GSLC · Question #269
John works as a professional Ethical Hacker. He has been assigned the task of testing the that the following protocols of the We-are-secure server are being used in the network: - HTTP - SSL - SSH…
The correct answer is A. SSH B. IPSec D. SSL. SSH, IPSec, and SSL all encrypt their traffic by design, while plain HTTP transmits data in cleartext and would appear unencrypted in a packet capture.
Question
John works as a professional Ethical Hacker. He has been assigned the task of testing the that the following protocols of the We-are-secure server are being used in the network:
- HTTP
- SSL
- SSH
- IPSec
Considering the above factors, which of the following types of packets can he expect to see captured in encrypted form when he checks the sniffer's log file? Each correct answer represents a complete solution. Choose all that apply.
Options
- ASSH
- BIPSec
- CHTTP
- DSSL
How the community answered
(59 responses)- A92% (54)
- C8% (5)
Why each option
SSH, IPSec, and SSL all encrypt their traffic by design, while plain HTTP transmits data in cleartext and would appear unencrypted in a packet capture.
SSH (Secure Shell) encrypts all data in transit using symmetric encryption after a key exchange, so any captured SSH packets appear as ciphertext in a sniffer log.
IPSec operates at the network layer and encrypts the payload (in tunnel or transport mode), meaning captured packets reveal no readable application data.
HTTP transmits all data, including headers, cookies, and body content, as plaintext with no encryption, so it would appear in clear, readable form in a sniffer log.
SSL (and its successor TLS) encrypts the session after the handshake, so all application data carried over SSL appears encrypted in a packet capture.
Concept tested: Identifying encrypted vs plaintext network protocols
Source: https://www.rfc-editor.org/rfc/rfc4301
Topics
Community Discussion
No community discussion yet for this question.