HTTP and HTTPS in Computer Networks - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Difference Between HTTP and HTTPS

Which of the following best explains the main difference between HTTP and HTTPS?

A HTTP requires a digital certificate, but HTTPS does not.

B HTTP uses port 443 by default, while HTTPS uses port 80.

C HTTPS encrypts data between the browser and server, while HTTP sends data in plain text.

D HTTPS is slower because it does not use encryption.

💡 Hint

Think about security and data protection when browsing websites.

HTTPS adds encryption to protect data during transfer, making it secure. HTTP sends data without encryption, so it can be intercepted.

📋 Factual

intermediate

Default Ports for HTTP and HTTPS

What are the default port numbers used by HTTP and HTTPS protocols?

A HTTP uses port 80, HTTPS uses port 443.

B HTTP uses port 443, HTTPS uses port 80.

C Both HTTP and HTTPS use port 8080.

D HTTP uses port 21, HTTPS uses port 22.

💡 Hint

Remember the common ports for web traffic and secure web traffic.

HTTP typically uses port 80, while HTTPS uses port 443 to handle encrypted connections.

🔍 Analysis

advanced

Impact of HTTPS on Website Performance

Which statement correctly describes the impact of HTTPS on website performance compared to HTTP?

A HTTPS can slightly increase load time but improves security and trust.

B HTTPS makes websites load faster because it uses compression by default.

C HTTPS always makes websites load slower due to encryption overhead.

D HTTPS disables caching, causing slower page loads.

💡 Hint

Consider the trade-off between security and speed.

HTTPS adds encryption which can add a small delay, but modern optimizations minimize this impact while providing secure connections.

❓ Reasoning

advanced

Why Browsers Warn About HTTP Sites

Why do modern browsers often show warnings when you visit a website using HTTP instead of HTTPS?

A Because HTTP sites are slower and use more data.

B Because HTTP sites do not encrypt data, risking privacy and security.

C Because HTTP sites require special plugins to work.

D Because HTTP sites are not compatible with mobile devices.

💡 Hint

Think about what happens to your information when it travels over HTTP.

HTTP does not encrypt data, so information can be intercepted or altered, which is why browsers warn users to protect their privacy.

❓ Comparison

expert

SSL/TLS Role in HTTPS

What role does SSL/TLS play in HTTPS connections?

A SSL/TLS speeds up the connection by compressing data only.

B SSL/TLS is used only for email security, not web traffic.

C SSL/TLS replaces HTTP to create a new protocol.

D SSL/TLS encrypts the data and authenticates the server to the client.

💡 Hint

Consider how HTTPS ensures both privacy and trust.

SSL/TLS protocols encrypt data and verify the server's identity, which are essential for secure HTTPS connections.

Practice

1. What is the main difference between HTTP and HTTPS?

easy

A. HTTPS encrypts data, HTTP does not

B. HTTP encrypts data, HTTPS does not

C. HTTP is faster than HTTPS

D. HTTPS uses a different port than HTTP but no encryption

Solution

1. Step 1: Understand HTTP basics

   HTTP is a protocol used to load websites but it sends data in plain text.

2. Step 2: Understand HTTPS security

   HTTPS adds encryption to protect data from being read by others during transmission.

3. Final Answer:

   HTTPS encrypts data, HTTP does not -> Option A

4. Quick Check:

   Encryption = HTTPS [OK]

Hint: HTTPS means secure by encrypting data [OK]

Common Mistakes:

• Thinking HTTP encrypts data
• Believing HTTPS is slower without reason
• Confusing port difference as main feature

2. Which URL prefix indicates a secure website connection?

easy

A. https://

B. ftp://

C. http://

D. file://

Solution

1. Step 1: Identify URL prefixes

   Common URL prefixes include http:// for normal sites and https:// for secure sites.

2. Step 2: Match secure prefix

   HTTPS means the connection is encrypted and secure.

3. Final Answer:

   https:// -> Option A

4. Quick Check:

   Secure URL = https:// [OK]

Hint: Look for 'https://' to know site is secure [OK]

Common Mistakes:

• Choosing http:// as secure
• Confusing ftp:// with secure web protocol
• Not recognizing https:// as secure

3. What will happen if you try to access a website with https:// but the server only supports http://?

medium

A. The browser will automatically switch to http:// and load the site

B. The browser will show a security warning or error

C. The website will load but without encryption

D. The connection will be blocked by the internet provider

Solution

1. Step 1: Understand HTTPS requirement

   HTTPS requires the server to support encryption with a valid certificate.

2. Step 2: Browser behavior on unsupported HTTPS

   If the server does not support HTTPS, the browser cannot establish a secure connection and will warn the user.

3. Final Answer:

   The browser will show a security warning or error -> Option B

4. Quick Check:

   Unsupported HTTPS = Warning [OK]

Hint: No HTTPS support means browser warns user [OK]

Common Mistakes:

• Assuming browser silently switches to HTTP
• Thinking site loads without encryption anyway
• Believing ISP blocks connection

4. A user reports that their browser shows a "Not Secure" message on a website using https://. What is the most likely cause?

medium

A. The browser does not support HTTPS

B. The website is using HTTP instead of HTTPS

C. The user's internet connection is slow

D. The website's SSL certificate is expired or invalid

Solution

1. Step 1: Understand HTTPS and SSL certificates

   HTTPS requires a valid SSL certificate to prove the site's identity and encrypt data.

2. Step 2: Identify cause of "Not Secure" message

   If the certificate is expired, invalid, or missing, browsers warn users even if URL starts with https://.

3. Final Answer:

   The website's SSL certificate is expired or invalid -> Option D

4. Quick Check:

   Invalid SSL = Not Secure warning [OK]

Hint: Expired SSL causes 'Not Secure' warning [OK]

Common Mistakes:

• Thinking HTTP URL causes warning when URL is https://
• Blaming slow internet for security warnings
• Assuming old browsers don't support HTTPS

5. You want to ensure your website visitors' data is safe. Which combination of actions best achieves this?

hard

A. Use HTTP only but add a password to your website

B. Use HTTPS but allow users to access HTTP versions optionally

C. Use HTTPS with a valid SSL certificate and redirect all HTTP traffic to HTTPS

D. Use HTTP and rely on browser security warnings

Solution

1. Step 1: Importance of HTTPS and SSL

   HTTPS with a valid SSL certificate encrypts data and verifies website identity.

2. Step 2: Redirecting HTTP to HTTPS

   Redirecting all HTTP traffic to HTTPS ensures users always use the secure version.

3. Final Answer:

   Use HTTPS with a valid SSL certificate and redirect all HTTP traffic to HTTPS -> Option C

4. Quick Check:

   HTTPS + Redirect = Safe data [OK]

Hint: Always redirect HTTP to HTTPS with valid SSL [OK]

Common Mistakes:

• Thinking password alone secures HTTP
• Allowing HTTP access weakens security
• Ignoring SSL certificate validity