A security engineer needs to remediate a SWEET32 vulnerability in an OpenSSH-based application and review existing configurations. Which of the following should the security engineer do? (Choose two.)

The correct answer is E. Disable 3DES algorithms F. cat /etc/sshd/ssh_config | grep "Ciphers". SWEET32 exploits the 64-bit block size of 3DES, so disabling 3DES algorithms mitigates the Reviewing the Ciphers configuration in ssh_config ensures only secure ciphers are enabled, confirming 3DES is removed and stronger algorithms are enforced.

Submitted by layla.eg· Mar 6, 2026Security Engineering

Question

Options

ADisable Twofish algorithms
Bcat /etc/sshd/ssh_config | grep "HMAC"
CDisable RSA algorithms
Dcat /etc/sshd/ssh_config | grep "PermitRootLogin"
EDisable 3DES algorithms
Fcat /etc/sshd/ssh_config | grep "Ciphers"

How the community answered

(44 responses)

A
23% (10)
B
5% (2)
C
11% (5)
D
7% (3)
E
55% (24)

Explanation

SWEET32 exploits the 64-bit block size of 3DES, so disabling 3DES algorithms mitigates the Reviewing the Ciphers configuration in ssh_config ensures only secure ciphers are enabled, confirming 3DES is removed and stronger algorithms are enforced.

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice