nerdexam
Cisco

200-201 · Question #324

Refer to the exhibit. Which application-level protocol is being targeted?

The correct answer is C. HTTP. The exhibit indicates that HTTP is the targeted application-level protocol, likely evidenced by plaintext web requests or responses that conform to the HTTP standard.

Submitted by yasin.bd· Mar 6, 2026Network Intrusion Analysis

Question

Refer to the exhibit. Which application-level protocol is being targeted?

Exhibit

200-201 question #324 exhibit

Options

  • AFTP
  • BTCP
  • CHTTP
  • DHTTPS

How the community answered

(34 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    88% (30)
  • D
    6% (2)

Why each option

The exhibit indicates that HTTP is the targeted application-level protocol, likely evidenced by plaintext web requests or responses that conform to the HTTP standard.

AFTP

FTP (File Transfer Protocol) operates on different ports (e.g., 20, 21) and has distinct commands (e.g., USER, PASS, RETR) that would be visible if it were the targeted protocol.

BTCP

TCP (Transmission Control Protocol) is a transport layer protocol, not an application-layer protocol; HTTP runs over TCP, but TCP itself is not the application being targeted.

CHTTPCorrect

HTTP (Hypertext Transfer Protocol) is an application-layer protocol used for transmitting hypermedia documents. If the exhibit shows traffic on port 80 or explicitly non-encrypted web traffic with GET/POST requests, it points to HTTP as the targeted protocol.

DHTTPS

HTTPS (Hypertext Transfer Protocol Secure) encrypts HTTP traffic using TLS/SSL, typically over port 443; if the exhibit shows plaintext web traffic, HTTPS is not in use.

Concept tested: Application layer protocol identification (HTTP)

Source: https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/hypertext-transfer-protocol-overview

Topics

#Application layer protocols#Web application security#HTTP

Community Discussion

No community discussion yet for this question.

Full 200-201 Practice