The finance department works with a bank which has recently had a number of cyber attacks. The finance department is concerned that the banking website certificates have been compromised. Which of…

The correct answer is A. Bank's CRL. A Certificate Revocation List (CRL) is a published list maintained by a Certificate Authority (CA) that identifies certificates that have been revoked before their expiration date-for example, due to compromise. Checking the bank's CRL allows the finance department to verify…

General security concepts

Question

The finance department works with a bank which has recently had a number of cyber attacks. The finance department is concerned that the banking website certificates have been compromised. Which of the following can the finance department check to see if any of the bank's certificates are still valid?

Options

ABank's CRL
BBank's private key
CBank's key escrow
DBank's recovery agent

How the community answered

(27 responses)

A
96% (26)
C
4% (1)

Explanation

A Certificate Revocation List (CRL) is a published list maintained by a Certificate Authority (CA) that identifies certificates that have been revoked before their expiration date-for example, due to compromise. Checking the bank's CRL allows the finance department to verify whether any of the bank's certificates have been invalidated. Option B (private key) is secret and inaccessible to outside parties. Option C (key escrow) is a mechanism for storing keys with a trusted third party for recovery purposes, not for checking validity. Option D (recovery agent) is used for data recovery, not certificate status verification.

Topics

#CRL#certificate revocation#PKI#digital certificates

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice