Discuss CompTIA CS0-003 Exam Topic 1 Question 4

While reviewing a vulnerability assessment, an analyst notices the following issue is identified in the report:

AReconfigure the device to support only connections leveraging TLSv1.2.

BObtain a new self-signed certificate and select AES as the hashing algorithm.

CReplace the existing certificate with a certificate that uses only MD5 for signing.

DUse only signed certificates with cryptographically secure certificate sources.

Suggested Answer: A

The vulnerability assessment report shows that the device is using SSLv3, which is an outdated and insecure protocol for secure communication over a network. SSLv3 has several known vulnerabilities, such as POODLE, that allow attackers to decrypt or modify the encrypted data. To remediate this issue, the analyst should recommend reconfiguring the device to support only connections leveraging TLSv1.2, which is a newer and more secure protocol that provides stronger encryption, authentication, and integrity protection for the data transmitted over the network.

Get Premium CS0-003 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

13 comments · newest first

Arthur 11 months ago

I think self-signed certs can be risky, though.

Ozell 11 months ago

Signed certs are definitely the way to go.

Quentin 12 months ago

Wait, are people still using MD5? That's surprising!

Laurene 12 months ago

Totally agree, MD5 is outdated and insecure.

Coleen 1 year ago

TLSv1.2 is a must for secure connections!

Dong 1 year ago

I recall that self-signed certificates can be risky. I wonder if option B is really a good practice or just a temporary fix.

Gwenn 1 year ago

I’m a bit confused about the hashing algorithms. I thought MD5 was outdated and not secure anymore, so I don’t think option C is right.

Whitney 1 year ago

I think we practiced a question similar to this where we had to choose between different certificate options. I feel like option D might be the safest choice.

Galen 1 year ago

I remember discussing the importance of using TLSv1.2 in class, but I'm not entirely sure if that's the only thing we need to consider here.

Raymon 1 year ago

Hmm, I'm a bit unsure about this one. I know the four dimensions are important, but I'm not totally clear on how they each contribute to defining service delivery activities. I'll need to think this through carefully.

Marion 1 year ago

Okay, let me think this through. I know the ISO/IEC 27002:2013 standard covers information security controls, and I believe the number of domains is 110. But I'll verify that in the standard just to be certain.

Tandra 1 year ago

Okay, I've got a strategy for this. I'll start by considering the most common reasons for a 503 error, like issues with load balancing or SSL/TLS configuration. Then I'll match those to the answer choices and select the best option.

Temeka 1 year ago

This looks like a tricky one. I'll need to carefully review the information provided and think through the steps.

CompTIA CS0-003 Exam - Topic 1 Question 4 Discussion