CASP+: Certificate Revocation Quiz

What mechanism does Certificate Stapling use to provide up-to-date certificate status information?

• Embedding certificate data in the application code

• Submitting public keys via an HTTP header

• Periodically obtaining a time-stamped OCSP response from the CA

• Publishing a complete Certificate Revocation List (CRL)

What are some reasons for which a certificate may be revoked

• Expired certificate, server hardware upgrade, DNS change

• Misuse of the certificate, key compromise, cessation of operation

• Regular maintenance, software updates, network reconfiguration

• Change of company name, server relocation, domain name expiration

What is the purpose of Online Certificate Status Protocol (OCSP) in certificate validation?

• To provide a complete Certificate Revocation List (CRL)

• To return the status of a requested certificate without providing a complete CRL

• To issue new digital certificates

• To configure web servers for HTTPS connections

What is the purpose of Certificate Stapling in web security?

• To ensure proper certificate inspection by clients

• To mitigate against downgrade attacks by enforcing HTTPS connections

• To preload browsers with a list of trusted sites

• To obtain up-to-date certificate status information from the CA

What is the main purpose of a Certificate Revocation List (CRL) in the context of digital certificates?

• To provide up-to-date information on the validity of certificates

• To issue new digital certificates

• To revoke certificates that are no longer valid

• To configure web servers for HTTPS connections

What is the purpose of HSTS preload services?

• To preload browsers with a list of sites that should never be accessed using HTTPS

• To configure web servers for HTTPS connections

• To issue new digital certificates

• To mitigate against downgrade attacks

What is the purpose of HTTP Strict Transport Security (HSTS) in web security?

• To notify browsers to connect to websites using HTTP only

• To mitigate against downgrade attacks by enforcing HTTPS connections

• To configure web servers for HTTPS connections

• To preload web browsers with a list of trusted sites

What is the primary goal of Certificate Pinning?

• To prevent access to HTTP websites

• To ensure proper certificate inspection by clients

• To manage digital certificates for eDiscovery purposes

• To perform disk imaging and file analysis

Which header is used to implement HTTP Strict Transport Security (HSTS) on a web server?

• Strict-Transport-Security

• Certificate-Pinning

• Content-Security-Policy

• Access-Control-Allow-Origin

What is the code given to a suspended certificate according to the provided information?

• Certificate Hold

• Unspecified

• Superseded

• Cessation of Operation