nerdexam
GIAC

GSLC · Question #297

Jacob is worried about sniffing attacks and wants to protect his SMTP transmissions from this attack. What can he do to accomplish this?

The correct answer is A. Use an SSL certificate. SSL/TLS encrypts SMTP traffic in transit, preventing network sniffers from reading email content intercepted on the wire.

Security Architecture & Engineering

Question

Jacob is worried about sniffing attacks and wants to protect his SMTP transmissions from this attack. What can he do to accomplish this?

Options

  • AUse an SSL certificate.
  • BUse a proxy server.
  • CUse EFS.
  • DUse a firewall.

How the community answered

(59 responses)
  • A
    92% (54)
  • B
    5% (3)
  • C
    2% (1)
  • D
    2% (1)

Why each option

SSL/TLS encrypts SMTP traffic in transit, preventing network sniffers from reading email content intercepted on the wire.

AUse an SSL certificate.Correct

An SSL certificate enables TLS encryption on SMTP connections (via SMTPS on port 465 or STARTTLS on port 587), wrapping the plaintext email data in an encrypted tunnel so that any intercepted packets are unreadable to an attacker. This directly counters sniffing attacks, which rely on capturing and reading unencrypted plaintext from network traffic.

BUse a proxy server.

A proxy server relays traffic on behalf of clients but does not encrypt the underlying SMTP session, leaving the data readable to a sniffer positioned between any hop in the path.

CUse EFS.

EFS (Encrypting File System) encrypts files stored on an NTFS disk volume and has no effect on data actively transmitted across a network.

DUse a firewall.

A firewall enforces traffic rules by allowing or blocking connections but does not encrypt permitted traffic, so SMTP data that passes the firewall remains visible to a sniffer.

Concept tested: Encrypting SMTP transmissions to prevent sniffing

Source: https://datatracker.ietf.org/doc/html/rfc3207

Topics

#SSL#SMTP security#sniffing attacks#email encryption

Community Discussion

No community discussion yet for this question.

Full GSLC Practice