CompTIA CySA+CS0-002 – Question196

SIMULATION
You are a cybersecurity analyst tasked with interpreting scan data from Company A's servers. You must verify the requirements are being met for all of the servers and recommend changes if you find they are not.
The companys hardening guidelines indicate the following:
+ TLS 1.2 is the only version of TLS running
+ Apache 2.4.18 or grater should be used
+ Only default ports should be used
INSTRUCTIONS
Using the supplied data, record the status of compliance with the companys guidelines for each server.
The question contains two parts; make sure you complete Part1 and Part2. Make recommendations for issues based ONLY on the hardening guidelines provided.



Correct Answer: See explanation below.

Explanation:


Explanation:
AppServ1 is only using TLS.1.2 –
AppServ4 is only using TLS.1.2 –
AppServ1 is using Apache 2.4.18 or greater
AppServ3 is using Apache 2.4.18 or greater
AppServ4 is using Apache 2.4.18 or greater
Recommendation is to disable TLS v1.1 on AppServ2 and AppServ3. Also upgrade AppServ2 Apache to version 2.4.48 from its current version of 2.3.48