Which common exploit method is TLS 1.3 designed to prevent?

The correct answer is A. man-in-the-middle attack. TLS 1.3 is specifically engineered to prevent man-in-the-middle (MITM) attacks by enforcing forward secrecy on every connection and eliminating legacy cipher suites that attackers could exploit to intercept or tamper with encrypted traffic. Denial-of-service attacks (B) target…

Submitted by mike_84· Mar 30, 2026Network Security

Question

Options

Aman-in-the-middle attack
Bdenial-of-service attack
Ccross-site request forgery
Dcross-site scripting

How the community answered

(34 responses)

A
91% (31)
B
3% (1)
C
6% (2)

Explanation

TLS 1.3 is specifically engineered to prevent man-in-the-middle (MITM) attacks by enforcing forward secrecy on every connection and eliminating legacy cipher suites that attackers could exploit to intercept or tamper with encrypted traffic. Denial-of-service attacks (B) target availability through traffic flooding, which is a network-layer problem TLS doesn't address. Cross-site request forgery (C) and cross-site scripting (D) are application-layer web vulnerabilities that operate independently of the transport encryption protocol - TLS secures the channel, not the application logic running over it.

Memory tip: Think of TLS as a secure tunnel - it stops someone in the middle of the tunnel from eavesdropping (MITM), but it has no say over what happens inside the web application at either end (CSRF, XSS) or how much traffic floods the tunnel entrance (DoS).

Topics

#TLS 1.3#Man-in-the-Middle Attacks#Network Security Protocols#Encryption

Community Discussion

No community discussion yet for this question.

Full 350-701 Practice