SSCP · Question #670
SSCP Question #670: Real Exam Question with Answer & Explanation
The correct answer is A: Cross-certification. Cross-certification allows two separate Public Key Infrastructure (PKI) hierarchies to establish mutual trust, enabling users in one hierarchy to validate certificates issued by a different Certification Authority (CA) hierarchy. This is done by having the CAs issue certificates
Question
What enables users to validate each other's certificate when they are certified under different certification hierarchies?
Options
- ACross-certification
- BMultiple certificates
- CRedundant certification authorities
- DRoot certification authorities
Explanation
Cross-certification allows two separate Public Key Infrastructure (PKI) hierarchies to establish mutual trust, enabling users in one hierarchy to validate certificates issued by a different Certification Authority (CA) hierarchy. This is done by having the CAs issue certificates to each other, bridging the trust paths. Multiple certificates and redundant CAs address availability, not cross-hierarchy trust, and root CAs only anchor trust within their own hierarchy.
Topics
Community Discussion
No community discussion yet for this question.