Community QuestionSeen on 2 CBTsRe-created in 7 study sets this year

Online Certificate Status Protocol (OCSP)

Community-sourced. Answers may be wrong or out of date. Always verify with your official training portal before submitting. Not affiliated with any branch, agency, or vendor. Details.
Answer

Checks for revoked certificates OCSP queries a CA or RA that maintains a list of expired certificates Server sends a response with a status of valid, suspended, or revoked OCSP allows for on-line checking of certificate validity, by sending a request to a web site containnig information on valid certificates. Thus, it tends to use more up-to-date data than the CRL.

1 of 2 indexed CBT versions give this answer·Answer index rebuilt Aug 10, 2026

The indexed versions don't agree on this one

This question appears on 2 CBT versions we've indexed, and they don't all give the same answer. Exam editions change and answer keys get re-cut, so more than one of these was correct on the test it came from. Here is each of them, and how many versions give it.

1 of 2 versionmost versions

Privacy enhanced mail (PEM)

Comptia Exam Objectives Security+

1 of 2 version

Checks for revoked certificates OCSP queries a CA or RA that maintains a list of expired certificates Server sends a response with a status of valid, suspended, or revoked OCSP allows for on-line checking of certificate validity, by sending a request to a web site containnig information on valid certificates. Thus, it tends to use more up-to-date data than the CRL.

Comptia Security+ Study Guide

Know which one your test keyed? One click. No account needed.