Exam SY0-701 topic 1 question 533 discussion

The correct answer is: B. CRL (Certificate Revocation List) Explanation: CRL (Certificate Revocation List) is a list of digital certificates that have been revoked or expired before their scheduled expiration date. Certificate authorities (CAs) use CRLs to publicly post information about certificates that are no longer valid, ensuring that relying parties can check the status of a certificate. TPM (Trusted Platform Module) (A) is a hardware component used for secure cryptographic operations, not related to posting expired certificate information. PKI (Public Key Infrastructure) (C) is the framework that manages digital certificates and public-key encryption, but it is not a specific mechanism for posting expired certificate information. CSR (Certificate Signing Request) (D) is a request sent to a CA to issue a digital certificate, which is unrelated to posting expired certificate information.

A Certificate Revocation List (CRL) would accomplish the task of posting information about expired or revoked certificates. The CRL is a record of digital certificates that have been revoked, and it is created and signed by a Certificate Authority. This list provides a simple way of indicating which certificates are no longer valid and should not be trusted.