Based on the responsibility of being a CAC holder, "generating your own keys" is the correct answer.
However, this question is part of a popular assurance information questionnaire, and is sometimes formatted differently.
So if I just tell you the full set of responsibilities a CAC holder can expect, this should help you determine how best to answer this question if it comes up in a test or exam:
- Protect private key from exposure (anyone can assume your digital identity or use your digital signature) Ensure that no one gets access to your private pin or password.
- Remember your pin - currently this can only be reset by the ID issuance facility.
- Report loss or compromise of private key/CAC
