Which of the following should a security technician implement to identify untrusted certificates?

The correct answer is C. CRL. A Certificate Revocation List (CRL) is a published list of digital certificates that have been revoked by their issuing Certificate Authority (CA) before their scheduled expiration date. When a certificate is compromised, mis-issued, or associated with a terminated entity, it…

General security concepts

Question

Options

ACA
BPKI
CCRL
DRecovery agent

How the community answered

(19 responses)

B
5% (1)
C
89% (17)
D
5% (1)

Explanation

A Certificate Revocation List (CRL) is a published list of digital certificates that have been revoked by their issuing Certificate Authority (CA) before their scheduled expiration date. When a certificate is compromised, mis-issued, or associated with a terminated entity, it is added to the CRL. Systems checking a certificate's validity query the CRL to determine if it should be trusted. This is the mechanism used to identify untrusted certificates. A CA (Option A) issues certificates but does not by itself identify untrusted ones. PKI (Option B) is the overarching framework of policies and technologies - not a specific identification mechanism. A Recovery Agent (Option D) is used to decrypt data when a user's key is lost, unrelated to certificate trust status.

Topics

#CRL#certificate revocation#PKI#certificate management

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice