Exam 200-201 topic 1 question 216 discussion

Ineed we need to use 1.3 (so it would be A), but for some reason there is exact IIS version mentioned in question I think (7.5 does not support 1.3 at all), so I think that B will be correct

A "ensure that clients and servers always negotiate with the most secure protocol versions and cryptographic parameters" means secure any other server or clint, not only this IIS 7.5.

Answer A looks logical , but IIS 7.5 not support TLS 1.3 so , first we need to upgrade IIS version to a version who support TLS 1.3 ... so B is the correct Answer

TLS v1.0 - Deprecated TLS v1.1 - Deprecated TLS v1.2 - In use (supported by 99.9% of the websites). TLS v1.3 - In use (supported by 59.8% of the websites), although many haven’t implemented it as the default protocol. https://cheapsslsecurity.com/blog/tls-versions-what-they-are-and-which-ones-are-still-supported/ - From a Security Admin point of view, the most obvious choice is to update software versions. Since TLS has is more inclined to security than IIS, I'd go with A on this one.

A. Upgrade to TLS v1.3.

The engineer should recommend upgrading to TLS v1.3. TLS v1.3 is the latest version of the TLS protocol and provides enhanced security features compared to its predecessors. It includes a stronger key exchange algorithm, improved cipher suites, and better protection against downgrade attacks. Upgrading to TLS v1.3 will help to ensure that clients and servers always negotiate with the most secure protocol version and cryptographic parameters, making it harder for attackers to intercept sensitive information. Installing the latest IIS version may provide some security improvements, but it is not a substitute for upgrading to TLS v1.3.

The correct answer is A. Upgrade to TLS v1.3.

A. Upgrade to TLS v1.3. TLS (Transport Layer Security) is a cryptographic protocol that is used to secure network communications. It provides authentication, data integrity, and confidentiality for communications over the Internet. TLS 1.2 is the current version of the protocol, but it has been found to be vulnerable to certain types of attacks. Upgrade to the latest version of the protocol, TLS 1.3, which is more secure and resistant to those types of attacks.