nerdexam
GIAC

GSEC · Question #232

Which of the following statements about Hypertext Transfer Protocol Secure (HTTPS) are true? Each correct answer represents a complete solution. Choose two.

The correct answer is A. It uses TCP port 443 as the default port. B. It is a protocol used in the Universal Resource Locater (URL) address line to connect to a secure. HTTPS operates on TCP port 443 and is identified by the https:// URL scheme, signaling an encrypted TLS connection between a browser and a web server.

Cloud, Web, and Application Security

Question

Which of the following statements about Hypertext Transfer Protocol Secure (HTTPS) are true? Each correct answer represents a complete solution. Choose two.

Options

  • AIt uses TCP port 443 as the default port.
  • BIt is a protocol used in the Universal Resource Locater (URL) address line to connect to a secure
  • CIt is a protocol used to provide security for a database server in an internal network.
  • DIt uses TCP port 80 as the default port.

How the community answered

(34 responses)
  • A
    79% (27)
  • C
    12% (4)
  • D
    9% (3)

Why each option

HTTPS operates on TCP port 443 and is identified by the https:// URL scheme, signaling an encrypted TLS connection between a browser and a web server.

AIt uses TCP port 443 as the default port.Correct

HTTPS uses TCP port 443 as its default port, as standardized in RFC 2818 which defines HTTP over TLS/SSL. This port designation distinguishes HTTPS traffic from plain HTTP traffic at the transport layer. Servers and clients both recognize port 443 as the standard endpoint for encrypted web communication.

BIt is a protocol used in the Universal Resource Locater (URL) address line to connect to a secureCorrect

HTTPS appears in the URL scheme (https://) to instruct the browser to establish an encrypted TLS/SSL connection to the target web server before transmitting any data. This URL prefix is the standard mechanism for indicating that communication with a web resource is protected in transit. It ensures data confidentiality, integrity, and server authentication between the client and server.

CIt is a protocol used to provide security for a database server in an internal network.

HTTPS is not specifically designed to secure database servers on internal networks - it is a web-layer protocol that secures HTTP communication between clients and web servers over any network.

DIt uses TCP port 80 as the default port.

TCP port 80 is the default port for plain, unencrypted HTTP traffic and provides no transport-layer encryption; HTTPS specifically uses port 443 to differentiate secure from non-secure web traffic.

Concept tested: HTTPS protocol, default port 443, and URL scheme

Source: https://www.rfc-editor.org/rfc/rfc2818

Topics

#HTTPS#SSL/TLS#port 443#web security

Community Discussion

No community discussion yet for this question.

Full GSEC Practice