Identity with Windows Server 2016 — Question 41

You need to ensure that clients will check at least every 30 minutes as to whether a certificate has been revoked.
Which of the following should you configure to accomplish this goal?

Answer options

• A. Key recovery agent
• B. CRL publication interval
• C. Delta CRL publication interval
• D. Certificate templates.

Correct answer: C

Explanation

The correct answer is C, as the Delta CRL publication interval determines how often delta CRLs are published, which allows clients to check for recent revocations more frequently. Option A, Key recovery agent, is unrelated to certificate revocation checking. Option B, CRL publication interval, refers to how often the main CRL is updated, but does not ensure checks every 30 minutes. Option D, Certificate templates, are used for defining the properties of certificates but do not manage revocation checking frequency.