GSLC · Question #126
Which of the following statements about Public Key Infrastructure (PKI) are true? Each correct answer represents a complete solution. Choose two.
The correct answer is A. It uses asymmetric key pairs. C. It provides security using data encryption and digital signature. PKI is built on asymmetric key pairs and provides security through encryption and digital signatures. It is a framework for managing certificates, not a single identity artifact.
Question
Which of the following statements about Public Key Infrastructure (PKI) are true? Each correct answer represents a complete solution. Choose two.
Options
- AIt uses asymmetric key pairs.
- BIt uses symmetric key pairs.
- CIt provides security using data encryption and digital signature.
- DIt is a digital representation of information that identifies users.
How the community answered
(21 responses)- A95% (20)
- B5% (1)
Why each option
PKI is built on asymmetric key pairs and provides security through encryption and digital signatures. It is a framework for managing certificates, not a single identity artifact.
PKI is fundamentally based on asymmetric cryptography, where each entity holds a mathematically linked public/private key pair - the public key is openly shared while the private key remains secret, enabling secure key exchange without a pre-shared secret.
PKI uses asymmetric key pairs, not symmetric ones; symmetric cryptography uses a single shared secret key and operates under a completely separate model that does not involve certificate authorities or public key distribution.
PKI enables data confidentiality through public-key encryption and integrity plus non-repudiation through digital signatures, making both capabilities core functions of the infrastructure.
A digital certificate such as an X.509 certificate is the artifact that digitally represents and identifies a user or entity; PKI is the broader infrastructure of policies, CAs, and processes that issues and manages those certificates.
Concept tested: PKI asymmetric cryptography and core security functions
Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-cs/active-directory-certificate-services-overview
Topics
Community Discussion
No community discussion yet for this question.