Question: What is the minimum recommended key length for RSA encryption when signing a Certificate Revocation List (CRL) according to Network Domain Security (NDS) guidelines, considering future security requirements beyond 2030?
Option 1: 1024-bit
Option 2: 3072-bit
Option 3: 2048-bit
Option 4: 4096-bit
Explanation: While the minimum required key length for RSA is mentioned as 2048-bit, with a recommendation to support at least 4096-bit, the specific consideration for certificates expiring after 2030 is that key lengths less than 3072-bits should not be used due to planned prohibitions by several organizations. Thus, for future-proofing beyond 2030, the minimum recommended key length aligns with this forward-looking security stance.