A large e-commerce platform discovers that several of its web servers run a vulnerable version of OpenSSL affected by the Heartbleed bug. The company uses TLS for customer logins and payment processing. Which two statements correctly describe the security risk and exploitation mechanism of the Heartbleed attack? Select two correct answers.

Question

A large e-commerce platform discovers that several of its web servers run a vulnerable version of OpenSSL affected by the Heartbleed bug. The company uses TLS for customer logins and payment processing. Which two statements correctly describe the security risk and exploitation mechanism of the Heartbleed attack? Select  two  correct answers.

Answer

Heartbleed enables attackers to inject malicious packets that permanently alter firmware on network routers.

Answer

Heartbleed allows attackers to retrieve private encryption keys directly from disk storage.

Answer

Heartbleed only affects client-side web browsers and does not impact servers.

Answer

Heartbleed works by bypassing all firewall and intrusion detection systems automatically.

Answer

Heartbleed requires physical access to the server to connect a debugging device.

Answer

Heartbleed spreads automatically to other servers once one server is compromised.

Answer

Heartbleed can expose sensitive data such as session cookies, passwords, and private keys stored in server RAM.

Answer

Heartbleed allows attackers to decrypt past captured traffic only if forward secrecy was not enabled.

Answer

Heartbleed manipulates DNS records to redirect users to malicious websites.

Answer

Heartbleed exploits a flaw in the TLS heartbeat extension to leak process memory from a server.

Crowdly

A large e-commerce platform discovers that several of its web servers run a vuln...

Хочете миттєвий доступ до всіх перевірених відповідей на moodle.bcu.ac.uk?