Examkin

Question

Difficulty: EasyPublic Key Infrastructure and Certificate Management

A security administrator is evaluating mechanisms to verify whether a digital certificate has been invalidated before its natural expiration date. Which of the following methods can be used to check the revocation status of an enterprise TLS certificate? (Select TWO.)

  1. Querying an Online Certificate Status Protocol (OCSP) responder for real-time validationAnswer
  2. Downloading a Certificate Revocation List (CRL) published by the issuing CAAnswer
  3. C
    Submitting a new Certificate Signing Request (CSR) to the public CA
  4. D
    Establishing a bulk symmetric encryption key session with the remote peer
  5. E
    Verifying data integrity using a cryptographic hashing algorithm

Answer

The revocation status of a digital certificate can be checked using Online Certificate Status Protocol (OCSP) queries and Certificate Revocation Lists (CRLs).
Online Certificate Status Protocol (OCSP) queries provide a real-time method to check certificate status with a responder, while Certificate Revocation Lists (CRLs) provide a published list of revoked certificate serial numbers by the CA. Both are standard mechanisms designed specifically to verify revocation status.

Step-by-Step Solution

1
Identify the goal of checking if a certificate was revoked prior to expiration.
Recognize that PKI provides specific revocation checking mechanisms maintained by or linked to the issuing CA.
Certificates can be compromised or superseded before their validity period ends.
2
Evaluate standard PKI revocation mechanisms.
Identify Online Certificate Status Protocol (OCSP) for real-time status checks and Certificate Revocation Lists (CRLs) for downloadable lists of revoked certificate serial numbers.
Both protocols exist specifically to communicate revocation status from the CA to relying parties.

Key Concept

Certificate Revocation Validation (CRL and OCSP)
Estimated Time:45s
Rate this question

Topics

Public Key Infrastructure and Certificate Management

More questions from this topic