What is the purpose of the Online Certificate Status Protocol (OCSP)?

To encrypt data between a client and server

To issue new digital certificates

To provide real-time verification of a certificate's revocation status

What is the primary function of a Registration Authority (RA) in a PKI?

To generate and sign digital certificates

To store users' private keys securely

To verify the identity of certificate applicants and forward requests to the CA

To encrypt all data transmitted over the network

A company's public-facing web application uses OCSP for certificate revocation checking. The OCSP responder becomes unavailable, and the application is configured to fail closed (reject connections when revocation status cannot be determined). Users are reporting widespread connection failures. What is the most effective immediate mitigation?

Disable revocation checking in the application to restore service

Extend the OCSP response cache lifetime to 48 hours

Configure the application to ignore OCSP errors and allow connections

Temporarily switch the application to use a cached CRL until the OCSP responder is restored

A web application needs to check the revocation status of client certificates in real time to prevent the use of compromised certificates. Which mechanism should the application use?

CRL, which is a periodically published list of revoked certificates

Certificate pinning, which pins the certificate to the application

Certificate chaining, which validates the certificate path

OCSP, which provides real-time revocation status responses

What happens when a digital certificate reaches its expiration date?

The certificate becomes invalid and can no longer be used for authentication or encryption

The certificate is added to the CRL

The certificate is automatically renewed by the CA

The private key is automatically changed

EC-CouncilNetwork Defense Essentials

Domain 6Objective 2

Public Key Infrastructure (PKI) and Digital Certificates NDE Practice Questions (Page 1)

Part of the Cryptography, PKI, and Data Security domain, which makes up ~15% of our current practice bank.

44questions here

9free pages

10concepts

Questions 1–5

1foundation · easy
What is the purpose of the Online Certificate Status Protocol (OCSP)?
Select an answer first
2foundation · easy
What is the primary function of a Registration Authority (RA) in a PKI?
Select an answer first
3expert · hard
A company's public-facing web application uses OCSP for certificate revocation checking. The OCSP responder becomes unavailable, and the application is configured to fail closed (reject connections when revocation status cannot be determined). Users are reporting widespread connection failures. What is the most effective immediate mitigation?
Select an answer first
4application · medium
A web application needs to check the revocation status of client certificates in real time to prevent the use of compromised certificates. Which mechanism should the application use?
Select an answer first
5foundation · easy
What happens when a digital certificate reaches its expiration date?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “NDE” is a trademark of its owner, used for identification only.