An application developer accidentally uploaded a company's code-signing certificate private key to a public web
server. The company is concerned about malicious use of its certificate. Which of the following should the
company do FIRST?


A. Delete the private key from the repository.
B. Verify the public key is not exposed as well.
C. Update the DLP solution to check for private keys.
D. Revoke the code-signing certificate.