MENU
Given this as the first packet displayed of an ssldump:
2 2 1296947622.6313 (0.0001) S>CV3.1(74) Handshake
ServerHello
random[32]=
19 21 d7 55 c1 14 65 63 54 23 62 b7 c4 30 a2 f0
b8 c4 20 06 86 ed 9c 1f 9e 46 0f 42 79 45 8a 29
session_id[32]=
c4 44 ea 86 e2 ba f5 40 4b 44 b4 c2 3a d8 b4 ad
4c dc 13 0d 6c 48 f2 70 19 c3 05 f4 06 e5 ab a9
cipherSuite TLS_RSA_WITH_RC4_128_SHA
compressionMethod NULL
In reviewing the rest of the ssldump, the application data is NOT being decrypted.
Why is ssldump failing to decrypt the application data?
Suggested Answer: D
Get Premium 301b Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
29 comments · newest first
RO
Rodolfo
12 months ago
I disagree, it’s more likely a TLS version mismatch.
PA
Paris
12 months ago
Nah, it’s probably just a key log issue.
SA
Sanda
12 months ago
Wait, is SSLv3 still in use? That seems outdated!
BO
Bobbie
1 year ago
I think it's definitely related to the session resumption.
ST
Stephanie
1 year ago
The cipher suite is SSLv3, so that could be an issue.
LU
Lucy
1 year ago
I think the application data not being decrypted might be due to the session being resumed, but I need to double-check that.
RE
Rene
1 year ago
I feel like the key log adjustment could be a factor, but I can't recall the specifics.
ZO
Zona
1 year ago
This kind of question seems familiar; I think it might be related to session resumption issues.
RI
Rikki
1 year ago
I remember something about SSLv3 and TLSv1, but I'm not sure which one is relevant here.
NI
Nickie
1 year ago
This looks like a straightforward present value calculation, so I think I can handle it. I'll need to use the formula and plug in the given values.
DA
Dana
1 year ago
I was leaning toward the hybrid approach since it seems flexible, but I can't recall the specifics of when to apply it effectively.
JA
Janey
1 year ago
This question seems a bit confusing. I'll need to read it carefully and think through the key points.
RA
Ranee
1 year ago
Wait, doesn't the ServerHello indicate that the session is not resumed? I'm leaning towards option B being the correct answer.
LO
Loren
1 year ago
User 3: Makes sense. TLSv1 encryption would explain the decryption issue.
CY
Cyril
1 year ago
User 2: Yeah, I agree. That points to option B, TLSv1 encryption.
GA
Gary
1 year ago
User 1: I think the ServerHello shows it's not a resumed session.
RA
Rasheeda
1 year ago
Haha, the 'BigDB Key Log.Tcpdump.Level' made me chuckle. I bet the developers had a hard time coming up with that one.
DY
Dyan
1 year ago
I'm not sure about the resumed TLS session part, but the cipherSuite indicates it's using RC4, so maybe that's the issue?
CE
Cecil
1 year ago
C) The data is contained within a resumed TLS session.
ST
Stacey
1 year ago
B) The application data is encrypted with TLSv1.
LU
Lucille
1 year ago
A) The application data is encrypted with SSLv3.
CO
Coral
1 year ago
Hmm, I think the key log needs to be adjusted, so option D might be the right answer here.
RA
Raymon
1 year ago
Maybe the application data is encrypted with SSLv3.
JA
Jamika
1 year ago
I think it's because the data is contained within a resumed TLS session.
KA
Katlyn
1 year ago
I agree, the key log might need to be adjusted.
FL
Fletcher
1 year ago
The application data is encrypted with TLSv1, not SSLv3, so option A is incorrect.
JA
Jamal
2 years ago
But could it also be because the data is contained within a resumed TLS session?
PA
Pamella
2 years ago
I agree with Han, it makes sense given the ssldump.
HA
Han
2 years ago
I think the application data is encrypted with SSLv3.