nerdexam
GIAC

GSEC · Question #187

Which of the following protocols are used to provide secure communication between a client and a server over the Internet? Each correct answer represents a part of the solution. Choose two.

The correct answer is A. SSL C. TLS. SSL and TLS are the two cryptographic protocols specifically designed to provide encrypted, authenticated communication between clients and servers over the Internet.

Defense in Depth and Protocols

Question

Which of the following protocols are used to provide secure communication between a client and a server over the Internet? Each correct answer represents a part of the solution. Choose two.

Options

  • ASSL
  • BHTTP
  • CTLS
  • DSNMP

How the community answered

(41 responses)
  • A
    80% (33)
  • B
    15% (6)
  • D
    5% (2)

Why each option

SSL and TLS are the two cryptographic protocols specifically designed to provide encrypted, authenticated communication between clients and servers over the Internet.

ASSLCorrect

SSL (Secure Sockets Layer) is the predecessor protocol to TLS that established the standard for encrypting application-layer traffic between clients and servers, authenticating the server via digital certificates.

BHTTP

HTTP (HyperText Transfer Protocol) transmits data in plaintext with no encryption or authentication, making it unsuitable for secure communication.

CTLSCorrect

TLS (Transport Layer Security) is the modern, more secure successor to SSL and is the protocol currently used by HTTPS, email (SMTP/IMAP), and other services to ensure confidentiality and integrity over untrusted networks.

DSNMP

SNMP (Simple Network Management Protocol) is used for monitoring and managing network devices, not for securing client-server communication sessions.

Concept tested: SSL and TLS secure communication protocols

Source: https://learn.microsoft.com/en-us/windows-server/security/tls/tls-ssl-schannel-ssp-overview

Topics

#SSL#TLS#secure communication#transport encryption

Community Discussion

No community discussion yet for this question.

Full GSEC Practice