SY0-701 · Question #666
A certificate authority needs to post information about expired certificates. Which of the following would accomplish this task?
The correct answer is B. CRL. CRL (Certificate Revocation List) is a digitally signed list published by a Certificate Authority (CA) that contains all certificates it has revoked or marked as expired/invalid before their scheduled expiration - exactly what the question describes. TPM (Trusted Platform…
Question
A certificate authority needs to post information about expired certificates. Which of the following would accomplish this task?
Options
- ATPM
- BCRL
- CPKI
- DCSR
How the community answered
(24 responses)- A4% (1)
- B92% (22)
- C4% (1)
Explanation
CRL (Certificate Revocation List) is a digitally signed list published by a Certificate Authority (CA) that contains all certificates it has revoked or marked as expired/invalid before their scheduled expiration - exactly what the question describes.
- TPM (Trusted Platform Module) is a hardware security chip used for storing cryptographic keys and attestation; it has nothing to do with publishing certificate status.
- PKI (Public Key Infrastructure) is the broader framework of policies, roles, and procedures that includes CAs and CRLs - it's the system, not the mechanism for posting revoked certs.
- CSR (Certificate Signing Request) is a message sent to a CA when requesting a new certificate; it's used for creation, not revocation.
Memory tip: Think "CRL = Cancel/Revoke List" - when a CA needs to cancel a cert and tell the world about it, the CRL is the public bulletin board where that announcement lives.
Topics
Community Discussion
No community discussion yet for this question.