The SSL Stripping attack on TLS is based on fooling a web browser to ____________.

Question

BlackTom AI · Accepted Answer

The question asks about the SSL Stripping attack on TLS and what it tricks a web browser into doing.
Option a: 'none of the above' would only be correct if all other statements were false, but at least one statement describes the SSL stripping goal, so this option is incorrect.
Option b: 'release its public key' suggests the browser would reveal its public key to the attacker. In SSL/TLS workflows, exposing a public key is not the mechanism of SSL stripping, so this is inaccurate.
Option c: 'accept a HTTP instead of a HTTPS connection' captures the essence of SSL Stripping: the attacker downgrades a secure HTTPS request to an insecure HTTP connection, making the user’s browser and the site establish an unencrypted session that the attacker can observe or tamper with. This aligns with how SSL stripping undermines the security guarantees of TLS by exploiting downgrade opportunities.
Option d: 'release its secret key' would imply leaking the private key, which is not how the SSL Stripping attack operates. The attack relies on downgrading connections, not on exfiltrating private keys from the browser or server.

In summary, option c describes the core behavior of an SSL Stripping attack—forcing the user into HTTP rather than HTTPS—while the other options describe actions or outcomes that do not reflect the attack’s mechanism. Therefore, option c is the correct depiction of the attack's objective.

FIT1093_S2_2025 Week 9 MCQ: Security Protocols

The SSL Stripping attack on TLS is based on fooling a web browser to ____________.

查看解析

登录即可查看完整答案

类似问题

In a consumer society, many adults channel creativity into buying things

Economic stress and unpredictable times have resulted in a booming industry for self-help products

People born without creativity never can develop it

A product has a selling price of $20, a contribution margin ratio of 40% and fixed cost of $120,000. To make a profit of $30,000. The number of units that must be sold is: Type the number without $ and a comma. Eg: 20000

Which of the following statement regarding cost is correct:

Under the assumptions used in cost-volume-profit analysis, as the activity increases:

The CVP and break-even analysis are supported by a range of important assumptions. Which of the following is not an assumption of the CVP:

The break-even point is that at which:

更多留学生实用工具

考试浏览器助手

风格化写作助手

论文查重助手

文献引用助手

课堂转译助手

课堂笔记助手

Quiz搜索助手

学校历年真题

智能刷题助手

智能匹配练习

希望你的学习变得更简单