200-201 Question 296
Single answerA cybersecurity analyst is investigating an incident where sensitive information was intercepted during transmission between a client and a web server. Upon inspection, the analyst notices that the communication occurred over an insecure protocol. Which of the following protocols should the analyst recommend to prevent such issues in the future?
- A
HTTP
- B
HTTPS
- C
FTP
- D
HTTP/2
Show answer and explanation
Correct answer: B
Explanation
To secure sensitive data in transit, HTTPS should be used as it employs encryption via TLS, ensuring that data is not transmitted in plain text and is protected from interception by attackers. While HTTP/2 offers improved performance features, it must be paired with TLS to achieve the security benefits of HTTPS.
- A. Incorrect.
HTTP transmits data in plain text, making it vulnerable to interception by attackers. It is not secure for transmitting sensitive information.
- B. Correct.
HTTPS encrypts data using TLS (Transport Layer Security), ensuring secure communication between the client and the server. It is the recommended protocol for sensitive data transmission.
- C. Incorrect.
FTP is a file transfer protocol and is not designed for secure web communication. It lacks encryption in its basic form, making it unsuitable for the given scenario.
- D. Incorrect.
HTTP/2 is an improvement over HTTP, offering better performance and efficiency, but it does not inherently provide encryption unless used with TLS (in the form of HTTPS).