HP HPE7-A01 Dumps Questions Answers

OCSP is a protocol that allows clients to query the CA or a trusted responder for the status of a specific certificate.  OCSP requests and responses are smaller and faster than CRLs, and they can provide real-time information about the revocation status of a certificate 1 2 . CRLs are lists of all revoked certificates that are downloaded from the CA.  CRLs can present issues, as they can become outdated and have to be downloaded frequently 1 3 .  Therefore, OCSP reduces latency between the time a certificate is revoked and validation reflects this status. References:  1  https://sectigostore.com/blog/ocsp-vs-crl-whats-the-difference/  2  https://www.keyfactor.com/blog/what-is-a-certificate-revocation-list-crl-vs-ocsp/  3   https://www.fortinet.com/resources/cyberglossary/ocsp

This is the correct explanation of how roles can help keep consistent policy enforcement in a distributed overlay fabric. Roles are used to assign group based policy IDs (GBPs) to devices after they authenticate with ClearPass or a local database. GBPs are then used to tag the traffic from the devices and send them to the ingress VTEP, which applies the GBP on the VXLAN header. The egress VTEP then enforces the policy based on the GBP and the destination device. The other options are incorrect because they either do not describe the correct sequence of events or do not use the correct terms. References: https://www.arubanetworks.com/techdocs/AOS-CX/10.04/HTML/5200-6728/bk01-ch03.html https://www.arubanetworks.com/techdocs/AOS-CX/10.04/HTML/5200-6728/bk01-ch05.html