ExamGecko
Question list
Search
Search

List of questions

Search

Question 37 - NSE6_FAC-6.4 discussion

Report
Export

What happens when a certificate is revoked? (Choose two)

A.
Revoked certificates cannot be reinstated for any reason
Answers
A.
Revoked certificates cannot be reinstated for any reason
B.
All certificates signed by a revoked CA certificate are automatically revoked
Answers
B.
All certificates signed by a revoked CA certificate are automatically revoked
C.
Revoked certificates are automatically added to the CRL
Answers
C.
Revoked certificates are automatically added to the CRL
D.
External CAs will priodically query Fortiauthenticator and automatically download revoked certificates
Answers
D.
External CAs will priodically query Fortiauthenticator and automatically download revoked certificates
Suggested answer: B, C

Explanation:

When a certificate is revoked, it means that it is no longer valid and should not be trusted by any entity. Revoked certificates are automatically added to the certificate revocation list (CRL) which is published by the issuing CA and can be checked by other parties. If a CA certificate is revoked, all certificates signed by that CA are also revoked and added to the CRL. Revoked certificates can be reinstated if the reason for revocation is resolved, such as a compromised private key being recovered or a misissued certificate being corrected. External CAs do not query FortiAuthenticator for revoked certificates, but they can use protocols such as SCEP or OCSP to exchange certificate information with FortiAuthenticator. Reference: https://docs.fortinet.com/document/fortiauthenticator/6.4/administrationguide/ 372408/certificate-management

asked 18/09/2024
JULIUS BALNEG
37 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first