Which action revokes a certificate for a user due to compromise?

Which action revokes a certificate for a user due to compromise?

• A. Unrevoke CorpDev3
• B. Revoke bchan's certificate using Key Compromise
• C. Approve tsutton's certificate
• D. Deny CorpSrv12's request

Answer: (B)

When a private key is compromised, the certificate tied to that key must be revoked to stop its trust and use. Revoking with the reason Key Compromise clearly communicates that the private key was exposed and that the certificate should no longer be trusted. This status is then propagated through certificate revocation mechanisms like CRLs or OCSP so clients won't rely on it. Other actions don’t fit this need: undoing a revocation would re-enable a compromised certificate, issuing a new certificate is about creation, and denying a certificate request is about preventing issuance, not addressing an already issued certificate.

When a private key is compromised, the certificate tied to that key must be revoked to stop its trust and use. Revoking with the reason Key Compromise clearly communicates that the private key was exposed and that the certificate should no longer be trusted. This status is then propagated through certificate revocation mechanisms like CRLs or OCSP so clients won't rely on it. Other actions don’t fit this need: undoing a revocation would re-enable a compromised certificate, issuing a new certificate is about creation, and denying a certificate request is about preventing issuance, not addressing an already issued certificate.