It is a high priority to deliver current information to employees about the validity of certificates issued to partners. Which method should you use to enable employee computers to check for revocation status?

■ The PKI should include three CAs, including the root CA. You should have one policy CA for partners and another policy CA for employees.

■ Employees should use autoenrollment. Partners should use web enrollment.

■ OCSP LO.1