A technician states that workstations that are on the network in location B are unable to validate certificates, while workstations that are on the main location A's network are having no issues…

The correct answer is B. OCSP. OCSP (Online Certificate Status Protocol) is the correct answer. OCSP allows a client to send a request to a single OCSP responder server, which replies in real time with the current validity status (good, revoked, or unknown) of a specific certificate. Unlike a CRL…

Technical Integration of Enterprise Components

Question

A technician states that workstations that are on the network in location B are unable to validate certificates, while workstations that are on the main location A's network are having no issues. Which of the following methods allows a certificate to be validated by a single server that returns the validity of that certificate?

Options

AXACML
BOCSP
CACL
DCRL

How the community answered

(28 responses)

A
4% (1)
B
89% (25)
D
7% (2)

Explanation

OCSP (Online Certificate Status Protocol) is the correct answer. OCSP allows a client to send a request to a single OCSP responder server, which replies in real time with the current validity status (good, revoked, or unknown) of a specific certificate. Unlike a CRL (Certificate Revocation List), which is a downloadable file that clients must retrieve and parse locally, OCSP involves querying a dedicated server. Location B clients likely cannot reach the OCSP responder due to a network/firewall issue, preventing certificate validation. XACML is an XML-based access control policy language, ACL is an access control list, and CRL is a downloaded list - none of these involve a single server returning real-time certificate status on demand.

Topics

#OCSP#certificate validation#PKI#CRL

Community Discussion

No community discussion yet for this question.

Full CAS-001 Practice