Exam CIPT topic 1 question 35 discussion

I think C is the answer because disreputable CA will make their certificate questionable

The correct answer is C. Disreputable certificate authorities. Disreputable certificate authorities (CAs) can undermine the public key infrastructure (PKI) system. PKI relies on trusted certificate authorities to issue and manage digital certificates that verify the identity of entities (such as websites). If a CA is compromised or behaves unethically, it can issue fraudulent certificates, leading to a breakdown in trust within the PKI system. This can result in security breaches, such as man-in-the-middle attacks, where attackers can impersonate legitimate entities. While the other options describe potential security issues, the integrity and trustworthiness of certificate authorities are fundamental to the overall security of PKI.

Agree about C ... D is a local impact

Privacy for Technology book also mentions when DigiNotar, a Dutch CA owned by VASCO Data Security International, apparently issued a certificate for the domain name *.google.com. The problem is that DigiNotar didn’t issue the certificate to Google—it appears that it was issued by the government of Iran, which allegedly used the certificate to spy on Iranian citizens accessing Gmail and Google docs.