nerdexam
CompTIA

LX0-104 · Question #402

Which GPG command is used to create a revocation certificate in case a GPG key ever needs to be cancelled?

The correct answer is A. gpg genrevoke name. A revocation certificate is essential for invalidating a GPG key, allowing you to publicly declare it compromised or no longer in use.

Security

Question

Which GPG command is used to create a revocation certificate in case a GPG key ever needs to be cancelled?

Options

  • Agpg genrevoke name
  • Bgpg editkey name followed with the revoke command.
  • Cgpg revoke name
  • Dgpg createrevoke name

How the community answered

(25 responses)
  • A
    92% (23)
  • C
    4% (1)
  • D
    4% (1)

Why each option

A revocation certificate is essential for invalidating a GPG key, allowing you to publicly declare it compromised or no longer in use.

Agpg genrevoke nameCorrect

The gpg --gen-revoke name command specifically generates a revocation certificate for the specified key, which can later be imported to mark the key as invalid on key servers and local keyrings.

Bgpg editkey name followed with the revoke command.

While gpg --edit-key provides key management, the 'revoke' command within it is used to revoke user IDs on the key, not to generate a standalone revocation certificate for the entire key.

Cgpg revoke name

gpg revoke name is not a standard top-level GPG command for generating a revocation certificate.

Dgpg createrevoke name

gpg createrevoke name is not a standard GPG command for generating a revocation certificate.

Concept tested: GPG key revocation certificate creation

Source: https://www.gnupg.org/gph/en/manual/x127.html

Topics

#GPG#key revocation#revocation certificate

Community Discussion

No community discussion yet for this question.

Full LX0-104 Practice