1D0-610 · Question #61
Marcella is looking for a very unique product online. She has found one on the XYZ Company's Web site, which is designed well and appears to be legitimate. As she navigates through the checkout…
The correct answer is C. Because the link does not use SSL/TLS encryption and therefore the information Marcella enters. Option C is correct because a legitimate checkout page requesting sensitive financial data must use SSL/TLS encryption (indicated by https:// in the URL). Without it, credit card information is transmitted as unencrypted plaintext, making it trivially interceptable by attackers…
Question
Marcella is looking for a very unique product online. She has found one on the XYZ Company's Web site, which is designed well and appears to be legitimate. As she navigates through the checkout process, she reaches the checkout page with this URL, which asks her to enter her credit card information:
should Marcella cancel her online transaction instead of proceeding?
Options
- ABecause the site uses 128-bit encryption, which is illegal for companies that are located overseas
- BBecause the link contains abbreviations and is not completely readable, so Marcella is unsure of
- CBecause the link does not use SSL/TLS encryption and therefore the information Marcella enters
- DBecause the link uses SSL/TLS encryption, which Marcella knows is not compatible with the browser
How the community answered
(43 responses)- A2% (1)
- B14% (6)
- C74% (32)
- D9% (4)
Explanation
Option C is correct because a legitimate checkout page requesting sensitive financial data must use SSL/TLS encryption (indicated by https:// in the URL). Without it, credit card information is transmitted as unencrypted plaintext, making it trivially interceptable by attackers via a man-in-the-middle attack - this alone is sufficient reason to abort the transaction.
Why the distractors are wrong:
- A is fabricated - 128-bit encryption is not "illegal for overseas companies"; this has no basis in law or security standards.
- B describes a legitimate phishing red flag (suspicious URLs), but the answer stem implies the specific reason to cancel is the encryption failure, not URL readability alone.
- D is backwards - SSL/TLS is universally supported by modern browsers; incompatibility is not a real concern.
Memory tip: Think "S is for Safe" - https:// means the Secure layer (SSL/TLS) is active. Any checkout or login page missing that S should be an immediate stop sign, because your data travels naked across the network.
Topics
Community Discussion
4
Ola B.Dec 31, 2025The answer is C. If the checkout URL starts with http instead of https, there is no SSL/TLS encryption in place, which means any credit card data Marcella submits travels across the network in plain text and can be intercepted by anyone sniffing that traffic. A legitimate checkout page will always use https, and most modern browsers will even display a warning or a broken padlock icon when encryption is missing. Spin up Wireshark in a lab environment sometime and submit a form over plain http, then watch the capture, you will see exactly why this matters. That hands-on test makes the concept stick far better than any flash card.
Bao N.Jan 11, 2026C is the right call here, and the URL is the giveaway. If that checkout page is serving over plain HTTP instead of HTTPS, her card number and billing details go across the wire unencrypted, which means anyone doing a simple packet capture on the same network can grab them in cleartext. B is the tempting one because sketchy-looking URLs are a real red flag in phishing scenarios, but abbreviations alone are not a security vulnerability the way a missing TLS handshake is. The exam wants you to recognize that HTTP on a payment page is a hard stop, full stop, no matter how polished the site looks.
Samuel O.Jan 16, 2026Saw this exact URL trick on my exam, http not https gave it away instantly.
Quincy P.Dec 27, 2025C is dead on. The checkout URL showing plain HTTP instead of HTTPS means there is zero transport-layer encryption in play, so anything Marcella types into that form, card number, CVV, billing address, travels across the wire in cleartext and is trivially captured by anyone running a packet sniffer on the same network path.