nerdexam
CompTIA

SY0-301 · Question #679

When employees that use certificates leave the company they should be added to which of the following?

The correct answer is C. CRL. When an employee with a certificate leaves, their certificate must be added to the Certificate Revocation List (CRL) to inform relying parties that the certificate is no longer valid.

General security concepts

Question

When employees that use certificates leave the company they should be added to which of the following?

Options

  • APKI
  • BCA
  • CCRL
  • DTKIP

How the community answered

(30 responses)
  • A
    3% (1)
  • B
    7% (2)
  • C
    90% (27)

Why each option

When an employee with a certificate leaves, their certificate must be added to the Certificate Revocation List (CRL) to inform relying parties that the certificate is no longer valid.

APKI

PKI (Public Key Infrastructure) is the overall framework of policies, hardware, and software that manages digital certificates, not a specific list for revoked certificates.

BCA

The CA (Certificate Authority) is the entity that issues and signs certificates; it manages the CRL but is not itself the revocation list.

CCRLCorrect

The CRL is a list maintained by the Certificate Authority that contains the serial numbers of certificates that have been revoked before their expiration date. Adding a departed employee's certificate to the CRL ensures that any system or person validating that certificate will be notified it is no longer trusted, preventing misuse of credentials after the employee has left.

DTKIP

TKIP (Temporal Key Integrity Protocol) is a deprecated wireless encryption protocol used in WPA and has no relationship to certificate revocation.

Concept tested: Certificate revocation list management in PKI

Source: https://learn.microsoft.com/en-us/windows-server/networking/core-network-guide/cncg/server-certs/configure-the-cdp-and-aia-extensions-on-ca1

Topics

#CRL#PKI#certificate revocation

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice