Which of the following protocols is an alternative to certificate revocation lists (CRL) and allows the authenticity of a certificate to be immediately verified?

Question

Options

• ARSTP
• BSKIP
• COCSP
• DHTTP

• A
  7% (2)
• C
  89% (24)
• D
  4% (1)

Explanation

OCSP (Online Certificate Status Protocol) is the correct answer because it provides real-time certificate validation by allowing clients to query a certificate authority's OCSP responder for the current revocation status of a specific certificate - eliminating the need to download and parse an entire CRL. RSTP (Rapid Spanning Tree Protocol) is a network topology protocol unrelated to PKI. SKIP (Simple Key-management for Internet Protocols) is an older key exchange protocol, not a certificate validation mechanism. HTTP is a general-purpose web transfer protocol, not a certificate verification standard.

Memory tip: Think "OCSP = On-Call Status Police" - when you need to know right now if a certificate is still valid, OCSP is the cop you call instantly rather than waiting for the CRL bulletin board to be updated.

No community discussion yet for this question.