nerdexam
EC-Council

312-50V10 · Question #781

Email is transmitted across the Internet using the Simple Mail Transport Protocol. SMTP does not encrypt email, leaving the information in the message vulnerable to being read by an unauthorized…

The correct answer is D. STARTTLS. STARTTLS is the SMTP command that upgrades an existing plaintext connection to TLS encryption, enabling secure email transmission between mail servers.

Cryptography

Question

Email is transmitted across the Internet using the Simple Mail Transport Protocol. SMTP does not encrypt email, leaving the information in the message vulnerable to being read by an unauthorized person. SMTP can upgrade a connection between two mail servers to use TLS. Email transmitted by SMTP over TLS is encrypted. What is the name of the command used by SMTP to transmit email over TLS?

Options

  • AOPPORTUNISTICTLS
  • BUPGRADETLS
  • CFORCELTS
  • DSTARTTLS

How the community answered

(33 responses)
  • B
    3% (1)
  • C
    3% (1)
  • D
    94% (31)

Why each option

STARTTLS is the SMTP command that upgrades an existing plaintext connection to TLS encryption, enabling secure email transmission between mail servers.

AOPPORTUNISTICTLS

OPPORTUNISTICTLS is not a valid SMTP command - opportunistic TLS describes a connection behavior (attempt TLS but fall back to plaintext if unavailable) rather than a defined protocol command.

BUPGRADETLS

UPGRADETLS is not a recognized SMTP command or extension defined in any RFC or mail protocol specification.

CFORCELTS

FORCELTS is not a valid SMTP command and appears to be a misspelled distractor with no basis in any mail protocol specification.

DSTARTTLSCorrect

STARTTLS is a standard SMTP extension defined in RFC 3207 that signals to the receiving mail server that the client wants to upgrade the current plaintext session to TLS encryption. Once both servers complete the TLS handshake, all subsequent SMTP communication is encrypted, protecting message content from interception in transit.

Concept tested: SMTP STARTTLS command for TLS encryption upgrade

Source: https://www.rfc-editor.org/rfc/rfc3207

Topics

#STARTTLS#SMTP#TLS encryption#email security

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice