A user tries to visit a web site with a revoked certificate. In the background a server from the
certificate authority only sends the browser revocation information about the domain the user is
visiting. Which of the following is being used by the certificate authority in this exchange?
A.
CSR
B.
Key escrow
C.
OCSP
D.
CRL
Explanation:
This is tricky at first glance to the question you would think OCSP but at the end of the question is says “by the certificate authority in the exchange” so it’s “D” CRL.
CA sends a list of revoked serial numbers when using CRL.
CA sends information about a specific serial number for which the client requested.
C sounds good to me.
“only sends the information about the domain the user is visiting”
OCSP
I understand the concern about the CA but this question clearly works to separate the list from the yes/no aspect of OCSP. The answer is OCSP.