CompTIA Linux+ XK0-006 (V8) Practice Question

The -tls1_1 option forces the client to attempt a handshake using only the TLS 1.1 protocol. If the server has correctly disabled that version, the command will fail to complete the handshake and return an error, proving that TLS 1.1 is no longer accepted. The -no_tls1_1 switch does the opposite-it blocks TLS 1.1 but still allows higher versions, so the connection could succeed and give a false sense of security. Adding -starttls targets a specific application layer (such as HTTP or SMTP) and is unnecessary when the service is already running native TLS on port 443. Specifying unrelated ports or cipher manipulations also fails to provide a focused protocol-version test.