200-201 Security Concepts Practice Question
Which THREE components are part of a Public Key Infrastructure (PKI)? (Choose three.)
⚠ Common exam trap
Cisco often tests the distinction between PKI components (CA, RA, digital certificate) and cryptographic primitives (hash functions, symmetric keys), so candidates mistakenly select hash functions or symmetric keys because they are associated with security, but they are not structural PKI components.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Registration Authority (RA)
The Registration Authority (RA) is a key component of a PKI because it acts as the intermediary between the user and the Certificate Authority (CA). The RA is responsible for verifying the identity of an entity requesting a digital certificate before the CA issues the certificate, thereby offloading identity proofing tasks from the CA.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Registration Authority (RA)
Why this is correct
The RA assists the CA by verifying certificate requestors' identities.
- ✗
Symmetric encryption key
Why it's wrong here
Symmetric keys are not part of PKI; PKI uses asymmetric keys.
- ✓
Digital certificate
Why this is correct
Digital certificates are the core of PKI, linking identity to a public key.
- ✗
Hash function
Why it's wrong here
Hash functions are used in cryptography but are not specific PKI components.
- ✓
Certificate Authority (CA)
Why this is correct
The CA is the trusted entity that issues and manages digital certificates.
Go deeper
Related to this question
About these practice questions
One of 979 original 200-201 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-201 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-201 exam.