Mobile office users access the enterprise's internal Web server through a Web proxy. Which of the following descriptions is correct?

Question

Options

• AThe mobile office user establishes an HTTP session with the virtual gateway, and the virtual
• BThe mobile office user establishes an HTTP session with the virtual gateway, and the virtual
• CThe mobile office user establishes an HTTPS session with the virtual gateway, and the virtual
• DThe mobile office user establishes an HTTPS session with the virtual gateway, and the virtual

• A
  4% (2)
• B
  15% (7)
• C
  79% (37)
• D
  2% (1)

Explanation

Option C is correct because mobile users connect to the virtual gateway (web proxy) using HTTPS to ensure the traffic over the untrusted public internet is encrypted. The virtual gateway then terminates the SSL session and forwards the request to the internal web server using plain HTTP - this is called SSL/TLS offloading or SSL termination, a common enterprise pattern where the internal network is treated as a trusted zone and encryption overhead is handled at the perimeter.

Why the distractors are wrong:

• A & B are wrong because they start with HTTP - mobile users on the open internet using unencrypted HTTP would expose credentials and session data to interception.
• D is wrong because it implies end-to-end HTTPS all the way to the internal server; while technically possible (called SSL pass-through or re-encryption), the standard proxy pattern terminates SSL at the gateway and uses HTTP internally to reduce server load and simplify certificate management.

Memory tip: Think "HTTPS outside, HTTP inside" - the proxy is like a secure mailroom that decrypts your package at the door, then hands plain mail around the office. The internet-facing leg is always encrypted (HTTPS); the internal leg rides the trusted network unencrypted (HTTP).

No community discussion yet for this question.