An analyst is reviewing an SSLscan from a web server in an environment: The analyst needs to immediately disable ciphers that do not comply with company security standards. Which of the following…

The correct answer is E. DES-CBC3-SHA. DES-CBC3-SHA (3DES) is the least secure cipher listed. It is considered deprecated due to known vulnerabilities, limited key size (112 bits in this context), and susceptibility to attacks like SWEET32. It should be disabled immediately to comply with modern security standards.

Submitted by carter_n· Mar 6, 2026Vulnerability Management

Question

An analyst is reviewing an SSLscan from a web server in an environment:

The analyst needs to immediately disable ciphers that do not comply with company security standards. Which of the following ciphers is the least secure and should be disabled?

Exhibit

Options

AAES128-SHA
B128 bits DHE-RSA-AES128-GCM-SHA256 DHE 2048 bits
CECDHE-RSA-AES128-SHA Curve 25519 DHE 253
DECDHE-RSA-AES256-GCM-SHA384 Curve P-384 DHE 384
EDES-CBC3-SHA
FAES256-GCM-SHA384

How the community answered

(38 responses)

A
3% (1)
B
5% (2)
D
8% (3)
E
71% (27)
F
13% (5)

Explanation

DES-CBC3-SHA (3DES) is the least secure cipher listed. It is considered deprecated due to known vulnerabilities, limited key size (112 bits in this context), and susceptibility to attacks like SWEET32. It should be disabled immediately to comply with modern security standards.

Topics

#SSL/TLS ciphers#cipher strength#cryptography#web server security

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice