CAS-004 Security Engineering Practice Question
An organization is implementing a PKI with a three-tier hierarchy (root CA, intermediate CA, issuing CA). The security team wants to ensure that certificate revocation information is available quickly and efficiently. Which TWO mechanisms should they implement? (Select TWO.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
CRL distribution points (CRL DP)
CRL and OCSP are standard revocation mechanisms. Certificate transparency (CT) logs are for auditing, not real-time revocation. Delta CRLs are more efficient for frequent updates. OCSP stapling reduces load on OCSP responders.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
OCSP stapling
Why it's wrong here
OCSP stapling is a technique to optimize OCSP, not a fundamental revocation mechanism.
- ✗
Delta CRLs
Why it's wrong here
Delta CRLs are a type of CRL, not a separate mechanism; but they are not a distinct mechanism from CRL.
- ✗
Certificate Transparency (CT) logs
Why it's wrong here
CT logs are for public audit of certificate issuance, not revocation.
- ✓
CRL distribution points (CRL DP)
Why this is correct
CRLs provide a list of revoked certificates.
- ✓
OCSP responders
Why this is correct
OCSP provides real-time status of individual certificates.
Go deeper
Related to this question
About these practice questions
One of 968 original CAS-005 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CAS-005 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CAS-005 exam.