Exam CAS-004 topic 1 question 551 discussion

Actual exam question from CompTIA's CAS-004

Question #: 551
Topic #: 1

A security analyst is reviewing the following output from a vulnerability scan from an organization's internet-facing web services:

Which of the following indicates a susceptibility whereby an attacker can take advantage of the trust relationship between the client and the server?

A. Line 06
B. Line 10
C. Line 13
D. Line 17
E. Line 18

Show Suggested Answer

Suggested Answer: D 🗳️

by grelaman at Nov. 5, 2024, 11:12 p.m.

Comments

Submit Cancel

grelaman

7 months, 3 weeks ago

Selected Answer: D

- OCSP (Online Certificate Status Protocol) Used by clients to check the revocation status of digital certificates. - Must-Staple Extension: A certificate extension that tells clients the server must provide a stapled OCSP response during the TLS handshake. Without this extension, clients may not require an OCSP stapled response. - An attacker could perform a Man-in-the-Middle (MitM) attack using a revoked certificate without the client being aware. - Attackers can exploit the absence of OCSP Must-Staple to use revoked certificates. - Clients trust the server's certificate but can't verify its revocation status effectively.

upvoted 4 times

...