nerdexam
(ISC)2

CISSP-ISSEP · Question #34

You work as a Network Administrator for PassGuide Inc. You need to secure web services of your company in order to have secure transactions. Which of the following will you recommend for providing sec

The correct answer is D. SSL. SSL (Secure Sockets Layer) is correct because it encrypts data transmitted between a web browser and server, making it the standard protocol for securing web-based transactions - precisely what HTTPS uses under the hood. HTTP (A) is the baseline web protocol with no encryption, m

Security Planning and Design

Question

You work as a Network Administrator for PassGuide Inc. You need to secure web services of your company in order to have secure transactions. Which of the following will you recommend for providing security?

Options

  • AHTTP
  • BVPN
  • CSMIME
  • DSSL

How the community answered

(40 responses)
  • A
    3% (1)
  • B
    8% (3)
  • C
    3% (1)
  • D
    88% (35)

Explanation

SSL (Secure Sockets Layer) is correct because it encrypts data transmitted between a web browser and server, making it the standard protocol for securing web-based transactions - precisely what HTTPS uses under the hood.

HTTP (A) is the baseline web protocol with no encryption, making it completely insecure for sensitive transactions. VPN (B) secures network tunnels between endpoints but is not designed specifically for web service security - it operates at the network layer rather than the application layer. S/MIME (C) is an email encryption standard, not a web security protocol.

Memory tip: Think "SSL = Secure Shopping Layer" - every time you see the padlock in your browser on a shopping or banking site, that's SSL (now TLS) in action.

Topics

#Web security#SSL/TLS#Secure transactions#Security protocols

Community Discussion

No community discussion yet for this question.

Full CISSP-ISSEP Practice