An administrator wants to harden the security on a web server used for e-commerce. A security scanner provides a brief summary of the web server: The administrator wans to provide better security…

SSL 2.0 and 3.0 contain well-documented cryptographic weaknesses and are deprecated in favor of TLS 1.2 and 1.3. Disabling these protocols directly addresses data-in-transit security by eliminating the attack surface they create. This is a standard hardening step for any web server handling sensitive financial transactions.

Password hashing protects stored credentials at rest and does not affect the encryption of data as it travels across the network.

Disk encryption protects data at rest on the server's storage, not data being transmitted between the client and server.

Upgrading the OS is a general hardening measure but does not specifically address the insecure transport protocols used for data in transit.

Upgrading the web service version may patch other vulnerabilities but does not directly disable the deprecated SSL protocols identified as the in-transit risk.