nerdexam
EC-Council

312-50V10 · Question #384

Which of the following is a characteristic of Public Key Infrastructure (PKI)?

The correct answer is B. Public-key cryptosystems distribute public-keys within digital signatures.. PKI distributes public keys through digitally signed certificates issued by a Certificate Authority, binding identities to public keys via a signature.

Cryptography

Question

Which of the following is a characteristic of Public Key Infrastructure (PKI)?

Options

  • APublic-key cryptosystems are faster than symmetric-key cryptosystems.
  • BPublic-key cryptosystems distribute public-keys within digital signatures.
  • CPublic-key cryptosystems do not require a secure key distribution channel.
  • DPublic-key cryptosystems do not provide technical non-repudiation via digital signatures.

How the community answered

(18 responses)
  • B
    94% (17)
  • C
    6% (1)

Why each option

PKI distributes public keys through digitally signed certificates issued by a Certificate Authority, binding identities to public keys via a signature.

APublic-key cryptosystems are faster than symmetric-key cryptosystems.

Asymmetric (public-key) cryptosystems are significantly slower than symmetric-key cryptosystems because of the mathematical complexity of operations such as RSA modular exponentiation.

BPublic-key cryptosystems distribute public-keys within digital signatures.Correct

In PKI, public keys are embedded within digital certificates that are themselves signed by a Certificate Authority (CA), meaning public keys are distributed as part of a digital signature construct. The CA's signature over the certificate validates the authenticity of the enclosed public key, making signed certificate distribution the core mechanism of PKI public key propagation.

CPublic-key cryptosystems do not require a secure key distribution channel.

While public keys can travel over untrusted channels, PKI still requires a trusted distribution mechanism - Certificate Authorities and a chain of trust - to prevent key substitution and man-in-the-middle attacks.

DPublic-key cryptosystems do not provide technical non-repudiation via digital signatures.

PKI explicitly provides technical non-repudiation through digital signatures, because only the holder of the corresponding private key could have produced a valid signature, constituting strong evidence of origin.

Concept tested: PKI public key distribution via signed certificates

Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-cs/active-directory-certificate-services-overview

Topics

#PKI#public-key cryptography#digital signatures#key distribution

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice