ITPEC IP April 2018 Question 42

Encrypts communications between a web server and a browser — SSL/TLS is the protocol that puts the S in HTTPS.

In the TLS handshake the server presents its digital certificate so the browser can authenticate it, and the two agree on a shared session key using public key cryptography. All data exchanged after that is encrypted with the session key and checked for tampering. SSL is the older version of the protocol, hence the name SSL/TLS.

Answer (b)

Why not others:

• •(a) — one-time passwords are generated by a token or app to authenticate a user; TLS authenticates the server with a certificate and generates no passwords
• •(c) — blocking access to unauthorized sites is URL filtering (content filtering) by a proxy or filtering software
• •(d) — detecting viruses is the job of antivirus software; TLS does not inspect content and can even hide malware inside the encrypted stream

Key rule: TLS protects data in transit (confidentiality, integrity, server authentication); it does not inspect or judge the content it carries.

Security · AI-written, may contain errors