200-201 Security Concepts Practice Question
A security team is implementing a Public Key Infrastructure (PKI) to support digital signatures for email. Which THREE components are essential to the PKI framework? (Choose three.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Registration Authority (RA)
A PKI includes a Certificate Authority (CA) that issues certificates, certificates themselves that bind public keys to identities, and a registration authority (RA) that verifies identities. The private key is held by the user, not part of the PKI infrastructure. The CRL is a mechanism but not a core component.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Registration Authority (RA)
Why this is correct
The RA verifies identity before certificate issuance.
- ✗
Private key
Why it's wrong here
Private keys are generated and kept by users, not part of the PKI infrastructure.
- ✓
Certificate Authority (CA)
Why this is correct
The CA issues and manages certificates.
- ✗
Certificate Revocation List (CRL)
Why it's wrong here
CRL is a list of revoked certificates, but it is not a core component of PKI; it is a supporting mechanism.
- ✓
Digital certificates
Why this is correct
Certificates bind public keys to entities.
Go deeper
Related to this question
About these practice questions
One of 979 original 200-201 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-201 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-201 exam.