220-1102 Question 393
Single answerProtocols and encryptionA technician is configuring remote administration for a small business router from across the internet. The office manager wants the technician to access the device through a web browser, but company policy requires that administrative credentials and session data be encrypted in transit. Which protocol should the technician enable to BEST meet this requirement?
- A
HTTP
- B
HTTPS
- C
Telnet
- D
FTP
Show answer and explanation
Correct answer: B
Explanation
The best answer is HTTPS because the scenario specifically requires browser-based remote administration with encryption for credentials and session data. HTTPS uses HTTP over TLS to secure web traffic, making it the standard choice for secure web management interfaces. By contrast, HTTP, Telnet, and standard FTP are plaintext protocols and should not be used for transmitting administrative credentials over untrusted networks. This aligns with common vendor guidance and industry best practices, including using encrypted management protocols instead of legacy plaintext protocols whenever remote administration is required.
- A. Incorrect.
HTTP is incorrect because it does not encrypt traffic. If the router's web management interface is exposed over HTTP, usernames, passwords, and session data can be intercepted by anyone who can capture the traffic.
- B. Correct.
HTTPS is correct because it provides encrypted web-based management using TLS. This allows the technician to use a browser while protecting administrative credentials and session data in transit, which aligns with standard security best practices for remote administration.
- C. Incorrect.
Telnet is incorrect because although it is used for remote administration, it sends data in plaintext and does not provide encryption. A technician might choose it because it is a remote management protocol, but it does not satisfy the requirement for browser-based encrypted access.
- D. Incorrect.
FTP is incorrect because it is primarily a file transfer protocol and does not provide secure web-based router administration. Standard FTP also transmits credentials in plaintext, so it fails both the browser-management and encryption requirements.