You want to implement an IPsec VPN on an SRX device using PKI certificates for authentication. As part of the
implementation, you are required to ensure that the certificate submission, renewal, and retrieval processes are
handled automatically from the certificate authority. Regarding this scenario, which statement is correct?

A.
You can use SCEP to accomplish this behavior.

B.
You can use OCSP to accomplish this behavior.

C.
You can use CRL to accomplish this behavior.

D.
You can use SPKI to accomplish this behavior.

Explanation:
Page 9
http://www.juniper.net/techpubs/en_US/junos/information-products/topic-collections/nce/pki-conf- trouble/
configuring-and-troubleshooting-public-key-infrastructure.pdf