The website of a large retail chain is falling to enforce encrypted HTTPS connections, leaving customer account credentials exposed. Which of the following is the best corrective action for resolving

The correct answer is B. Implement HTTP Strict Transport Security Headers.. Enabling HTTP Strict Transport Security forces browsers to use HTTPS exclusively, preventing any unencrypted HTTP connections. This ensures customer credentials cannot be transmitted in plaintext and corrects the failure to enforce secure connections.

Submitted by neha2k· Mar 6, 2026Security operations

Question

The website of a large retail chain is falling to enforce encrypted HTTPS connections, leaving customer account credentials exposed. Which of the following is the best corrective action for resolving this issue?

Options

ARemove any redirect settings of HTTP connections to HTTPS.
BImplement HTTP Strict Transport Security Headers.
CInstall a self-signed certificate on the web server.
DReduce the default timeout period for all web-based sessions.

How the community answered

(33 responses)

A
3% (1)
B
91% (30)
D
6% (2)

Explanation

Enabling HTTP Strict Transport Security forces browsers to use HTTPS exclusively, preventing any unencrypted HTTP connections. This ensures customer credentials cannot be transmitted in plaintext and corrects the failure to enforce secure connections.

Topics

#HTTPS enforcement#HSTS#web server security#secure configuration

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice