Which of the following is true about the recovery agent?

A.
It can decrypt messages of users who lost their private key.

B.
It can recover both the private and public key of federated users.

C.
It can recover and provide users with their lost or private key.

D.
It can recover and provide users with their lost public key.

Explanation:
A key recovery agent is an entity that has the ability to recover a private key, key components, or
plaintext messages as needed. Using the recovered key the recovery agent can decrypt encrypted data.
Incorrect Answers:
B: The key recovery agent does not recover the public key.
The key recovery agent recovers the private key which then is used to decrypt the data.
C: The key recovery agent does indeed recovery the private key.
D: The key recovery agent does not recover the public key.

Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, 6th Edition, Sybex, Indianapolis,
2014, pp. 279-285