Which of the following should the company use to make this determination?

A company’s SOC has received threat intelligence about an active campaign utilizing a specific vulnerability. The company would like to determine whether it is vulnerable to this active campaign.

Which of the following should the company use to make this determination?
A . Threat hunting
B . A system penetration test
C . Log analysis within the SIEM tool
D . The Cyber Kill Chain

View Answer

Answer: B

Explanation:

The security analyst should remove the cipher TLS_DHE_DSS_WITH_RC4_128_SHA to support the business requirements, as it is considered weak and vulnerable to on-path attacks. RC4 is an outdated stream cipher that has been deprecated by major browsers and protocols due to its flaws and weaknesses. The other ciphers are more secure and compliant with secure-by-design principles and PCI DSS.

Verified Reference:

https://www.comptia.org/blog/what-is-a-cipher

https://partners.comptia.org/docs/default-source/resources/casp-content-guide