A private key/public key pair is usually created by the ________.

• A. Both A and B
• B. PKI server
• C. Client
• D. Neither A nor B

Answer: (C)

The key pair is usually created by the client to keep the private key under the user’s control and never expose it to the server. In practice, a user or their device generates the private/public keys locally, then presents the public key to the PKI in a certificate request. The PKI (certificate authority) verifies identity and issues a certificate that binds that public key to the user. The private key remains with the client, enabling secure authentication and encryption without risking exposure on the server. While a PKI can issue certificates and help manage keys, it does not ordinarily generate the user’s private key; doing so would undermine the confidentiality and ownership of the key pair.