Based on the TLS handshake shown, what can be inferred about the client?
A.
Supports TLS 1.0 only
B.
Supports TLS 1.2 and TLS 1.3
C.
Supports SSLv3
D.
Supports DTLS
The Answer Is:
B
This question includes an explanation.
Explanation:
In modern TLS handshakes (starting with TLS 1.3), the Client Hello packet includes a specific extension called supported_versions. This extension lists all the TLS versions the client is capable of using. Typically, a client supporting TLS 1.3 will also list TLS 1.2 for backward compatibility to ensure it can successfully negotiate a secure connection with servers that have not yet upgraded. When both versions are present in the supported_versions field, it signifies that the client is capable of both TLS 1.2 and TLS 1.3 . This is a critical component for FortiGate when performing deep SSL/TLS inspection, as the firewall must understand the negotiated version to decrypt the traffic for security analysis.
FCSS_EFW_AD-7.6 PDF/Engine
Printable Format
Value of Money
100% Pass Assurance
Verified Answers
Researched by Industry Experts
Based on Real Exams Scenarios
100% Real Questions
Get 65% Discount on All Products,
Use Coupon: "ac4s65"