Exam 350-701 topic 1 question 373 discussion

Don´t get what all those comments are about. What function is performed by CA ? Clearly issue CRL : A Why someone here even mentions verify user Identity is CA job ? It is server job to verify clients certificate, verification is not job of CA itself. CA is queried just to verify the client's certificate is not tempered, not doing authentication.

Interesting question lol.... A & C are the best possible answers here..... CRL Publishing is primarily a CA's responsibility. An RA CAN also handle revocation requests, but this function is LIMITED to an administrative task rather than a core responsibility. Regarding user identity verification, a CA authenticates the identities of entities requesting digital certificates, ensuring that they possess the private key corresponding to the public key issued in the digital certificate. An RA is LIMITED in the fact that they do not perform full identity verification themselves, but rather assist in verifying the identity of the entity requesting the certificate. Which answer is the BEST? I would vote for C. My reason is because in this particular instance, an RA just do not possess the authority or capability to fully verify user identities.

Here's why option A (CRL publishing) isn't a clear distinction between CAs and RAs: While CAs have the primary responsibility for CRL generation and publishing, RAs can be involved in the distribution process. Verify user identity is very limited on RA, comparing to CA.

In summary, while the primary responsibility for CRL publishing typically rests with the CA, in certain scenarios, an RA may be delegated authority to assist with CRL management under the oversight and control of the CA.

A is correct, this website needs update

The certificate request is sent to the PKI's RA to verify that the requestor has the right to request the certificate. The RA verifies the identity of the user and device and processes authentication credentials. If everything checks out, the RA forwards the certificate request to the CA to process. The CA then issues the digital certificate directly to the requesting device. If the RA denies the request, the requesting user or device is not permitted to continue the certificate request process. https://www.techtarget.com/searchsecurity/definition/registration-authority#:~:text=The%20certificate%20request%20is,the%20certificate%20request%20process.

The function performed by certificate authorities (CAs) but is a limitation of registration authorities (RAs) is "CRL publishing". CAs are responsible for issuing digital certificates to entities and managing the public key infrastructure (PKI) system, while RAs are responsible for verifying the identity of the entity requesting the certificate and forwarding the request to the CA. CRL (Certificate Revocation List) publishing involves maintaining a list of revoked certificates and making it available to users and relying parties. This function is typically performed by CAs, as they are the ones responsible for managing the certificates they issue and revoking them if necessary.

"A registration authority (RA) is an authority in a network that verifies user requests for a digital certificate and tells the certificate authority (CA) to issue it. "

C is correct if you rearrange the question (CA <> RA) CA is responsible for all the tasks except verifying user identity.

The RA does verify identities....I think C is wrong, I believe is A

A registration authority (RA) is an authority in a network that verifies user requests for a digital certificate and tells the certificate authority (CA) to issue it.

I vote A

I prefer C

A or C, I am not sure

Look @ this https://www.techtarget.com/searchsecurity/definition/registration-authority Here it states that it does everyting EXCEPT the issuing of the CERT. It also does revocation. In short, answer 'A'

The answer should be (A) CRL. I didn't pay an attention to limitation in the question

The Answer is C In CISSP 8th Edition guide the following is mentioned: Registration authorities (RAs) assist CAs with the burden of verifying users’ identities prior to issuing digital certificates. They do not directly issue certificates themselves, but they play an important role in the certification process, allowing CAs to remotely validate user identities.