70-648 · Question #53
Your network contains an Active Directory forest. All client computers run Windows 7. The network contains a high-volume enterprise certification authority (CA). You need to minimize the amount of…
The correct answer is B. Configure an Online Certification Status Protocol (OCSP) responder. An OCSP does not need a full CRL but can still respond to and validate certificate requests, so using it reduces the load from the enterprise CA. Changing settings for the delta CRL could reduce the amount of data transmitted with each CRL, but depending on the frequency of…
Question
Your network contains an Active Directory forest. All client computers run Windows 7. The network contains a high-volume enterprise certification authority (CA). You need to minimize the amount of network bandwidth required to validate a certificate. What should you do? Microsoft 70-648 Exam
Options
- AModify the settings of the delta certificate revocation list (CRL).
- BConfigure an Online Certification Status Protocol (OCSP) responder.
- CConfigure an LDAP publishing point for the certificate revocation list (CRL).
- DReplicate the certificate revocation list (CRL) by using Distributed File System (DFS).
How the community answered
(28 responses)- A4% (1)
- B86% (24)
- C4% (1)
- D7% (2)
Explanation
An OCSP does not need a full CRL but can still respond to and validate certificate requests, so using it reduces the load from the enterprise CA. Changing settings for the delta CRL could reduce the amount of data transmitted with each CRL, but depending on the frequency of which it's published, could still generate high volume traffic compared to the OCSP. Using DFS does not reduce the amount of data that is being transmitted over the network.
Topics
Community Discussion
No community discussion yet for this question.