200-201 · Question #231
A company encountered a breach on its web servers using IIS 7.5. During the investigation, an engineer discovered that an attacker read and altered the data on a secure communication using TLS 1.2…
The correct answer is A. Upgrade to TLS 1.3. TLS v1.3 is a newer and more secure version of the TLS (Transport Layer Security) protocol. It includes improved security features and eliminates support for weaker encryption algorithms, ensuring that only the most secure cryptographic parameters are used during communication…
Question
A company encountered a breach on its web servers using IIS 7.5. During the investigation, an engineer discovered that an attacker read and altered the data on a secure communication using TLS 1.2 and intercepted sensitive information by downgrading a connection to export-grade cryptography. The engineer must mitigate similar incidents in the future and ensure that clients and servers always negotiate with the most secure protocol versions and cryptographic parameters. Which action does the engineer recommend?
Options
- AUpgrade to TLS 1.3.
- BInstall the latest IIS version.
- CDowngrade to TLS 1.1.
- DDeploy an intrusion detection system
How the community answered
(19 responses)- A79% (15)
- B11% (2)
- C5% (1)
- D5% (1)
Explanation
TLS v1.3 is a newer and more secure version of the TLS (Transport Layer Security) protocol. It includes improved security features and eliminates support for weaker encryption algorithms, ensuring that only the most secure cryptographic parameters are used during communication. Upgrading to TLS v1.3 can help mitigate vulnerabilities associated with earlier versions, enhancing the overall security posture of the communication between clients and servers.
Topics
Community Discussion
No community discussion yet for this question.