What is the role of a certificate authority (CA) in PKI for MIPC?

• A. Host the application
• B. Issue and manage digital certificates trusted by clients and servers
• C. Encrypts data at rest
• D. Replaces user authentication

Answer: (B)

In PKI, the certificate authority is the trusted entity that issues and manages digital certificates that bind an identity to a public key. By signing certificates, the CA vouches for who owns a particular public key, allowing clients and servers to verify each other’s identity and establish secure, encrypted communications. The CA also handles certificate lifecycle tasks—renewal, revocation, and distribution of revocation status—so trust can be updated as needed. In MIPC, this means devices and services can trust each other through the CA’s root certificate and use the issued certificates to authenticate and encrypt data in transit.

This role isn’t about hosting applications, encrypting data at rest, or handling user authentication directly. Hosting an app is unrelated to PKI; encryption at rest is a separate security measure; and while certificates facilitate authentication, the CA itself doesn’t perform user login processes.