Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
CompTIA Security+ · CompTIA
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Patching the CA: The root cause of the exploitation was a flaw within the internal Public Key Infrastructure (PKI) system itself. In order to properly remediate the underlying issue and prevent attackers from using specially crafted certificates to escalate privileges in the future, the Certificate Authority (CA) must be patched with software updates, security fixes, or configuration corrections. Explanation of the Incorrect Options Updating the CRL: A Certificate Revocation List (CRL) update is used to invalidate individual certificates that are compromised. While it might be a temporary containment step for specific bad certificates, updating a CRL does not fix the software flaw in the PKI that allowed the certificates to be forged or abused in the first place.
Answer is A... Attackers already gained access with another certificate,So updating CRL will lock these out.Patching CA might benefit mitigation.
A. Updating the CRL (Certificate Revocation List) Revoking compromised or rogue certificates is critical. Updating the CRL ensures that previously issued malicious certificates are no longer trusted. This directly addresses the abuse of certificates during the attack. B. Patching the CA (Certificate Authority) Also important for long-term remediation (to close the flaw). But patching alone doesn’t immediately mitigate the fact that malicious certificates may already exist and remain valid. This is a prevention step, not cleanup.