CompTIA SecurityX (CAS-005) CAS-005 — Question 129

Topic 1 · Question 129 · Select all that apply

A vulnerability scan on a web server identified the following: Which of the following actions would most likely eliminate on-path decryption attacks? (Choose two.)

• ADisallowing cipher suites that use ephemeral modes of operation for key agreement
• BRemoving support for CBC-based key exchange and signing algorithms
• CAdding TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA256
• DImplementing HIPS rules to identify and block BEAST attack attempts
• ERestricting cipher suites to only allow TLS_RSA_WITH_AES_128_CBC_SHA
• FIncreasing the key length to 256 for TLS_RSA_WITH_AES_128_CBC_SHA

Select 2 answers to reveal the result.