Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
CompTIA Security+ · CompTIA
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
CA (Option C) is the best answer because the Certificate Authority’s public key and its role in the trust chain are central to validating a certificate’s authenticity and integrity.
OCSP (Online Certificate Status Protocol) is used to validate a certificate's status, specifically its revocation status, when it's presented to a user. While a Certificate Authority (CA) issues and signs the certificate and can be queried by OCSP, OCSP is the real-time protocol a browser uses to ask the CA (or an OCSP responder acting on its behalf) if the certificate is still valid or has been revoked.
A. OCSP: Focuses only on revocation checking, a subset of validation. B. CSR: Irrelevant, as it’s used for certificate issuance, not validation. C. CA: Encompasses the core validation process, as the CA’s public key verifies the certificate’s signature and trust chain, which is the foundation of validation. D. CRC (likely CRL): Focuses only on revocation checking, similar to OCSP, and is less comprehensive. CA (Option C) is the best answer because the Certificate Authority’s public key and its role in the trust chain are central to validating a certificate’s authenticity and integrity. While OCSP and CRL contribute to checking revocation status, the CA is the primary entity used for the overall validation process, as it establishes trust and verifies the certificate’s signature.