CAS-002 · Question #732
Which of the following statements are true about OCSP and CRL? Each correct answer represents a complete solution. Choose all that apply.
The correct answer is A. The OCSP checks certificate status in real time B. The CRL is a list of subscribers paired with digital certificate status. C. The main limitation of CRL is the fact that updates must be frequently downloaded to keep. Certificate Revocation List (CRL) is one of the two common methods when using a public key infrastructure for maintaining access to servers in a network. Online Certificate Status Protocol (OCSP), a newer method, has superseded CRL in some cases. The CRL is a list of…
Question
Which of the following statements are true about OCSP and CRL? Each correct answer represents a complete solution. Choose all that apply.
Options
- AThe OCSP checks certificate status in real time
- BThe CRL is a list of subscribers paired with digital certificate status.
- CThe main limitation of CRL is the fact that updates must be frequently downloaded to keep
- DThe CRL allows the authenticity of a certificate to be immediately verified.
How the community answered
(17 responses)- A88% (15)
- D12% (2)
Explanation
Certificate Revocation List (CRL) is one of the two common methods when using a public key infrastructure for maintaining access to servers in a network. Online Certificate Status Protocol (OCSP), a newer method, has superseded CRL in some cases. The CRL is a list of subscribers paired with digital certificate status. The list enumerates revoked certificates along with the reason for revocation. The dates of certificate issue, and the entities that issued them, are also included. The main limitation of CRL is the fact that updates must be frequently downloaded to keep the list current OCSP overcomes this limitation by checking certificate status in real time. The OCSP allows the authenticity of a certificate to be immediately
Topics
Community Discussion
No community discussion yet for this question.