nerdexam
GIAC

GSLC · Question #400

John works as a professional Ethical Hacker. He has been assigned the task of testing the that the following protocols of the We-are-secure server are being used in the network: HTTP SSL SSH IPSec Con

The correct answer is A. SSH B. SSL D. IPSec. SSH, SSL, and IPSec all encrypt their payloads before transmission, so a packet sniffer captures only ciphertext for these protocols. HTTP transmits data in plaintext and is fully readable in a sniffer log.

Security Architecture & Engineering

Question

John works as a professional Ethical Hacker. He has been assigned the task of testing the that the following protocols of the We-are-secure server are being used in the network:

HTTP SSL SSH IPSec Considering the above factors, which of the following types of packets can he expect to see captured in encrypted form when he checks the sniffer's log file? Each correct answer represents a complete solution. Choose all that apply.

Options

  • ASSH
  • BSSL
  • CHTTP
  • DIPSec

How the community answered

(24 responses)
  • A
    71% (17)
  • C
    29% (7)

Why each option

SSH, SSL, and IPSec all encrypt their payloads before transmission, so a packet sniffer captures only ciphertext for these protocols. HTTP transmits data in plaintext and is fully readable in a sniffer log.

ASSHCorrect

SSH encrypts the entire session payload using a negotiated symmetric cipher after an asymmetric key exchange, so all captured SSH packets appear as indecipherable ciphertext in a sniffer log.

BSSLCorrect

SSL establishes an encrypted channel using asymmetric key exchange and symmetric bulk encryption, ensuring all application-layer data is captured in encrypted form by any sniffer on the network.

CHTTP

Standard HTTP transmits all data including headers, cookies, and body content in plaintext with no encryption, so a sniffer captures and displays the full content in fully human-readable form.

DIPSecCorrect

IPSec encrypts IP packet payloads at the network layer in both tunnel and transport modes, so a sniffer captures encrypted data and cannot read the original packet contents.

Concept tested: Network protocol encryption and packet sniffer visibility

Source: https://learn.microsoft.com/en-us/windows-server/security/tls/tls-ssl-schannel-ssp-overview

Topics

#encrypted protocols#SSH#SSL#IPSec#packet capture

Community Discussion

No community discussion yet for this question.

Full GSLC Practice