Exam 312-50v13 topic 1 question 51 discussion

Actual exam question from ECCouncil's 312-50v13

Question #: 51
Topic #: 1

Samuel, a security administrator, is assessing the configuration of a web server. He noticed that the server permits SSLv2 connections, and the same private key certificate is used on a different server that allows SSLv2 connections. This vulnerability makes the web server vulnerable to attacks as the SSLv2 server can leak key information.
Which of the following attacks can be performed by exploiting the above vulnerability?

A. Padding oracle attack
B. DROWN attack
C. DUHK attack
D. Side-channel attack

Show Suggested Answer

Suggested Answer: B 🗳️

by NikoTomas at March 10, 2025, 11 p.m.

Comments

Submit Cancel

e30b32d

1 month, 1 week ago

Selected Answer: B

B. DROWN attack ------------------------------- A. Padding oracle attack: Exploiting padding to decrypt data. B. DROWN attack: Decrypting SSL/TLS communications through SSLv2 vulnerability. C. DUHK attack: Exploiting weak random number generators to compromise encryption. D. Side-channel attack: Extracting sensitive data through unintended channels, such as power consumption, electromagnetic radiation, or timing variations, to infer sensitive data or cryptographic keys.

upvoted 1 times

...