SY0-301 · Question #49
Which of the following components MUST be trusted by all parties in PKI?
The correct answer is B. CA. In PKI, the Certificate Authority is the trusted third party whose digital signature on a certificate vouches for the identity of the certificate holder, so all parties must trust it for the system to function.
Question
Which of the following components MUST be trusted by all parties in PKI?
Options
- AKey escrow
- BCA
- CPrivate key
- DRecovery key
How the community answered
(43 responses)- A5% (2)
- B93% (40)
- D2% (1)
Why each option
In PKI, the Certificate Authority is the trusted third party whose digital signature on a certificate vouches for the identity of the certificate holder, so all parties must trust it for the system to function.
Key escrow is a key backup and recovery service trusted only by the parties using it for recovery, not a component that all PKI participants must universally trust.
The CA is the foundation of trust in PKI - it verifies identities and issues digitally signed certificates that bind a public key to an entity. For any PKI transaction to succeed, both the sender and receiver must trust the issuing CA; without this shared trust anchor the entire certificate validation chain breaks down and cannot provide assurance of identity.
The private key is held exclusively and secretly by its owner and is never shared with or trusted by other parties.
A recovery key is used in specific data recovery scenarios and is not a component that all parties in a PKI deployment must trust.
Concept tested: CA as the universal trust anchor in PKI
Source: https://learn.microsoft.com/en-us/windows-server/networking/core-network-guide/cncg/server-certs/server-certificate-deployment-overview
Topics
Community Discussion
No community discussion yet for this question.