Which action should be taken to enable TLSv1.2 and disable SSLv3 to enhance security on virtual servers?

• A. Enable RC4 cipher suite
• B. Create SHA1 key
• C. Enable TLSv1.2
• D. Disable SSLv3

Answer: (C)

The action to take is to enable TLSv1.2. TLS 1.2 is the current secure protocol that supports stronger cipher suites and hash algorithms, reducing vulnerabilities found in older protocols. By enabling TLSv1.2 on the virtual servers, you ensure that connections negotiate the modern, secure protocol. When this is in place, you can also configure the server to disable SSLv3 so that no fallbacks to the insecure SSLv3 occur, further hardening the setup.

Enabling RC4 would undermine security because RC4 is deprecated and considered insecure. Creating a SHA1 key doesn’t address protocol version or SSLv3 usage. Simply disabling SSLv3 helps, but it doesn’t actually enable TLSv1.2 by itself; you need to enable TLSv1.2 to ensure that the newer protocol is available for negotiations.