A Security Analyst for a Bank Received an Anonymous Tip

question 31

Multiple Choice

A security analyst for a bank received an anonymous tip on the external banking website showing the following: Protocols supported - TLS 1.0 - SSL 3 - SSL 2 Cipher suites supported - TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA-ECDH p256r1 - TLS_DHE_RSA_WITH_AES_256_CBC_SHA-DH 1024bit - TLS_RSA_WITH_RC4_128_SHA TLS_FALLBACK_SCSV non supported POODLE Weak PFS OCSP stapling supported Which of the following should the analyst use to reproduce these findings comprehensively?

• A) Query the OCSP responder and review revocation information for the user certificates.
• B) Review CA-supported ciphers and inspect the connection through an HTTP proxy.
• C) Perform a POODLE (SSLv3) attack using an exploitations framework and inspect the output.
• D) Inspect the server certificate and simulate SSL/TLS handshakes for enumeration.

---

Definitions:

Reverse Logistics

The process of moving goods from their typical final destination back to the manufacturer or distributor for returns, repairs, or recycling.

Recycles

The process of converting waste materials into new materials and objects.

Reusable Materials

Items that can be used multiple times for the same or a new purpose, reducing waste and promoting sustainability.

Outdated Computers

Computers that have become obsolete due to advances in technology or software.