312-50V11 · Question #362
Which of the following processes of PKI (Public Key Infrastructure) ensures that a trust relationship exists and that a certificate is still valid for specific operations?
The correct answer is B. Certificate validation. Certificate validation is the PKI process that confirms a certificate is trusted, currently valid, and has not been revoked before allowing its use in a specific operation.
Question
Which of the following processes of PKI (Public Key Infrastructure) ensures that a trust relationship exists and that a certificate is still valid for specific operations?
Options
- ACertificate issuance
- BCertificate validation
- CCertificate cryptography
- DCertificate revocation
How the community answered
(31 responses)- B94% (29)
- C3% (1)
- D3% (1)
Why each option
Certificate validation is the PKI process that confirms a certificate is trusted, currently valid, and has not been revoked before allowing its use in a specific operation.
Certificate issuance is the process by which a CA signs and distributes a certificate to a subject, which occurs before the trust-checking process.
Certificate validation involves verifying the digital signature on the certificate against a trusted Certificate Authority (CA), checking that the certificate is within its validity period, and confirming it has not been revoked via CRL or OCSP. This end-to-end trust verification process is what ensures a certificate can be legitimately used for operations such as authentication, signing, or encryption.
Certificate cryptography is not a defined PKI process - it describes the underlying mathematical mechanisms, not a procedural PKI function.
Certificate revocation is the process of invalidating a certificate before its expiration date, and is one input into the validation process rather than the validation process itself.
Concept tested: PKI certificate validation and trust chain verification
Source: https://learn.microsoft.com/en-us/windows/win32/seccrypto/certificate-trust-verification
Topics
Community Discussion
No community discussion yet for this question.