nerdexam
CompTIA

SY0-301 · Question #49

Which of the following components MUST be trusted by all parties in PKI?

The correct answer is B. CA. In PKI, the Certificate Authority is the trusted third party whose digital signature on a certificate vouches for the identity of the certificate holder, so all parties must trust it for the system to function.

General security concepts

Question

Which of the following components MUST be trusted by all parties in PKI?

Options

  • AKey escrow
  • BCA
  • CPrivate key
  • DRecovery key

How the community answered

(43 responses)
  • A
    5% (2)
  • B
    93% (40)
  • D
    2% (1)

Why each option

In PKI, the Certificate Authority is the trusted third party whose digital signature on a certificate vouches for the identity of the certificate holder, so all parties must trust it for the system to function.

AKey escrow

Key escrow is a key backup and recovery service trusted only by the parties using it for recovery, not a component that all PKI participants must universally trust.

BCACorrect

The CA is the foundation of trust in PKI - it verifies identities and issues digitally signed certificates that bind a public key to an entity. For any PKI transaction to succeed, both the sender and receiver must trust the issuing CA; without this shared trust anchor the entire certificate validation chain breaks down and cannot provide assurance of identity.

CPrivate key

The private key is held exclusively and secretly by its owner and is never shared with or trusted by other parties.

DRecovery key

A recovery key is used in specific data recovery scenarios and is not a component that all parties in a PKI deployment must trust.

Concept tested: CA as the universal trust anchor in PKI

Source: https://learn.microsoft.com/en-us/windows-server/networking/core-network-guide/cncg/server-certs/server-certificate-deployment-overview

Topics

#PKI#certificate authority#trust model#public key infrastructure

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice