Pop Quiz
Certificate Services (Exam 70-642)
What other method of certificate revocation checking is available
in Windows 2008 which alleviates clients from having to download
large revocation lists from traditional CRL servers when using
Certificate Services?
- WINS
- OCSP
- DHCP
- DNS
B.
The Online Certificate Status Protocol client is available in Vista,
which allows it to contact certificate services OSCP responders
running Windows 2008 Certificate Services.
The OCSP responder receives and responds to requests from clients
only for the information about a single certificate.
OCSP responders help to ensure the amount of data and time to provide
that data is consistent when compared to traditional certificate
revocation lists. CRLs often contain expired time and revocation
status for X.509, S/MIME, SSL, EFS, and smart card certificates.
Click here to comment on this answer.
Tip:
Online responders should be installed on computers running Windows 2008 after the CAs are installed.
Tech Reference:
"
Certficate Services Overview
"
(TechNet)
About the Author
Andy Barkl, CCNP, CCDP, CISSP, MCT, MVP, MCDST, MCSE: Security, MCSA: Security, MCSA: Messaging A+, CTT+, i-Net+, Network+, Security+, Server+, CNA, has over 20 years of experience in the IT field. He's the owner of MCT & Associates LLC, a technical training and consulting firm in Phoenix, Arizona. He enjoys dividing his time between teaching in the classroom, writing from his office and consulting on Cisco and Windows deployments. He's also the online editor for MCPMag.com, TCPMag.com, CertCities.com, and a contributing author and editor for Sybex and Cisco Press. He hosts a multitude of exam preparation chats monthly on MCPmag.com and CertCities.com.