ExamQuestions.com

Register
Login
CompTIA Advanced Security Practitioner (CASP+) CAS-004 Exam Questions

CompTIA

CompTIA Advanced Security Practitioner (CASP+) CAS-004

37 / 44

Question 37:

A new web server must comply with new secure-by-design principles and PCI DSS. This includes mitigating the risk of an on-path attack. A security analyst is reviewing the following web server configuration: 
image
Which of the following ciphers should the security analyst remove to support the business requirements? 

Answer options:

A. TLS_AES_128_CCM_8_SHA256
B. TLS_DHE_DSS_WITH_RC4_128_SHA
C. TLS_CHACHA20_POLY1305_SHA256
D. TLS_AES_128_GCM_SHA256