1) Which of the following are responsibilities of the certificate authority (CA) that cannot be outsourced? (Choose all that apply.)

• Key escrow
• Key recovery
• Key generation
• Identity proofing
• Maintaining the CRL

2) Public keys of compromised certificates can be found in which ways? (Choose all that apply.)

• CRL
• Bcrypt
• PBKDF2
• OCSP
• Blowfish

3) A security administrator uses third-party certificate authorities plus their own set of enterprise certificate authorities. How is a list of trusted certificate authorities delivered to a browser? (Choose all that apply.)

• Registration Authority (RA)
• Group policy
• Online Certificate Status Protocol (OCSP)
• Certificate Authority (CA)
• Browser manufacturer