350-701 Security Concepts Practice Question
When a certificate is revoked, which protocol allows a client to check the revocation status in real-time without downloading a full CRL?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
OCSP (Online Certificate Status Protocol)
OCSP (Online Certificate Status Protocol) provides real-time revocation status without the overhead of CRLs.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
CRL (Certificate Revocation List)
Why it's wrong here
CRL is a list that must be downloaded and is not real-time.
- ✗
PKI certificate chain
Why it's wrong here
Certificate chain is used for validation, not revocation status.
- ✗
SSL/TLS handshake
Why it's wrong here
Handshake establishes secure connection, not revocation check.
- ✓
OCSP (Online Certificate Status Protocol)
Why this is correct
OCSP allows real-time checking.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-701 question from scratch — 978 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.