Which of the following is the most effective way to mitigate the POODLE attack?

Disable SSL 3.0 and use TLS 1.2 or later

Increase the RSA key size to 4096 bits

A security analyst is reviewing a web application that supports TLS 1.0 with CBC-mode ciphers. The analyst is concerned about the BEAST attack. What is the primary risk associated with BEAST?

An attacker can force the server to downgrade to export-grade ciphers.

An attacker can decrypt cookies or other sensitive data by exploiting predictable IVs in CBC mode.

An attacker can inject malicious data into the TLS stream due to weak MAC functions.

An attacker can steal the server's private key by exploiting a vulnerability in the RSA key exchange.

An administrator suspects that a web server is accepting RC4 cipher suites. Which command-line tool can be used to confirm this by attempting a connection with a specific RC4 cipher?

curl -k --tls-max 1.0 https://example.com

wget --secure-protocol=TLSv1 https://example.com

openssl s_client -cipher RC4 -connect example.com:443

nmap -p 443 --script ssl-enum-ciphers example.com

EC-CouncilWeb Application Hacking and Security

Domain 5Objective 1

Weak SSL/TLS Ciphers WAHS Practice Questions (Page 3)

Part of the Cryptographic Failures and Transport Security domain, which makes up ~11% of our current practice bank. EC-Council does not publish an official question count, but from its 360-minute exam (~145–240 total, ~16–26 in this domain), expect 5–9 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

7concepts

Questions 11–15

11foundation · easy
Which of the following is the most effective way to mitigate the POODLE attack?
Select an answer first
12foundation · easy
Which of the following is a web-based service that can be used to test a website's SSL/TLS configuration for weak ciphers and other vulnerabilities?
Select an answer first
13application · medium
A security analyst is reviewing a web application that supports TLS 1.0 with CBC-mode ciphers. The analyst is concerned about the BEAST attack. What is the primary risk associated with BEAST?
Select an answer first
14application · medium
An administrator suspects that a web server is accepting RC4 cipher suites. Which command-line tool can be used to confirm this by attempting a connection with a specific RC4 cipher?
Select an answer first
15foundation · easy
Which component of an SSL/TLS cipher suite is responsible for ensuring that data has not been altered during transmission?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to WAHS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “WAHS” is a trademark of its owner, used for identification only.

Weak SSL/TLS Ciphers WAHS Practice Questions (Page 3)

Questions 11–15

Which of the following is the most effective way to mitigate the POODLE attack?

Which of the following is a web-based service that can be used to test a website's SSL/TLS configuration for weak ciphers and other vulnerabilities?

A security analyst is reviewing a web application that supports TLS 1.0 with CBC-mode ciphers. The analyst is concerned about the BEAST attack. What is the primary risk associated with BEAST?

An administrator suspects that a web server is accepting RC4 cipher suites. Which command-line tool can be used to confirm this by attempting a connection with a specific RC4 cipher?

Which component of an SSL/TLS cipher suite is responsible for ensuring that data has not been altered during transmission?

Keep studying — Cryptographic Failures and Transport Security