Which of the following provides a static record of all certificates that are no longer valid?

The correct answer is C. CRLs. A CRL (Certificate Revocation List) is a digitally signed, static list published by a Certificate Authority (CA) that enumerates all certificates that have been revoked before their scheduled expiration date. It is 'static' in the sense that it is a snapshot published at…

General security concepts

Question

Options

APrivate key
BRecovery agent
CCRLs
DCA

How the community answered

(25 responses)

B
4% (1)
C
92% (23)
D
4% (1)

Explanation

A CRL (Certificate Revocation List) is a digitally signed, static list published by a Certificate Authority (CA) that enumerates all certificates that have been revoked before their scheduled expiration date. It is 'static' in the sense that it is a snapshot published at intervals. A private key (choice A) is used for decryption and signing, not for tracking validity. A recovery agent (choice B) is used to recover encrypted data when a user's key is lost. A CA (choice D) is the authority that issues and signs certificates, but the CRL is the specific artifact that lists invalid ones. The dynamic/real-time alternative to a CRL is OCSP (Online Certificate Status Protocol).

Topics

#CRL#PKI#certificate revocation#certificate management

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice