A CRL is comprised of:

The correct answer is D. Public keys. A Certificate Revocation List (CRL) is a list published by a Certificate Authority (CA) that contains digital certificates that have been revoked before their expiration date. Digital certificates bind an identity to a public key, so a CRL is effectively a list of public keys…

General security concepts

Question

Options

AMalicious IP addresses.
BTrusted CA's.
CUntrusted private keys.
DPublic keys.

How the community answered

(53 responses)

B
4% (2)
C
2% (1)
D
94% (50)

Explanation

A Certificate Revocation List (CRL) is a list published by a Certificate Authority (CA) that contains digital certificates that have been revoked before their expiration date. Digital certificates bind an identity to a public key, so a CRL is effectively a list of public keys (via their associated certificates) that are no longer trusted. When a client encounters a certificate, it checks the CRL to verify the certificate has not been revoked. The other options are incorrect: CRLs do not contain malicious IP addresses (that would be a blocklist), trusted CAs (that is a trust store), or untrusted private keys (private keys are never distributed publicly).

Topics

#CRL#PKI#public key infrastructure#certificate management

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice