A Trusted Agent may ______.

• A. Create CRI's
• B. Create ASCL Tokens
• C. Enroll a first NSS token
• D. None of the Above

Answer: (D)

A trusted agent operates with limited, delegated privileges and does not take ownership of creating or provisioning critical cryptographic artifacts. The tasks listed—creating credential revocation information, creating a specific type of security token, or enrolling a first NSS (Network Security Services) token—are operations that involve generating or provisioning security material and trust anchors. These are typically reserved for roles with higher-level authorization (such as administrators or enrollment authorities) because they directly affect the security foundation of the system.

So none of those actions fall under what a trusted agent is allowed to do, which is why the correct answer is none of the above. If you encounter these tasks in practice, they would normally be handled by a higher-privilege role, not by a trusted agent.