A Security Engineer Is Concerned About Susceptibility to HTTP Downgrade

question 370

Multiple Choice

A security engineer is concerned about susceptibility to HTTP downgrade attacks because the current customer portal redirects users from port 80 to the secure site on port 443. Which of the following would be MOST appropriate to mitigate the attack?

• A) DNSSEC
• B) HSTS
• C) Certificate pinning
• D) OCSP

---

Definitions:

Organizational Culture

The shared values, beliefs, norms, and practices that define a group or organization’s way of operating.

Effective Change

Involves the successful implementation of new ideas, behaviors, or processes in an organization, leading to measurable improvements.

Critical Few

A term referring to the small number of vital factors or key individuals that are considered most important in achieving a larger goal or performance target.

Culture Shock

The feeling of disorientation experienced by someone who is suddenly subjected to an unfamiliar culture, way of life, or set of attitudes.