nerdexam
CompTIA

SY0-301 · Question #803

A system administrator is notified by a staff member that their laptop has been lost. The laptop contains the user's digital certificate. Which of the following will help resolve the issue? (Select TW

The correct answer is A. Revoke the digital certificate D. Issue a new digital certificate. Two immediate actions are required: (A) Revoke the digital certificate - the lost certificate must be invalidated immediately by adding it to the Certificate Revocation List (CRL) or via OCSP, so that anyone who finds the laptop cannot impersonate the user. (D) Issue a new digita

General security concepts

Question

A system administrator is notified by a staff member that their laptop has been lost. The laptop contains the user's digital certificate. Which of the following will help resolve the issue? (Select TWO).

Options

  • ARevoke the digital certificate
  • BMark the key as private and import it
  • CRestore the certificate using a CRL
  • DIssue a new digital certificate
  • ERestore the certificate using a recovery agent

How the community answered

(47 responses)
  • A
    96% (45)
  • C
    2% (1)
  • E
    2% (1)

Explanation

Two immediate actions are required: (A) Revoke the digital certificate - the lost certificate must be invalidated immediately by adding it to the Certificate Revocation List (CRL) or via OCSP, so that anyone who finds the laptop cannot impersonate the user. (D) Issue a new digital certificate - the user still needs a valid certificate to continue working. Options B and E are incorrect because marking a key private or using a recovery agent address key recovery for encrypted data, not certificate replacement. Option C misunderstands CRL - it is used to check revocation status, not to restore a certificate.

Topics

#certificate revocation#PKI#CRL#certificate lifecycle

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice