exam questions

Exam CS0-002 All Questions

View all questions & answers for the CS0-002 exam

Exam CS0-002 topic 1 question 146 discussion

Actual exam question from CompTIA's CS0-002
Question #: 146
Topic #: 1
[All CS0-002 Questions]

During a review of the vulnerability scan results on a server, an information security analyst notices the following:

The MOST appropriate action for the analyst to recommend to developers is to change the web server so:

  • A. it only accepts TLSv1 .2.
  • B. it only accepts cipher suites using AES and SHA.
  • C. it no longer accepts the vulnerable cipher suites.
  • D. SSL/TLS is offloaded to a WAF and load balancer.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
bootleg
Highly Voted 2 years, 6 months ago
I passed today, chose "C".
upvoted 9 times
...
skibby16
Most Recent 1 year, 7 months ago
Selected Answer: C
A cipher suite is a set of algorithms that defines how the encryption, authentication, and integrity of data are performed during a secure communication session. Some cipher suites are considered vulnerable or weak because they use outdated or insecure algorithms that can be easily broken or compromised by attackers. The vulnerability scan results show that the web server accepts several vulnerable cipher suites, such as RC4, MD5, or DES. The best action for the analyst to recommend to developers is to change the web server so it no longer accepts the vulnerable cipher suites and only accepts the secure ones.
upvoted 1 times
...
2Fish
2 years, 3 months ago
Selected Answer: C
C. There are still vulnerable cipher suites with AES and SHA.
upvoted 1 times
...
SylFlo
2 years, 5 months ago
i passed today and had this one on there, i chose C
upvoted 4 times
...
Cizzla7049
2 years, 7 months ago
Selected Answer: B
DES is a weaker hashing algorithm than AES
upvoted 2 times
Comptia_Secret_Service
2 years, 7 months ago
Wrong, read the result from the vulnerable tests, it is C, TLS 1.2, and below are no longer secure.
upvoted 1 times
...
...
sh4dali
2 years, 9 months ago
Selected Answer: C
C is correct. They should implement TLS version 1.3
upvoted 3 times
Average_Joe
2 years, 8 months ago
and 3des is a non-issue?
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...