nerdexam
Cisco

200-201 · Question #231

A company encountered a breach on its web servers using IIS 7.5. During the investigation, an engineer discovered that an attacker read and altered the data on a secure communication using TLS 1.2…

The correct answer is A. Upgrade to TLS 1.3. TLS v1.3 is a newer and more secure version of the TLS (Transport Layer Security) protocol. It includes improved security features and eliminates support for weaker encryption algorithms, ensuring that only the most secure cryptographic parameters are used during communication…

Submitted by paula_co· Mar 6, 2026Security Concepts

Question

A company encountered a breach on its web servers using IIS 7.5. During the investigation, an engineer discovered that an attacker read and altered the data on a secure communication using TLS 1.2 and intercepted sensitive information by downgrading a connection to export-grade cryptography. The engineer must mitigate similar incidents in the future and ensure that clients and servers always negotiate with the most secure protocol versions and cryptographic parameters. Which action does the engineer recommend?

Options

  • AUpgrade to TLS 1.3.
  • BInstall the latest IIS version.
  • CDowngrade to TLS 1.1.
  • DDeploy an intrusion detection system

How the community answered

(19 responses)
  • A
    79% (15)
  • B
    11% (2)
  • C
    5% (1)
  • D
    5% (1)

Explanation

TLS v1.3 is a newer and more secure version of the TLS (Transport Layer Security) protocol. It includes improved security features and eliminates support for weaker encryption algorithms, ensuring that only the most secure cryptographic parameters are used during communication. Upgrading to TLS v1.3 can help mitigate vulnerabilities associated with earlier versions, enhancing the overall security posture of the communication between clients and servers.

Topics

#TLS downgrade attack#TLS 1.3#cryptographic protocols#secure communication

Community Discussion

No community discussion yet for this question.

Full 200-201 Practice