A certificate authority takes which of the following actions in PKI?

Question

Options

• ASigns and verifies all infrastructure messages
• BIssues and signs all private keys
• CPublishes key escrow lists to CRLs
• DIssues and signs all root certificates

• A
  8% (3)
• B
  5% (2)
• D
  88% (35)

Explanation

In a Public Key Infrastructure (PKI), a Certificate Authority (CA) is the trusted entity responsible for issuing and digitally signing certificates, including root certificates that anchor the chain of trust. A root CA signs its own certificate (self-signed) and is the ultimate trust anchor. Option A is incorrect - CAs sign certificates, not 'all infrastructure messages.' Option B is incorrect - CAs issue and sign public key certificates, not private keys (private keys are generated by the end entity and never shared). Option C is incorrect - CRLs (Certificate Revocation Lists) list revoked certificates, not key escrow data, and the CA publishes CRLs rather than 'key escrow lists.'

No community discussion yet for this question.