GSLC · Question #190
Jacob is worried about sniffing attacks and wants to protect his SMTP transmissions from this attack. What can he do to accomplish this?
The correct answer is A. Use an SSL certificate. Encrypting SMTP connections with an SSL/TLS certificate prevents network sniffers from reading email traffic in transit by making intercepted packets unreadable.
Question
Jacob is worried about sniffing attacks and wants to protect his SMTP transmissions from this attack. What can he do to accomplish this?
Options
- AUse an SSL certificate.
- BUse EFS.
- CUse a proxy server.
- DUse a firewall.
How the community answered
(40 responses)- A83% (33)
- B5% (2)
- C3% (1)
- D10% (4)
Why each option
Encrypting SMTP connections with an SSL/TLS certificate prevents network sniffers from reading email traffic in transit by making intercepted packets unreadable.
An SSL/TLS certificate enables encrypted SMTP transport via SMTPS (port 465) or STARTTLS (port 587), wrapping the email session in an encrypted channel so that any packets captured by a sniffer on the network cannot be decoded. This directly counters sniffing attacks by ensuring confidentiality of data in transit. Without this encryption, SMTP credentials and message content are transmitted in plaintext and are trivially captured.
EFS (Encrypting File System) encrypts files stored on a local disk volume and provides no protection for data actively transmitted over a network, leaving SMTP traffic fully exposed to sniffers.
A proxy server routes traffic through an intermediary for access control or caching purposes but does not inherently encrypt the SMTP session between endpoints, so sniffers on the path can still capture plaintext data.
A firewall enforces network access control policies and can block unauthorized connections but does not encrypt the content of permitted traffic, offering no protection against sniffing within an allowed network path.
Concept tested: Encrypting SMTP traffic with SSL/TLS against sniffing
Source: https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/use-connectors-to-configure-mail-flow/set-up-connectors-for-secure-mail-flow-with-a-partner
Topics
Community Discussion
No community discussion yet for this question.