The finance department works with a bank which has recently had a number of cyber attacks. The finance
department is concerned that the banking website certificates have been compromised. Which of the following
can the finance department check to see if any of the bank’s certificates are still valid?

A.
Bank’s CRL

B.
Bank’s private key

C.
Bank’s key escrow

D.
Bank’s recovery agent

Explanation:
The finance department can check if any of the bank’s certificates are in the CRL or not. If a certificate is not in
the CRL, then it is still valid.
The CRL (Certificate revocation list) is exactly what its name implies: a list of subscribers paired with digital
certificate status. The list enumerates revoked certificates along with the reason(s) for revocation. The dates of
certificate issue, and the entities that issued them, are also included. In addition, each list contains a proposed
date for the next release.