Which PKI model consists of a root CA and intermediate CAs?

• A. Hierarchical Trust Model
• B. Tokenization
• C. Steganography
• D. Certificate Revocation List (CRL)

Answer: (A)

A hierarchical PKI trust model uses a root CA at the top and intermediate CAs beneath it, forming a chain of trust. In this setup, the root CA signs certificates for one or more intermediate CAs, which in turn issue certificates to end entities. This structure keeps the root highly secure and offline while intermediates handle routine certificate issuance, enabling scalable management and straightforward revocation paths.

The other options don’t describe how a PKI is organized: tokenization replaces sensitive data with surrogate tokens, steganography hides messages within other media, and a Certificate Revocation List is simply a list of revoked certificates rather than a model for issuing and managing certificates.