An organization needs to implement a large PKI. Network engineers are concerned that repeated transmission of the OCSP will impact network performance. Which of the following should the security…

A Certificate Signing Request (CSR) is used to apply for a digital certificate from a Certificate Authority, not to check its revocation status.

A Certificate Revocation List (CRL) is a timestamped list issued by a Certificate Authority (CA) that contains serial numbers of certificates that have been revoked. While CRLs can be large, they are downloaded periodically by clients, reducing the high frequency of individual, real-time OCSP requests and thus minimizing the 'repeated transmission' impact on network performance.

A Certificate Authority (CA) is an entity that issues, revokes, and manages digital certificates, but it is not a mechanism for checking certificate revocation status itself.

An Object Identifier (OID) is a globally unique numerical identifier used within certificates and other PKI components, not a method for verifying certificate revocation.