Examkin

Soru

Zorluk: KolayPublic Key Infrastructure and Certificate Management

A security administrator is evaluating mechanisms to verify whether a digital certificate has been invalidated before its natural expiration date. Which of the following methods can be used to check the revocation status of an enterprise TLS certificate? (Select TWO.)

  1. Querying an Online Certificate Status Protocol (OCSP) responder for real-time validationCevap
  2. Downloading a Certificate Revocation List (CRL) published by the issuing CACevap
  3. C
    Submitting a new Certificate Signing Request (CSR) to the public CA
  4. D
    Establishing a bulk symmetric encryption key session with the remote peer
  5. E
    Verifying data integrity using a cryptographic hashing algorithm

Cevap

The revocation status of a digital certificate can be checked using Online Certificate Status Protocol (OCSP) queries and Certificate Revocation Lists (CRLs).
Online Certificate Status Protocol (OCSP) queries provide a real-time method to check certificate status with a responder, while Certificate Revocation Lists (CRLs) provide a published list of revoked certificate serial numbers by the CA. Both are standard mechanisms designed specifically to verify revocation status.

Adım Adım Çözüm

1
Identify the goal of checking if a certificate was revoked prior to expiration.
Recognize that PKI provides specific revocation checking mechanisms maintained by or linked to the issuing CA.
Certificates can be compromised or superseded before their validity period ends.
2
Evaluate standard PKI revocation mechanisms.
Identify Online Certificate Status Protocol (OCSP) for real-time status checks and Certificate Revocation Lists (CRLs) for downloadable lists of revoked certificate serial numbers.
Both protocols exist specifically to communicate revocation status from the CA to relying parties.

Anahtar Kavram

Certificate Revocation Validation (CRL and OCSP)
Tahmini Süre:45s
Bu soruyu puanla

Konular

Public Key Infrastructure and Certificate Management

Bu konudan daha fazla soru