A security technician is implementing PKI on a Network. The technician wishes to reduce the
amount of bandwidth used when verifying the validity of a certificate. Which of the following should
the technician implement?
A.
CSR
B.
Key escrow
C.
OSCR
D.
CRL
Explanation:
This is abit tricky. At first you think it’s “C” because your looking for OSCP but it’s OSCR. I hate this kind of question.
I picked OSCP. (“OSCR” is just another typo.)
“Because OCSP responses are well bounded and small in size, constrained clients may wish to use OCSP to check the validity of the certificates… in order to avoid transmission of large CRLs and therefore save bandwidth on constrained networks.”
-From RFC 4557