As
part of a penetration test, Alex needs to determine if there are web servers
that could suffer from the 2014 Heartbleed bug. What type of tool could he use,
and what should he check to verify that the tool can identify the problem?

Question

Accepted Answer

A
vulnerability scanner, to see whether the scanner has a signature or test for
the Heartbleed CVE number

Answer

A
port scanner, to see whether the scanner properly identifies SSL connections

Answer

A
vulnerability scanner, to see whether the vulnerability scanner detects
problems with the Apache web server

Answer

A
port scanner, to see whether the port scanner supports TLS connections

Crowdly

As part of a penetration test, Alex needs to determine if there are web servers ...

Want instant access to all verified answers on vns.lpnu.ua?