210-250 · Question #137
Which purpose of the certificate revocation list is true?
The correct answer is D. Provide a list of certificates of certificates that are untrusted regardless of other validity makers. A Certificate Revocation List (CRL) is a signed list published by a Certificate Authority (CA) that enumerates digital certificates that have been revoked before their natural expiration date-due to key compromise, CA compromise, or other reasons. Once a certificate appears on…
Question
Which purpose of the certificate revocation list is true?
Options
- AProvide a list of certificates that are trusted regardless of other validity makers.
- BProvide a list of certificates used in the chain of trust
- CProvide a list of alternate device identifiers.
- DProvide a list of certificates of certificates that are untrusted regardless of other validity makers.
How the community answered
(46 responses)- B4% (2)
- C2% (1)
- D93% (43)
Explanation
A Certificate Revocation List (CRL) is a signed list published by a Certificate Authority (CA) that enumerates digital certificates that have been revoked before their natural expiration date-due to key compromise, CA compromise, or other reasons. Once a certificate appears on the CRL, it must be treated as untrusted regardless of whether it is otherwise unexpired or structurally valid. Option A is wrong because the CRL lists untrusted certs, not trusted ones. Option B describes a certificate chain/path, not a CRL. Option C is unrelated-CRLs contain no alternate device identifiers. OCSP (Online Certificate Status Protocol) is the modern alternative to CRLs for real-time revocation checking.
Topics
Community Discussion
No community discussion yet for this question.