GSLC · Question #400
John works as a professional Ethical Hacker. He has been assigned the task of testing the that the following protocols of the We-are-secure server are being used in the network: HTTP SSL SSH IPSec Con
The correct answer is A. SSH B. SSL D. IPSec. SSH, SSL, and IPSec all encrypt their payloads before transmission, so a packet sniffer captures only ciphertext for these protocols. HTTP transmits data in plaintext and is fully readable in a sniffer log.
Question
John works as a professional Ethical Hacker. He has been assigned the task of testing the that the following protocols of the We-are-secure server are being used in the network:
HTTP SSL SSH IPSec Considering the above factors, which of the following types of packets can he expect to see captured in encrypted form when he checks the sniffer's log file? Each correct answer represents a complete solution. Choose all that apply.
Options
- ASSH
- BSSL
- CHTTP
- DIPSec
How the community answered
(24 responses)- A71% (17)
- C29% (7)
Why each option
SSH, SSL, and IPSec all encrypt their payloads before transmission, so a packet sniffer captures only ciphertext for these protocols. HTTP transmits data in plaintext and is fully readable in a sniffer log.
SSH encrypts the entire session payload using a negotiated symmetric cipher after an asymmetric key exchange, so all captured SSH packets appear as indecipherable ciphertext in a sniffer log.
SSL establishes an encrypted channel using asymmetric key exchange and symmetric bulk encryption, ensuring all application-layer data is captured in encrypted form by any sniffer on the network.
Standard HTTP transmits all data including headers, cookies, and body content in plaintext with no encryption, so a sniffer captures and displays the full content in fully human-readable form.
IPSec encrypts IP packet payloads at the network layer in both tunnel and transport modes, so a sniffer captures encrypted data and cannot read the original packet contents.
Concept tested: Network protocol encryption and packet sniffer visibility
Source: https://learn.microsoft.com/en-us/windows-server/security/tls/tls-ssl-schannel-ssp-overview
Topics
Community Discussion
No community discussion yet for this question.