What components constitute a Public Key Infrastructure?

What components constitute a Public Key Infrastructure?

• A. Certificate authorities, digital certificates, and certificate lifecycle management
• B. Public key algorithms, private keys, and certificates
• C. Domain Name System, Dynamic Host Configuration Protocol, and Network Address Translation
• D. Routers, switches, and firewalls

Answer: (A)

Public Key Infrastructure is the framework that enables trusted use of digital certificates. The main pieces are certificate authorities, which issue and sign certificates; digital certificates themselves, which bind a public key to an entity’s identity; and certificate lifecycle management, which covers issuing, renewing, revoking, and validating certificates over time. This combination creates a trusted system for authenticating identities and securing communications, with mechanisms to check certificate validity (like revocation lists and online status checks). The other options describe either the cryptographic materials themselves without the trust framework (public key algorithms, private keys, and certificates) or unrelated network-related components (DNS, DHCP, NAT, or common network devices). Such items are important but do not constitute the full infrastructure needed to manage and trust digital certificates.

Public Key Infrastructure is the framework that enables trusted use of digital certificates. The main pieces are certificate authorities, which issue and sign certificates; digital certificates themselves, which bind a public key to an entity’s identity; and certificate lifecycle management, which covers issuing, renewing, revoking, and validating certificates over time. This combination creates a trusted system for authenticating identities and securing communications, with mechanisms to check certificate validity (like revocation lists and online status checks).

The other options describe either the cryptographic materials themselves without the trust framework (public key algorithms, private keys, and certificates) or unrelated network-related components (DNS, DHCP, NAT, or common network devices). Such items are important but do not constitute the full infrastructure needed to manage and trust digital certificates.