nerdexam
GIAC

GCIH · Question #172

Which of the following is the difference between SSL and S-HTTP?

The correct answer is D. SSL operates at the transport layer and S-HTTP operates at the application layer. SSL secures the entire transport-layer channel for any protocol above it, while S-HTTP is an application-layer protocol that secures individual HTTP messages.

Incident Response & Cyber Kill Chain

Question

Which of the following is the difference between SSL and S-HTTP?

Options

  • ASSL operates at the application layer and S-HTTP operates at the network layer.
  • BSSL operates at the application layer and S-HTTP operates at the transport layer.
  • CSSL operates at the network layer and S-HTTP operates at the application layer.
  • DSSL operates at the transport layer and S-HTTP operates at the application layer.

How the community answered

(31 responses)
  • A
    3% (1)
  • B
    6% (2)
  • C
    3% (1)
  • D
    87% (27)

Why each option

SSL secures the entire transport-layer channel for any protocol above it, while S-HTTP is an application-layer protocol that secures individual HTTP messages.

ASSL operates at the application layer and S-HTTP operates at the network layer.

SSL does not operate at the application layer - it functions at the transport layer to provide a generic secure channel that sits beneath application protocols.

BSSL operates at the application layer and S-HTTP operates at the transport layer.

Although S-HTTP is correctly placed at the application layer in this option, SSL does not operate at the application layer - it operates at the transport layer, not alongside HTTP.

CSSL operates at the network layer and S-HTTP operates at the application layer.

SSL does not operate at the network layer - it sits between the transport and application layers, and S-HTTP belongs at the application layer, making the layer assignments in this option reversed.

DSSL operates at the transport layer and S-HTTP operates at the application layer.Correct

SSL (Secure Sockets Layer) operates at the transport layer, creating an encrypted tunnel between client and server that any application-layer protocol can use, independent of the message content. S-HTTP (Secure Hypertext Transfer Protocol) operates at the application layer and secures HTTP transactions individually - it encrypts and signs specific messages rather than the entire connection, making the two protocols architecturally distinct in their OSI layer placement.

Concept tested: SSL vs S-HTTP OSI layer differentiation

Source: https://www.rfc-editor.org/rfc/rfc2660

Topics

#SSL#S-HTTP#protocol layers#transport security

Community Discussion

No community discussion yet for this question.

Full GCIH Practice