Practice Question (not mine) · CISSP Study Group

Practice Question (not mine)

A specially crafted attack has demonstrated a significant flaw in a cryptographic protocol used in your organization to secure data in motion. The protocol is currently configured to allow its predecessor version as a fallback for backwards compatibility. The attack takes advantage of the implementation flaws of CBC encryption modes in the fallback mechanism. What would be the first step to immediately resolve this vulnerability?

A. Upgrade the cryptographic protocol

B. Stop using the fallback protocol

C. Disable backwards compatibility

D. Confirm vulnerability

8 comments