CompTIA Security+ Question B-10

A security administrator needs a locally stored record to remove the certificates of a terminated employee. Which of the following describes a service that could meet these requirements?

A. OCSP
B. PKI
C. CA
D. CRL

Answer: D

Explanation:
A CRL is a locally stored record containing revoked certificates and revoked keys.