Cisco CyberOps Associate (CBROPS) 200-201Security ConceptsMedium
A security team is deploying a new web application and must ensure that all communication between clients and the server is encrypted and authenticated. Which cryptographic protocol is best suited for establishing a secure channel for this purpose over the internet?
- AFTP
- BHTTP
- CTLS
- DSNMP
Show answer & explanationAnswer & explanation
Correct answer: C. TLS
TLS (Transport Layer Security) is the cryptographic protocol designed to provide secure communication over a computer network. It is widely used for web browsing (HTTPS, which uses TLS over HTTP) and other applications where encryption and authentication are required for client-server communication.
Why the other options are wrong
- A. FTP (File Transfer Protocol) is for file transfer and does not inherently provide encryption or authentication for secure channels.
- B. HTTP (Hypertext Transfer Protocol) is for web communication but is unencrypted by default; it needs TLS to become HTTPS.
- D. SNMP (Simple Network Management Protocol) is used for network device management and is not designed for general client-server secure communication.
TLS (Transport Layer Security)
A cryptographic protocol designed to provide communication security over a computer network. It is the successor to SSL and is widely used for securing web browsing (HTTPS), email, and other data transfers.
- Provides confidentiality, integrity, and authenticity.
- Uses both symmetric and asymmetric cryptography.
- Operates at the transport layer of the OSI model.
Memory trick: TLS makes web traffic safe, like a secure tunnel for your data.