Which of the following is a best practice for cryptographic key management?

Question $39$ options:

Frequently used keys should have the shortest lifetime.

Require offline storage and recovery of key revocation lists.

Use public$/$private key cryptography to guarantee arrival of digital envelopes.

Store symmetric keys in volatile memory to prevent compromise.