Which of the following can best define the "revocation request grace period"?

The correct answer is D. Time period between the arrival of a revocation request and the publication of the revocation. The revocation request grace period is defined as the time period between the arrival of a revocation request at the CA and the actual publication of the revocation (e.g., on a Certificate Revocation List or via OCSP). During this window, the certificate has been flagged for revo

Submitted by naveen.iyer· Apr 18, 2026Security Operations and Administration

Question

Options

AThe period of time allotted within which the user must make a revocation request upon a
BMinimum response time for performing a revocation by the CA
CMaximum response time for performing a revocation by the CA
DTime period between the arrival of a revocation request and the publication of the revocation

How the community answered

(22 responses)

B
5% (1)
C
5% (1)
D
91% (20)

Explanation

The revocation request grace period is defined as the time period between the arrival of a revocation request at the CA and the actual publication of the revocation (e.g., on a Certificate Revocation List or via OCSP). During this window, the certificate has been flagged for revocation but is not yet publicly listed as revoked, creating a potential window of risk. Option A describes an obligation on the user's side (not the CA's processing time). Option B (minimum response time) and Option C (maximum response time) relate to service-level definitions for CA responsiveness, but do not precisely define the grace period concept as defined in PKI standards like RFC 3647.

Topics

#Certificate Revocation#PKI#Certificate Management

Community Discussion

No community discussion yet for this question.

Full SSCP Practice