Study. uk . com
  1. Home
  2. All questions
  3. Question 252

CISSP study material · question 252 of 500

An engineer must permit a key to verify signatures on delta certificate revocation lists. Which keyUsage bit governs that?

  1. cRLSign, which covers revocation lists including delta and authority revocation lists.
  2. digitalSignature, since a revocation list is an ordinary signed object.
  3. keyCertSign, since revocation lists are issued by the same authority.
  4. nonRepudiation, since revocation must be undeniable.
Show the answer

Answer: A. cRLSign, which covers revocation lists including delta and authority revocation lists.

That bit is what marks a key as permitted to check signatures over revocation lists, and it covers delta and authority variants of them too.

Source: RFC 5280 (IETF) — RFC 5280 > 4.2.1.3 Key Usage

Challenge yourself on this topic → Study as cards