350-701 · Question #725
What is the purpose of CA in a PKI?
The correct answer is B. to issue and revoke digital certificates. The Certificate Authority (CA) in a Public Key Infrastructure (PKI) is primarily responsible for the lifecycle management of digital certificates.
Question
What is the purpose of CA in a PKI?
Options
- Ato generate a pkcs12 certificate from certificate key-pair
- Bto issue and revoke digital certificates
- Cto certify the ownership of a public key by the named subject
- Dto create the private key for a digital certificate
How the community answered
(42 responses)- A2% (1)
- B90% (38)
- C5% (2)
- D2% (1)
Why each option
The Certificate Authority (CA) in a Public Key Infrastructure (PKI) is primarily responsible for the lifecycle management of digital certificates.
Generating a PKCS#12 certificate from a key-pair is typically performed by the end-user or a utility, not the CA's core function in the PKI.
A Certificate Authority's primary role is to issue digital certificates after verifying the identity of the applicant and to revoke certificates that are no longer valid or have been compromised. This ensures the trustworthiness of public keys and maintains the integrity of the PKI system.
While certifying public key ownership is part of the CA's function, its overall purpose encompasses the broader management of certificate issuance and revocation.
The private key for a digital certificate is generally created by the subject requesting the certificate, and never by the Certificate Authority itself.
Concept tested: PKI Certificate Authority roles
Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-cs/certificate-authorities
Topics
Community Discussion
No community discussion yet for this question.