Which of the following MUST be updated immediately when an employee is terminated to prevent
unauthorized access?

A.
Registration

B.
CA

C.
CRL

D.
Recovery agent

Explanation:
Certificates or keys for the terminated employee should be put in the CRL.

A certificate revocation list (CRL) is created and distributed to all CAs to revoke a certificate or
key.
By checking the CRL you can check if a particular certificate has been revoked.