How do PKI and key management relate to TA duties?

• A. PKI provides digital certificates for identity and encryption; key management ensures secure generation, storage, rotation, and revocation of keys.
• B. Key management is only for symmetric keys, not PKI.
• C. PKI is optional for TA duties.
• D. PKI and key management are unrelated.

Answer: (C)

PKI and key management are about establishing and maintaining trust in digital interactions. PKI provides digital certificates that bind an identity to a public key, so others can verify who you are and encrypt data for you. A certificate authority signs those certificates, and mechanisms like certificate revocation lists or OCSP let you know when a certificate should no longer be trusted. This makes authentication and secure communication possible across systems and users.

Key management covers the lifecycle of cryptographic keys: generating them securely, storing them safely (often in hardware safeguards), rotating them on schedule, and revoking them if a key is compromised or a role changes. Proper key management also includes controlling access to keys, backing them up, and ensuring recoverability.

For a trusted agent, these tools are central because you rely on certificates to prove identities, sign or verify messages and attestations, and protect the confidentiality and integrity of communications. If keys are poorly protected or a certificate is not properly managed, trust can crumble even if PKI exists, so both elements work together to support secure, trustworthy operations.

The idea that PKI is optional doesn’t align with how these duties are typically carried out. PKI provides a standardized, scalable way to establish and verify identity and trust, while key management ensures that those trust mechanisms remain secure over time.