Which of the following should the security engineer modify?

A security configure is building a solution to disable weak CBC configuration for remote access connections lo Linux systems .

Which of the following should the security engineer modify?
A . The /etc/openssl.conf file, updating the virtual site parameter
B . The /etc/nsswith.conf file, updating the name server
C . The /etc/hosts file, updating the IP parameter
D . The /etc/etc/sshd, configure file updating the ciphers

View Answer

Answer: D

Explanation:

The sshd_config file is the main configuration file for the OpenSSH server. To disable weak CBC (Cipher Block Chaining) ciphers for SSH connections, the security engineer should modify the sshd_config file to update the list of allowed ciphers. This file typically contains settings for the SSH daemon, including which encryption algorithms are allowed.

By editing the /etc/ssh/sshd_config file and updating the Ciphers directive, weak ciphers can be removed, and only strong ciphers can be allowed. This change ensures that the SSH server does not use insecure encryption methods.

References:

CompTIA Security+ Study Guide

OpenSSH manual pages (man sshd_config)

CIS Benchmarks for Linux