Per organizational requirements, an administrator has uploaded a signed SSL certificate to Prism for Common Access Card (CAC) authentication. Once the certificate has been uploaded successfully, the…

Question

Options

• AThere is no Certificate Revocation List (CRL) configured.
• BRSA key size is incorrect.
• COnline Certificate Status Protocol (OCSP) is not enabled.
• DSignature Algorithm is incorrect.

• A
  73% (16)
• B
  9% (2)
• C
  5% (1)
• D
  14% (3)

Explanation

Common Access Card (CAC) authentication relies on PKI (Public Key Infrastructure) certificate validation. A core component of this validation process is checking whether a presented certificate has been revoked. This is done using a Certificate Revocation List (CRL) - a list published by the Certificate Authority (CA) that identifies invalidated certificates. If no CRL is configured in Prism, the system cannot complete the certificate chain validation required for CAC authentication, causing it to fail even though the certificate itself appears valid. Without CRL access, the system has no way to verify the trust status of the smart card certificate. OCSP (Option C) is an alternative to CRL for revocation checking, but since CRL is the primary required mechanism here and the question asks for the most likely cause, a missing CRL (Option A) is the correct answer.

No community discussion yet for this question.