nerdexam
(ISC)2

SSCP · Question #662

Which of the following elements is NOT included in a Public Key Infrastructure (PKI)?

The correct answer is D. Internet Key Exchange (IKE). Internet Key Exchange (IKE) is a protocol used by IPSec to negotiate and establish Security Associations (SAs), and is not a component of PKI. PKI components include Certificate Authorities (CAs), Registration Authorities (RAs), certificate repositories (B), certificate…

Submitted by manish99· Apr 18, 2026Cryptography

Question

Which of the following elements is NOT included in a Public Key Infrastructure (PKI)?

Options

  • ATimestamping
  • BRepository
  • CCertificate revocation
  • DInternet Key Exchange (IKE)

How the community answered

(42 responses)
  • A
    5% (2)
  • B
    2% (1)
  • C
    2% (1)
  • D
    90% (38)

Explanation

Internet Key Exchange (IKE) is a protocol used by IPSec to negotiate and establish Security Associations (SAs), and is not a component of PKI. PKI components include Certificate Authorities (CAs), Registration Authorities (RAs), certificate repositories (B), certificate revocation mechanisms such as CRLs and OCSP (C), and timestamping services (A) for proving when a certificate or signature was valid. IKE may use PKI certificates during its authentication phase, but it is not part of the PKI framework itself.

Topics

#PKI#Cryptography#Certificates#IKE

Community Discussion

No community discussion yet for this question.

Full SSCP Practice