Which
of the following keys are included in a certificate revocation list (CRL) of a public key infrastructure
(PKI)? Each correct answer represents a complete solution. Choose two.

A.
A foreign key

B.
A private key

C.
A public key

D.
A primary key

Explanation:
A certificate revocation list (CRL) is a list of certificates (or more specifically, a list of
serial numbers for certificates) that have been revoked or
are no longer valid, and therefore should not be relied upon. Both public and private keys are
included in CRL.
A Public Key is known commonly to everybody. It is used to encrypt data. Only specific users can
decrypt it. Data encryption is used to encrypt
data so that it can only be decrypted with the corresponding private key owned by the public key
owner. The public key is also used to verify
digital signatures. This signature is created by the associated private key.
A private Key is an unpublished key in a public key cryptographic system. The private key is kept
secret and never transmitted over a network.
Answer options A and D are incorrect. Primary and foreign keys are not parts of a public key
infrastructure (PKI).