CompTIA CASP+ (CAS-004) — Question 80

A security architect works for a manufacturing organization that has many different branch offices. The architect is looking for a way to reduce traffic and ensure the branch offices receive the latest copy of revoked certificates issued by the CA at the organization's headquarters location. The solution must also have the lowest power requirement on the CA.
Which of the following is the BEST solution?

Answer options

• A. Deploy an RA on each branch office.
• B. Use Delta CRLs at the branches.
• C. Configure clients to use OCSP.
• D. Send the new CRLs by using GPO.

Correct answer: B

Explanation

The best solution is B, using Delta CRLs at the branches, as it allows for the distribution of only the changes in certificate revocation lists, minimizing traffic and power usage. Option A is not ideal as deploying RAs increases complexity and resource use. Option C, while useful, does not directly address the requirement for revocation list updates. Option D may not be as efficient in terms of traffic and power compared to Delta CRLs.