nerdexam
(ISC)2

SSCP · Question #580

What is the primary role of cross certification?

The correct answer is A. Creating trust between different PKIs. More and more organizations are setting up their own internal PKIs. When these independent PKIs need to interconnect to allow for secure communication to take place (either between departments or different companies), there must be a way for the two root CAs to trust each These…

Submitted by ahmad_uae· Apr 18, 2026Cryptography

Question

What is the primary role of cross certification?

Options

  • ACreating trust between different PKIs
  • BBuild an overall PKI hierarchy
  • Cset up direct trust to a second root CA
  • DPrevent the nullification of user certificates by CA certificate revocation

How the community answered

(61 responses)
  • A
    89% (54)
  • B
    7% (4)
  • C
    2% (1)
  • D
    3% (2)

Explanation

More and more organizations are setting up their own internal PKIs. When these independent PKIs need to interconnect to allow for secure communication to take place (either between departments or different companies), there must be a way for the two root CAs to trust each These two CAs do not have a CA above them they can both trust, so they must carry out cross certification. A cross certification is the process undertaken by CAs to establish a trust relationship in which they rely upon each other's digital certificates and public keys as if they had issued them themselves. When this is set up, a CA for one company can validate digital certificates from the other company and vice versa.

Topics

#PKI#Cross-certification#Trust Models#Certificate Management

Community Discussion

No community discussion yet for this question.

Full SSCP Practice