SY0-301 · Question #416
A CA is compromised and attacks start distributing maliciously signed software updates. Which of the following can be used to warn users about the malicious activity?
The correct answer is D. Certificate revocation list. A Certificate Revocation List (CRL) (D) is a published list maintained by a CA that contains the serial numbers of certificates that have been revoked and should no longer be trusted. When a CA is compromised and fraudulent certificates are issued, the legitimate CA (or its…
Question
A CA is compromised and attacks start distributing maliciously signed software updates. Which of the following can be used to warn users about the malicious activity?
Options
- AKey escrow
- BPrivate key verification
- CPublic key verification
- DCertificate revocation list
How the community answered
(35 responses)- A6% (2)
- B3% (1)
- D91% (32)
Explanation
A Certificate Revocation List (CRL) (D) is a published list maintained by a CA that contains the serial numbers of certificates that have been revoked and should no longer be trusted. When a CA is compromised and fraudulent certificates are issued, the legitimate CA (or its successor) publishes a CRL so that clients checking certificate validity will see the malicious certificates listed as revoked and reject them. Key escrow is about storing copies of encryption keys, and public/private key verification does not address the revocation of already-issued certificates.
Topics
Community Discussion
No community discussion yet for this question.