Which of the following security-focused protocols has confidentiality services operating at a layer different from the others?

Question

Options

• ASecure HTTP (S-HTTP)
• BFTP Secure (FTPS)
• CSecure socket layer (SSL)
• DSequenced Packet Exchange (SPX)

• A
  74% (25)
• B
  9% (3)
• C
  12% (4)
• D
  6% (2)

Explanation

All the previous protocols operate at the transport layer except for Secure HTTP (S- HTTP), which operates at the application layer. S-HTTP has been replaced by SSL and TLS. As it is very well explained in the Shon Harris book: The transport layer receives data from many different applications and assembles the data into a stream to be properly transmitted over the network. The main protocols that work at this layer are TCP, UDP, Secure Sockets Layer (SSL), and Sequenced Packet Exchange (SPX). Different references can place specific protocols at different layers. For example, many transport layer. It is not that one is right or wrong. The OSI model tries to draw boxes around reality, but some protocols straddle the different layers. SSL is made up of two protocols-- one works in the lower portion of the session layer and the other works in the transport layer. For purposes of the CISSP exam, SSL resides in the transport layer.

No community discussion yet for this question.