312-50V9 · Question #137
Which of the following processes of PKI (Public Key Infrastructure) ensures that a trust relationship exists and that a certificate is still valid for specific operations?
The correct answer is B. Certificate validation. Certificate validation is the PKI process that verifies a certificate is authentic, trusted via the CA chain, not expired, and not revoked - confirming it is valid for a specific operation.
Question
Which of the following processes of PKI (Public Key Infrastructure) ensures that a trust relationship exists and that a certificate is still valid for specific operations?
Options
- ACertificate issuance
- BCertificate validation
- CCertificate cryptography
- DCertificate revocation
How the community answered
(19 responses)- B95% (18)
- D5% (1)
Why each option
Certificate validation is the PKI process that verifies a certificate is authentic, trusted via the CA chain, not expired, and not revoked - confirming it is valid for a specific operation.
Certificate issuance is the CA process of signing and distributing a certificate to a subject - it creates the certificate but does not verify its ongoing trustworthiness.
Certificate validation is the formal PKI process of checking that a certificate chains up to a trusted root CA, has not expired, has not been revoked (via CRL or OCSP), and is appropriate for the intended purpose (e.g., code signing vs. TLS). It is the mechanism that establishes whether a trust relationship is present and whether the certificate can be relied upon for a specific operation.
Certificate cryptography is not a defined PKI process; it is a generic term describing the mathematical operations involved, not a lifecycle management step.
Certificate revocation is the act of invalidating a certificate before its expiration - it is one input into validation, but it is not itself the process of confirming trust and validity.
Concept tested: PKI certificate validation and trust verification
Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-cs/active-directory-certificate-services-overview
Topics
Community Discussion
No community discussion yet for this question.