A systems administrator has implemented PKI on a classified government network. In the event that a
disconnect occurs from the primary CA, which of the following should be accessible locally from every site to
ensure users with bad certificates cannot gain access to the network?

A.
A CRL

B.
Make the RA available

C.
A verification authority

D.
A redundant CA

Explanation:
A certificate revocation list (CRL) is created and distributed to all CAs to revoke a certificate or key.
By checking the CRL you can check if a particular certificate has been revoked.