nerdexam
(ISC)2

CISSP-ISSAP · Question #186

Which of the following statements about Public Key Infrastructure (PKI) are true? Each correct answer represents a complete solution. Choose two.

The correct answer is B. It provides security using data encryption and digital signature. C. It uses asymmetric key pairs. PKI (Public Key Infrastructure) uses asymmetric key pairs (option C) - a mathematically linked public/private key pair - and delivers security through data encryption and digital signatures (option B), enabling confidentiality, integrity, authentication, and non-repudiation…

Infrastructure Security

Question

Which of the following statements about Public Key Infrastructure (PKI) are true? Each correct answer represents a complete solution. Choose two.

Options

  • AIt uses symmetric key pairs.
  • BIt provides security using data encryption and digital signature.
  • CIt uses asymmetric key pairs.
  • DIt is a digital representation of information that identifies users.

How the community answered

(18 responses)
  • B
    94% (17)
  • D
    6% (1)

Explanation

PKI (Public Key Infrastructure) uses asymmetric key pairs (option C) - a mathematically linked public/private key pair - and delivers security through data encryption and digital signatures (option B), enabling confidentiality, integrity, authentication, and non-repudiation across networks.

Option A is wrong because PKI is specifically built on asymmetric cryptography, not symmetric (symmetric uses the same key for encryption and decryption, which PKI does not). Option D describes a digital identity or certificate, not PKI itself - PKI is the framework that manages those certificates, not the certificates themselves.

Memory tip: Think "PKI = Pair of Keys + Infrastructure" - asymmetric pairs are the foundation, and the infrastructure exists to deliver security services (encryption + signatures) using them.

Topics

#PKI#Asymmetric Cryptography#Digital Signatures#Encryption

Community Discussion

No community discussion yet for this question.

Full CISSP-ISSAP Practice