Which technology is used to issue certificates and manage public keys for users within a system?

• A. Virtual Private Network
• B. Single Sign-On
• C. Public Key Infrastructure
• D. Identity and Access Management

Answer: (C)

Public Key Infrastructure (PKI) is the framework used to issue digital certificates and manage the public keys of users within a system. PKI establishes trusted authorities that issue certificates tying a user’s identity to a public key, and it covers the lifecycle of those certificates—from issuance and renewal to revocation. It also includes mechanisms to verify certificate validity (such as certificate databases and status checking) and to securely manage private keys on the user side. With PKI, you gain trusted authentication, encrypted communications, and digital signatures that provide data integrity and non-repudiation.

VPN is about creating secure tunnels for network traffic, not issuing certificates or managing user keys. Single Sign-On streamlines authentication across multiple systems, but it does not provide the certificate issuance and key-management framework. Identity and Access Management covers broader identity governance and access controls; PKI is the specific technology that handles certificates and public-key management within a system.