nerdexam
CompTIA

SY0-301 · Question #416

A CA is compromised and attacks start distributing maliciously signed software updates. Which of the following can be used to warn users about the malicious activity?

The correct answer is D. Certificate revocation list. A Certificate Revocation List (CRL) (D) is a published list maintained by a CA that contains the serial numbers of certificates that have been revoked and should no longer be trusted. When a CA is compromised and fraudulent certificates are issued, the legitimate CA (or its…

Security operations

Question

A CA is compromised and attacks start distributing maliciously signed software updates. Which of the following can be used to warn users about the malicious activity?

Options

  • AKey escrow
  • BPrivate key verification
  • CPublic key verification
  • DCertificate revocation list

How the community answered

(35 responses)
  • A
    6% (2)
  • B
    3% (1)
  • D
    91% (32)

Explanation

A Certificate Revocation List (CRL) (D) is a published list maintained by a CA that contains the serial numbers of certificates that have been revoked and should no longer be trusted. When a CA is compromised and fraudulent certificates are issued, the legitimate CA (or its successor) publishes a CRL so that clients checking certificate validity will see the malicious certificates listed as revoked and reject them. Key escrow is about storing copies of encryption keys, and public/private key verification does not address the revocation of already-issued certificates.

Topics

#CRL#certificate revocation#CA compromise#PKI response

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice