Which two statements are true about Online Certificate Status Protocol (OCSP)? (Choose two.)

A.
OCSP provides real-time certificate verification.

B.
The Revocation Checking option must be disabled in OCSP.

C.
OCSP must have the Allow Clock Discrepancy field set to zero.

D.
The Junos Pulse Secure Access Service is an OCSP client.

Explanation:
http://www.juniper.net/techpubs/en_US/sa/topics/task/operational/secure-accesscertificates-online-certification-status-protocol-enabling.html