nerdexam
(ISC)2

SSCP · Question #37

What is the primary role of smartcards in a PKI?

The correct answer is D. Tamper resistant, mobile storage and application of private keys of the users. In a PKI, the private key must remain secret and under the user's sole control. Smartcards provide a tamper-resistant hardware token that securely stores the private key and performs cryptographic operations (signing, decryption) on-chip - the private key never leaves the card…

Submitted by noor.lb· Apr 18, 2026Cryptography

Question

What is the primary role of smartcards in a PKI?

Options

  • ATransparent renewal of user keys
  • BEasy distribution of the certificates between the users
  • CFast hardware encryption of the raw data
  • DTamper resistant, mobile storage and application of private keys of the users

How the community answered

(48 responses)
  • A
    6% (3)
  • B
    2% (1)
  • C
    4% (2)
  • D
    88% (42)

Explanation

In a PKI, the private key must remain secret and under the user's sole control. Smartcards provide a tamper-resistant hardware token that securely stores the private key and performs cryptographic operations (signing, decryption) on-chip - the private key never leaves the card. This makes them portable and protects against extraction even if the card is stolen. Key renewal, certificate distribution, and raw data encryption are separate PKI functions and are not the defining role of the smartcard itself.

Topics

#Smartcards#PKI#Private Key Storage#Tamper Resistance

Community Discussion

No community discussion yet for this question.

Full SSCP Practice