nerdexam
CompTIA

SY0-301 · Question #181

Which of the following BEST describes part of the PKI process?

The correct answer is D. User1 encrypts data with User2's public key. In PKI, encrypting data with the recipient's public key ensures only they can decrypt it using their matching private key - this is the foundation of asymmetric encryption.

General security concepts

Question

Which of the following BEST describes part of the PKI process?

Options

  • AUser1 decrypts data with User2's private key
  • BUser1 hashes data with User2's public key
  • CUser1 hashes data with User2's private key
  • DUser1 encrypts data with User2's public key

How the community answered

(40 responses)
  • B
    5% (2)
  • C
    3% (1)
  • D
    93% (37)

Why each option

In PKI, encrypting data with the recipient's public key ensures only they can decrypt it using their matching private key - this is the foundation of asymmetric encryption.

AUser1 decrypts data with User2's private key

Decryption is done with the key owner's own private key, not someone else's private key - private keys are never shared.

BUser1 hashes data with User2's public key

Hashing is a one-way operation that does not involve public keys; hashing and encryption are distinct cryptographic processes.

CUser1 hashes data with User2's private key

Signing (not encrypting) involves a private key, but applying a hash with a private key describes digital signature creation, not PKI data encryption.

DUser1 encrypts data with User2's public keyCorrect

When User1 wants to send confidential data to User2, User1 encrypts it using User2's public key. Because the public and private keys are mathematically paired, only User2's private key can decrypt what was encrypted with User2's public key. This ensures confidentiality in transit.

Concept tested: PKI asymmetric encryption with public key

Source: https://learn.microsoft.com/en-us/windows/security/identity-protection/smart-cards/smart-card-how-smart-card-sign-in-works

Topics

#PKI#public key encryption#asymmetric cryptography#key usage

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice