Weak SSL/TLS Ciphers WAHS Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A security assessment of a legacy e-commerce application reveals that the server supports TLS_RSA_WITH_RC4_128_SHA and TLS_RSA_WITH_3DES_EDE_CBC_SHA. The application must remain compatible with a small number of older embedded devices that only support TLS 1.0. Which action best addresses the identified risk while maintaining the required compatibility?

   • ADisable RC4 and 3DES, and configure TLS 1.0 with AES128-SHA as the only cipher suite.
   • BEnable TLS_RSA_WITH_AES_128_CBC_SHA and TLS_RSA_WITH_AES_256_CBC_SHA while leaving RC4 enabled as a fallback.
   • CUpgrade all legacy devices to support TLS 1.2 and then disable all TLS 1.0 ciphers.
   • DKeep RC4 enabled but disable 3DES, since RC4 is faster and the devices require it.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   During a penetration test, you run an SSL/TLS scanner against a web server and receive the following output: 'TLSv1.2 supports ECDHE-RSA-AES128-GCM-SHA256 and DHE-RSA-AES128-SHA; TLSv1.0 supports EXP-RC4-MD5 and DES-CBC3-SHA.' The application is not PCI DSS compliant. Which finding should be prioritized for immediate remediation?

   • AEnable TLSv1.3 and leave the existing configuration unchanged for backward compatibility.
   • BDisable TLSv1.2 and keep only TLSv1.0 with the current ciphers to avoid compatibility issues.
   • CDisable TLSv1.0 and the EXP-RC4-MD5 and DES-CBC3-SHA cipher suites.
   • DReplace DHE-RSA-AES128-SHA with ECDHE-RSA-AES128-GCM-SHA256 on TLSv1.2.
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   Which organization publishes guidelines that recommend the use of TLS 1.2 or later and prohibit the use of weak ciphers like RC4 and DES?

   • ANIST
   • BOWASP
   • CIETF
   • DISO
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A security auditor is reviewing a web server's TLS configuration and finds that it supports the cipher suite TLS_RSA_WITH_3DES_EDE_CBC_SHA. Why is this cipher suite considered weak?

   • AIt uses a 64-bit block cipher, making it vulnerable to birthday attacks like Sweet32.
   • BIt uses the DES algorithm, which is vulnerable to brute-force attacks.
   • CIt uses RSA key exchange, which is inherently insecure.
   • DIt uses a 56-bit key, which is too short.
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   During an incident response, you find that an attacker performed a man-in-the-middle attack against a web application. The server logs show that the session used TLS_DHE_RSA_WITH_AES_128_CBC_SHA. Which additional finding would most likely explain the success of the attack?

   • AThe attacker used a padding oracle attack against the CBC mode.
   • BThe server's RSA certificate was self-signed, and the client did not validate it.
   • CThe server's DHE parameters were only 512 bits, allowing the attacker to compute the ephemeral private key.
   • DThe attacker captured the server's private key and decrypted the session.
   Reveal Solution Discussion Select an answer first