🔥 40% Off Crucial Exams Memberships — This Week Only

2 days, 12 hours remaining!

ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

Your company must exchange sensitive research data with several external partners. The partners propose using their existing PGP keypairs, which they mutually sign and distribute. Your security architect instead recommends issuing X.509 certificates to all parties from the organization's AWS Private CA, following a traditional CA hierarchy. When evaluating these two approaches, which statement correctly identifies a fundamental difference between a PGP-style Web of Trust (WoT) and a hierarchical PKI?

  • Hierarchical PKI lacks any formal revocation capabilities, while a Web of Trust provides universally recognized certificate revocation lists.

  • A Web of Trust depends on a central registration authority to distribute certificates, whereas a hierarchical PKI relies on peer-to-peer key signing between users.

  • In a Web of Trust, users build trust by directly signing each other's keys, eliminating the need for a central certificate authority that is fundamental to a hierarchical PKI.

  • Hierarchical PKI cannot scale to large user communities, but a Web of Trust does so automatically through built-in path discovery and validation.

ISC2 Systems Security Certified Practitioner (SSCP)
Cryptography
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot