CISSP-ISSAP: Information Systems Security Architecture Professional

By ISC · Question Mode

QuestionQ102

VerifiedInfrastructure and System Security

An organization wants to enable a certificate authority to access encrypted data and generate digital signatures on a user’s behalf. The data is encrypted with the public key from a user’s certificate. Which process meets these requirements?

Explanation

Key escrow entrusts a copy of a user’s private key to an authorized third party. That private key can decrypt data encrypted with its corresponding public key and can produce digital signatures for the user.

Community Discussion

No comments yet. Be the first to start the discussion!