystems do not provide technical non-repudiation via digital signatures.
How the community answered
(18 responses)- B94% (17)
- C6% (1)
Why each option
PKI distributes public keys through digitally signed certificates issued by a Certificate Authority, binding identities to public keys via a signature.
Asymmetric (public-key) cryptosystems are significantly slower than symmetric-key cryptosystems because of the mathematical complexity of operations such as RSA modular exponentiation.
In PKI, public keys are embedded within digital certificates that are themselves signed by a Certificate Authority (CA), meaning public keys are distributed as part of a digital signature construct. The CA's signature over the certificate validates the authenticity of the enclosed public key, making signed certificate distribution the core mechanism of PKI public key propagation.
While public keys can travel over untrusted channels, PKI still requires a trusted distribution mechanism - Certificate Authorities and a chain of trust - to prevent key substitution and man-in-the-middle attacks.
PKI explicitly provides technical non-repudiation through digital signatures, because only the holder of the corresponding private key could have produced a valid signature, constituting strong evidence of origin.
Concept tested: PKI public key distribution via signed certificates
Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-cs/active-directory-certificate-services-overview
Topics
Community Discussion
No community discussion yet for this question.