Question

Users within an organization frequently access public web servers using HTTPS. Management wants to ensure that users can verify that certificates are valid even if the public CAs are temporarily unavailable. Which of the following should be implemented to meet this need?

O OCSP
O Private CA
O CSR
O CRL

Answer 1

To meet the need of verifying certificate validity when public CAs are unavailable, implementing a Private CA and using CRL or OCSP to check certificate revocation status is recommended

Step-by-step explanation:

To ensure that users can verify the validity of certificates even if public CAs are temporarily unavailable, Private CA (certificate authority) should be implemented. A private CA allows organizations to issue and manage their own digital certificates. Users can verify the certificates by checking the revocation status using CRL (Certificate Revocation List). OCSP (Online Certificate Status Protocol) can also be used to check the revocation status of certificates in real-time.

Answer 2

To meet the need for users to verify valid certificates even if public CAs are temporarily unavailable, management should implement a Private CA.

Step-by-step explanation:

To ensure that users can verify that certificates are valid even if the public CAs are temporarily unavailable, management should implement a Private CA.

A private CA, or internal CA, is a certificate authority that is established within the organization itself. This means that the organization can issue and manage its own certificates, bypassing the need for external public CAs.

By using a private CA, the organization can issue and distribute trusted certificates to its users, allowing them to verify the validity of certificates even without relying on public CAs.