PCCSA · Question #27
In PKI, which item is issued by a CA?
The correct answer is A. digital certificate. In PKI (Public Key Infrastructure), a Certificate Authority (CA) is the trusted entity responsible for issuing digital certificates, which bind a public key to an identity (person, server, or organization) and are signed by the CA to prove authenticity. Option B is wrong…
Question
Options
- Adigital certificate
- BSAML key
- CKDC ticket
- Dshared key
How the community answered
(33 responses)- A88% (29)
- B3% (1)
- C3% (1)
- D6% (2)
Explanation
In PKI (Public Key Infrastructure), a Certificate Authority (CA) is the trusted entity responsible for issuing digital certificates, which bind a public key to an identity (person, server, or organization) and are signed by the CA to prove authenticity. Option B is wrong because SAML keys are part of the SAML federation protocol for SSO authentication, not issued by a CA. Option C is wrong because KDC (Key Distribution Center) tickets - like Kerberos TGTs - are issued by a KDC in Kerberos environments, a completely separate authentication system. Option D is wrong because shared (symmetric) keys are negotiated between parties directly (e.g., via Diffie-Hellman) and are never "issued" by a CA.
Memory tip: Think of a CA like a government passport office - it certifies your identity by issuing a signed document (the digital certificate). CA = Certificate Authority = issues Certificates.
Topics
Community Discussion
No community discussion yet for this question.