nerdexam
(ISC)2

SSCP · Question #1163

In a Public Key Infrastructure (PKI), what is the role of a directory server?

The correct answer is B. To make user certificates available to others. A directory server in a PKI stores and publishes public certificates, making them discoverable and accessible for users and applications.

Submitted by omar99· Apr 18, 2026Security Concepts and Practices

Question

In a Public Key Infrastructure (PKI), what is the role of a directory server?

Options

  • ATo issue certificates to users
  • BTo make user certificates available to others
  • CAuthorizes CA servers to issue certificates to users
  • DIs the root authority for thePKI

How the community answered

(55 responses)
  • A
    2% (1)
  • B
    91% (50)
  • C
    5% (3)
  • D
    2% (1)

Why each option

A directory server in a PKI stores and publishes public certificates, making them discoverable and accessible for users and applications.

ATo issue certificates to users

Certificate Authorities (CAs) are responsible for issuing certificates, not directory servers.

BTo make user certificates available to othersCorrect

A directory server (such as one implementing X.500 or LDAP) in a PKI environment serves as a central repository to store and make public keys and digital certificates easily accessible and discoverable by other users or systems that need to verify digital identities or encrypt data.

CAuthorizes CA servers to issue certificates to users

The CA hierarchy and policies authorize CAs, not a directory server.

DIs the root authority for thePKI

The Root CA is the root authority in a PKI, not a general directory server.

Concept tested: PKI components; Directory server role

Source: https://learn.microsoft.com/en-us/windows/win32/seccrypto/public-key-cryptography

Topics

#PKI#Directory Server#Certificates#Public Key Infrastructure

Community Discussion

No community discussion yet for this question.

Full SSCP Practice