Question: When a Transport Layer Security (TLS) server is decommissioned from a telecommunications network, what action should the operator take regarding the server's certificate to prevent potential security breaches?
Option 1: Immediately revoke the certificate and update the Certificate Revocation List (CRL) after a grace period.
Option 2: Permanently store the certificate in an archive for future reference, without updating the CRL or OCSP server.
Option 3: Ensure the certificate is listed in the Certificate Revocation List (CRL) or made available through an Online Certificate Status Protocol (OCSP) server.
Option 4: Destroy all records of the certificate to minimize storage requirements.
Explanation: When a TLS server is removed from the network, it's crucial to prevent its certificate from being used for potential malicious activities. By ensuring the certificate is listed in the CRL (Certificate Revocation List) or made available through an OCSP (Online Certificate Status Protocol) server, the operator effectively notifies the network and its components that the TLS server's certificate is no longer valid, thereby preventing its misuse. This action aligns with best practices for maintaining network security upon device decommissioning.