CISSP-ISSAP: Information Systems Security Architecture Professional

By ISC · Question Mode

QuestionQ20

VerifiedIdentity and Access Management (IAM) Architecture

Public Key Infrastructure (PKI) comprises the hardware, software, people, policies, and procedures required to create, manage, distribute, use, store, and revoke digital certificates. Which PKI component is used to list certificates that have been revoked or are no longer valid?

Explanation

A Certificate Revocation List (CRL) is the PKI mechanism that publishes the serial numbers of certificates revoked before their scheduled expiration, allowing relying parties to determine that those certificates are no longer valid.

Community Discussion

No comments yet. Be the first to start the discussion!