What is the purpose of a verifier trust store in certificate validation?

• A. It contains trusted CA certificates used as anchors for path validation
• B. It contains revoked certificates
• C. It contains private keys for servers
• D. It contains user credentials

Answer: (A)

The verifier trust store provides the trusted anchors for certificate path validation. It contains root (and sometimes intermediate) CA certificates that the system already trusts. When a certificate chain is presented, each certificate is verified up the chain until it leads to one of these trusted roots. If the chain chains up to a trusted CA in the store, the certificate is considered valid and trusted; if not, it’s rejected.

This is why the trust store is the place that anchors trust in certificates. It’s not for revoked certificates, which are checked via revocation lists or OCSP; it’s not for private keys, which are secret key material kept secure; and it’s not for user credentials, which are separate authentication data.