ImplementationQuestion 48 of 100
Which mechanism lets a client quickly check whether a single certificate has been revoked?
a.Certificate signing request
b.Online Certificate Status Protocol
c.Key stretching
d.Certificate pinning
Explanation
The Online Certificate Status Protocol (OCSP) queries a responder in real time to check a certificate's revocation status. It is faster and more current than downloading a full certificate revocation list. OCSP stapling improves performance and privacy.
Practice all 100 questions free — no signup required.
Related questions on this topic
- Which one-way function produces a fixed-length value that cannot be reversed to the original input?
- Adding a unique random value to each password before hashing to defeat precomputed attacks is called:
- Which entity in a PKI issues and signs digital certificates?
- What does a digital signature primarily provide?
- Which authentication factor category does a fingerprint belong to?
- Requiring a password plus a one-time code from a phone app is an example of:
Last reviewed: · editorial process
PrepPass Editorial Team · Verified against CompTIA Security+ (SY0-701) · How we review