easyMultiple SelectObjective-mapped
CAS-004 Practice Question: Is implementing a public key infrastructure (PKI)
An organization is implementing a public key infrastructure (PKI). Which THREE of the following are essential components?
⚠ Common exam trap
CompTIA CASP+ often tests the distinction between essential PKI components (CA, RA, certificate database/CRL) and optional services (key escrow, TSA), trapping candidates who assume all listed items are mandatory for a basic PKI implementation.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Certificate authority (CA)
The Certificate Authority (CA) is the core trust anchor in a PKI, responsible for issuing, signing, and revoking digital certificates. Without a CA, there is no mechanism to bind public keys to identities, making secure communications impossible. The CA's private key is used to sign certificates, and its public key is distributed as a trusted root.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Key escrow agent
Why it's wrong here
Key escrow is optional, not essential.
- ✓
Certificate authority (CA)
Why this is correct
The CA signs and issues certificates.
- ✓
Certificate database and CRL
Why this is correct
Needed to store and revoke certificates.
- ✓
Registration authority (RA)
Why this is correct
The RA performs identity verification.
- ✗
Time-stamping authority (TSA)
Why it's wrong here
TSA is used for non-repudiation but is not a core PKI component.
Go deeper
Related to this question
About these practice questions
This CAS-005 question is part of Courseiva's 968-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CAS-005 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CAS-005 exam.