Which option correctly describes the encryption technologies that should be used with "TLS Preferred" Guaranteed Secure Delivery?

Question

Options

• ATry to use TLS. If it fails, use envelope encryption.
• BTry envelope encryption first. If it fails, use TLS.
• CAlways use envelope encryption.
• DAlways use TLS. If TLS fails, bounce the message.

• A
  93% (42)
• B
  4% (2)
• C
  2% (1)

Explanation

Option A is correct because "TLS Preferred" means the system attempts TLS first but gracefully falls back to envelope encryption if TLS cannot be established - this is the defining behavior of a "preferred" (not required) setting. Option B reverses the priority order, making envelope encryption the primary method, which contradicts the "TLS Preferred" label. Option C ignores TLS entirely, which would instead describe an "Envelope Encryption Only" policy. Option D describes TLS Required behavior - bouncing a message on TLS failure means no fallback is permitted, a stricter policy than "preferred."

Memory tip: Think of "Preferred" as a polite first attempt - TLS gets to go first, and envelope encryption is the backup if TLS doesn't show up. "Required" means no backup allowed; it's TLS or nothing (bounce).

No community discussion yet for this question.