SY0-301 · Question #696
Pete, an employee, needs a certificate to encrypt data. Which of the following would issue Pete a certificate?
The correct answer is A. Certification authority. A Certificate Authority (CA) is the trusted entity responsible for issuing, signing, and managing digital certificates within a PKI. When Pete needs a certificate for data encryption, his request goes to the CA (possibly through a Registration Authority), and the CA digitally…
Question
Pete, an employee, needs a certificate to encrypt data. Which of the following would issue Pete a certificate?
Options
- ACertification authority
- BKey escrow
- CCertificate revocation list
- DRegistration authority
How the community answered
(18 responses)- A89% (16)
- B6% (1)
- D6% (1)
Explanation
A Certificate Authority (CA) is the trusted entity responsible for issuing, signing, and managing digital certificates within a PKI. When Pete needs a certificate for data encryption, his request goes to the CA (possibly through a Registration Authority), and the CA digitally signs and issues the certificate binding Pete's identity to his public key. Key Escrow (Option B) is a system for storing copies of encryption keys for recovery purposes - it doesn't issue certificates. A Certificate Revocation List (Option C) is used to list invalidated certificates, not to issue new ones. A Registration Authority (Option D) may verify identity and process requests, but it is the CA that actually signs and issues the certificate.
Topics
Community Discussion
No community discussion yet for this question.