What is the primary function of a digital certificate?

• A. To encrypt sensitive data
• B. To prove ownership of a public key
• C. To store passwords securely
• D. To manage network traffic

Answer: (B)

A digital certificate's primary function is to prove ownership of a public key. It serves as an electronic "passport" that verifies the identity of the entity that holds the associated private key. This verification is essential in establishing trust in various online communications, including secure websites and encrypted email.

Digital certificates are issued by trusted entities known as Certificate Authorities (CAs). They contain information about the identity of the certificate owner, the public key, the CA that issued the certificate, and the certificate's validity period. When a digital certificate is presented, it allows parties to confirm that the public key belongs to the stated owner, ensuring that they are communicating securely.

While encryption of sensitive data is an important aspect of network security, it is a distinct process that does not represent the primary function of a digital certificate. Similarly, digital certificates do not store passwords nor manage network traffic, which are unrelated to their main role of validating ownership of cryptographic keys.