SY0-301 · Question #679
When employees that use certificates leave the company they should be added to which of the following?
The correct answer is C. CRL. When an employee with a certificate leaves, their certificate must be added to the Certificate Revocation List (CRL) to inform relying parties that the certificate is no longer valid.
Question
When employees that use certificates leave the company they should be added to which of the following?
Options
- APKI
- BCA
- CCRL
- DTKIP
How the community answered
(30 responses)- A3% (1)
- B7% (2)
- C90% (27)
Why each option
When an employee with a certificate leaves, their certificate must be added to the Certificate Revocation List (CRL) to inform relying parties that the certificate is no longer valid.
PKI (Public Key Infrastructure) is the overall framework of policies, hardware, and software that manages digital certificates, not a specific list for revoked certificates.
The CA (Certificate Authority) is the entity that issues and signs certificates; it manages the CRL but is not itself the revocation list.
The CRL is a list maintained by the Certificate Authority that contains the serial numbers of certificates that have been revoked before their expiration date. Adding a departed employee's certificate to the CRL ensures that any system or person validating that certificate will be notified it is no longer trusted, preventing misuse of credentials after the employee has left.
TKIP (Temporal Key Integrity Protocol) is a deprecated wireless encryption protocol used in WPA and has no relationship to certificate revocation.
Concept tested: Certificate revocation list management in PKI
Source: https://learn.microsoft.com/en-us/windows-server/networking/core-network-guide/cncg/server-certs/configure-the-cdp-and-aia-extensions-on-ca1
Topics
Community Discussion
No community discussion yet for this question.