ExamTopics Logo
Mail Us[email protected]
Menu
Eccouncil Discussions
exam questions

Exam 312-50v11 All Questions

View all questions & answers for the 312-50v11 exam
Go to Exam

Exam 312-50v11 topic 1 question 121 discussion

Actual exam question from ECCouncil's 312-50v11
Question #: 121
Topic #: 1
[All 312-50v11 Questions]

The Heartbleed bug was discovered in 2014 and is widely referred to under MITRE's Common Vulnerabilities and Exposures (CVE) as CVE-2014-0160. This bug affects the OpenSSL implementation of the Transport Layer Security (TLS) protocols defined in RFC6520.
What type of key does this bug leave exposed to the Internet making exploitation of any compromised system very easy?

  • A. Public
  • B. Private
  • C. Shared
  • D. Root
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by Nufforabing at June 28, 2021, 5:40 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Nufforabing
Highly Voted 3 years, 6 months ago
The data obtained by a Heartbleed attack may include unencrypted exchanges between TLS parties likely to be confidential, including any form post data in users’ requests. Moreover, the confidential data exposed could include authentication secrets such as session cookies and passwords, which might allow attackers to impersonate a user of the service.An attack may also reveal private keys of compromised parties. https://en.wikipedia.org/wiki/Heartbleed • B. Private
upvoted 13 times
...
SeaH0rse66
Highly Voted 2 years, 7 months ago
Selected Answer: B
https://heartbleed.com "What makes the Heartbleed Bug unique? Bugs in single software or library come and go and are fixed by new versions. However this bug has left large amount of PRIVATE KEYS and other secrets exposed to the Internet."
upvoted 7 times
...
xg16ev5k
Most Recent 11 months, 1 week ago
Selected Answer: B
B is corect answer
upvoted 1 times
...
juliosc
1 year, 9 months ago
There is no sense of exposing a publick Key
upvoted 1 times
...
Daniel8660
2 years, 2 months ago
Selected Answer: B
The Heartbleed Bug is a serious vulnerability in the popular OpenSSL cryptographic software library. This weakness allows stealing the information protected, under normal conditions, by the SSL/TLS encryption used to secure the Internet. This compromises the secret keys used to identify the service providers and to encrypt the traffic, the names and passwords of the users and the actual content. https://heartbleed.com/
upvoted 3 times
...
Snipa_x
3 years, 1 month ago
The answer is correct but, if you didn't know that then please go back and try to understand public key infrastructure(PKI). You'll need this on your journey.
upvoted 4 times
...
ANDRESCB1988
3 years, 5 months ago
correct
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel