CompTIA SecurityX (CAS-005) — Question 296
A security analyst received a report that an internal web page is down after a company-wide update to the web browser. Given the following error message:
Your connection is not private.
Attackers might be trying to steal your information for www. internalwebsite.company.com.
NET::ERR_CERT_WEAK_SIGNATURE_ALGORITHM
Which of the following is the best way to fix this issue?
Answer options
- A. Rewriting any legacy web functions
- B. Disabling all deprecated ciphers
- C. Blocking all non-essential ports
- D. Discontinuing the use of self-signed certificates
Correct answer: D
Explanation
The correct answer is D because self-signed certificates may not meet modern security standards and can lead to weak signature algorithms, causing browser warnings. Options A, B, and C do not directly address the issue related to certificate trust and security, which is the core problem indicated by the error message.