ITPEC IP October 2024 Question 39
ITPEC IP October 2024 — Question 39 of 100
If a private key is leaked, the certificate authority should be asked to revoke the corresponding digital certificate immediately. Anyone possessing the compromised private key may impersonate its owner or create signatures that appear valid. Revocation tells relying parties that the certificate must no longer be trusted. A fresh key pair and replacement certificate should then be created through the proper procedure.
Answer (b)
Why not others:
- (a) reissuing with the same compromised key pair preserves the vulnerability
- (c) waiting for normal expiration leaves the compromised certificate usable in the meantime
- (d) the certificate's public key is linked to the leaked private key, so continued use is unsafe
Key rule: Private-key compromise invalidates trust in its certificate: revoke promptly, then replace the key pair and certificate.
AI-generated — may contain errors
The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.