SSL/TLS protocol in Computer Networks - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

What is the primary purpose of the SSL/TLS protocol?

SSL/TLS is widely used on the internet. What is its main job?

A To speed up data transmission by compressing files

B To store user passwords securely on a server

C To manage IP addresses for devices on a network

D To encrypt data and ensure secure communication between two parties

💡 Hint

Think about what happens when you see a lock icon in your browser's address bar.

SSL/TLS encrypts data so that information sent between your browser and a website stays private and secure.

📋 Factual

intermediate

Which port is commonly used by HTTPS, which relies on SSL/TLS?

When you visit a secure website, which port number does your browser usually connect to?

A 80

B 21

C 443

D 25

💡 Hint

It is the standard port for secure web traffic.

Port 443 is the default port for HTTPS, which uses SSL/TLS to secure communication.

🔍 Analysis

advanced

What happens during the SSL/TLS handshake process?

During the SSL/TLS handshake, which of the following steps is not part of the process?

A Client sends its password to the server in plain text

B Client and server agree on encryption methods to use

C Server sends its digital certificate to the client

D Both parties generate shared keys for encryption

💡 Hint

Think about what would make the connection insecure during handshake.

The client never sends passwords in plain text during the handshake; instead, keys and certificates are exchanged securely.

❓ Comparison

advanced

How does TLS differ from SSL?

SSL and TLS are related protocols. Which statement best describes their relationship?

A SSL is newer and more secure than TLS

B TLS is the newer, more secure version that replaced SSL

C TLS and SSL are completely unrelated protocols

D TLS is used only for email, SSL only for websites

💡 Hint

One is an updated version of the other.

TLS evolved from SSL to fix security flaws and improve encryption methods. SSL is now outdated.

❓ Reasoning

expert

Why is certificate authority (CA) trust important in SSL/TLS?

When your browser trusts a website's SSL/TLS certificate, what role does the certificate authority (CA) play?

A The CA verifies the website's identity and signs its certificate to prove trustworthiness

B The CA encrypts all data sent between the browser and website

C The CA stores the website's password securely

D The CA manages the website's domain name system (DNS) records

💡 Hint

Think about who confirms a website is who it says it is.

CAs act like trusted third parties that verify and sign certificates, so browsers can trust the website's identity.