CAS-005 · Question #466
A software developer is working on a piece of code required by a new software package. The code should use a protocol to verify the validity of a remote identity. Which of the following should the…
The correct answer is B. OCSP. The Online Certificate Status Protocol (OCSP) lets your application query a trusted responder in real time to confirm that a peer’s X.509 certificate hasn’t been revoked. Embedding OCSP checking in your TLS/SSL handshake ensures the remote identity you connect to remains valid…
Question
A software developer is working on a piece of code required by a new software package. The code should use a protocol to verify the validity of a remote identity. Which of the following should the developer implement in the code?
Options
- ARSA
- BOCSP
- CHSTS
- DCRL
How the community answered
(54 responses)- A2% (1)
- B93% (50)
- C2% (1)
- D4% (2)
Explanation
The Online Certificate Status Protocol (OCSP) lets your application query a trusted responder in real time to confirm that a peer’s X.509 certificate hasn’t been revoked. Embedding OCSP checking in your TLS/SSL handshake ensures the remote identity you connect to remains valid without needing to download and parse full CRLs.
Community Discussion
No community discussion yet for this question.