A certificate vendor notified a company that recently invalidated certificates may need to be updated. Which of the following mechanisms should a security administrator use to determine whether the…

The correct answer is D. CRL. From a practical standpoint, an administrator would use automation to compare all existing certificates with the revocation list, but potentially they could also script to OCSP per each certificate in the environment. Either option seem valid, but CRL seems the better option…

Submitted by fernanda_arg· Mar 6, 2026General security concepts

Question

A certificate vendor notified a company that recently invalidated certificates may need to be updated. Which of the following mechanisms should a security administrator use to determine whether the certificates installed on the company's machines need to be updated?

Options

ASCEP
BOCSP
CCSR
DCRL

How the community answered

(53 responses)

A
2% (1)
B
2% (1)
C
4% (2)
D
92% (49)

Explanation

From a practical standpoint, an administrator would use automation to compare all existing certificates with the revocation list, but potentially they could also script to OCSP per each certificate in the environment. Either option seem valid, but CRL seems the better option from enterprise scan perspective.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice