nerdexam
CompTIA

SY0-701 · Question #406

During a penetration test, a flaw in the internal PKI was exploited to gain domain administrator rights using specially crafted certificates. Which of the following remediation tasks should be…

The correct answer is A. Updating the CRL. The first priority is to revoke any compromise certificates. This ensures that those certificates can no longer be used for unauthorized access.

Submitted by stefanr· Mar 6, 2026Threats, vulnerabilities, and mitigations

Question

During a penetration test, a flaw in the internal PKI was exploited to gain domain administrator rights using specially crafted certificates. Which of the following remediation tasks should be completed as part of the cleanup phase?

Options

  • AUpdating the CRL
  • BPatching the CA
  • CChanging passwords
  • DImplementing SOAR

How the community answered

(24 responses)
  • A
    75% (18)
  • B
    4% (1)
  • C
    17% (4)
  • D
    4% (1)

Explanation

The first priority is to revoke any compromise certificates. This ensures that those certificates can no longer be used for unauthorized access.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice