A company's policy is to follow NIST standards and use strong encryption to avoid disclosure of sensitive information in transit between any systems. An analyst reviews a lab web server and receives…

The correct answer is A. TLS 1.0 is enabled. NIST SP 800-52 Rev. 2 deprecates TLS 1.0 (and 1.1) because of known weaknesses; allowing clients to fall back to these versions undermines the integrity of the encrypted channel. All other findings either strengthen encryption (disabling SSLv3, compression) or don’t directly…

Submitted by eva_at· Mar 6, 2026Vulnerability Management

Question

A company’s policy is to follow NIST standards and use strong encryption to avoid disclosure of sensitive information in transit between any systems. An analyst reviews a lab web server and receives the following outputs:

Which of the following should the analyst identify as the most concerning?

Exhibit

Options

ATLS 1.0 is enabled.
BThe certificate is self-signed.
CSSLv3 is disabled.
DTLS 1.3 is not widely supported.
ETLS compression is disabled.

How the community answered

(35 responses)

A
77% (27)
B
11% (4)
C
3% (1)
D
3% (1)
E
6% (2)

Explanation

NIST SP 800-52 Rev. 2 deprecates TLS 1.0 (and 1.1) because of known weaknesses; allowing clients to fall back to these versions undermines the integrity of the encrypted channel. All other findings either strengthen encryption (disabling SSLv3, compression) or don’t directly compromise the cryptographic strength (self-signed cert, lack of TLS 1.3).

Topics

#TLS 1.0#web server security#encryption standards#vulnerability identification

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice