Community QuestionSeen on 2 CBTsRe-created in 7 study sets this year
Online Certificate Status Protocol (OCSP)
Community-sourced. Answers may be wrong or out of date. Always verify with your official training portal before submitting. Not affiliated with any branch, agency, or vendor. Details.
Answer
- Checks for revoked certificates - OCSP queries a CA or RA that maintains a list of expired certificates - Server sends a response with a status of valid, suspended, or revoked OCSP allows for on-line checking of certificate validity, by sending a request to a web site containnig information on valid certificates. Thus, it tends to use more up-to-date data than the CRL.
Alternate answers seen on other CBTs
The same question shows up worded slightly differently across CBT versions. Here are the other answer variants we've indexed.
Privacy enhanced mail (PEM)
Comptia Exam Objectives Security+ →