Attackers have been using revoked certificates for MITM attacks to steal credentials from employees of Company.com. Which of the following options should Company.com implement to mitigate these…

A captive portal is used for network access control, often for guest networks, and does not address the issue of revoked certificates or MITM attacks.

An Extended Validation (EV) certificate provides higher assurance of identity but does not prevent or detect the use of revoked certificates by an attacker.

OCSP stapling is a mechanism where the web server obtains a digitally signed, time-stamped OCSP response from the Certificate Authority (CA) and "staples" it to its TLS/SSL handshake. This allows clients to efficiently verify the current revocation status of the server's certificate without contacting the CA directly, thereby preventing attackers from successfully using revoked certificates.

Object identifiers (OIDs) are numerical identifiers used within X.509 certificates for various fields and policies, not for checking certificate revocation status.

Key escrow involves storing cryptographic keys with a third party for recovery purposes and is unrelated to preventing the use of revoked certificates in MITM attacks.