Which entity is primarily responsible for maintaining rosters and notifying the organizational commander when a Trusted Agent is removed for cause?

• A. Subscriber
• B. Trusted Agent
• C. Registration Authority
• D. Local Registration Authority

Answer: (C)

Think in terms of who manages identity enrollment and organizational governance within a PKI. The Registration Authority is the part of the system that verifies who can receive certificates and then keeps the official roster of approved certificate holders within the organization. When a trusted agent is removed for cause, the RA updates that roster and coordinates with organizational leadership so the change is acknowledged and appropriate access can be revoked. This role is precisely what ties identity management to organizational oversight.

The Certification Authority issues certificates and handles revocation data, but it doesn’t maintain the day-to-day roster of trusted agents or handle the organizational notifications that follow a removal. The Local Registration Authority handles enrollment at a local level, but broader roster maintenance and organizational notification responsibilities sit with the Registration Authority.