Courseiva
mediumMultiple ChoiceObjective-mapped

220-1201 Practice Question: A company deploys a new web server and wants to…

A company deploys a new web server and wants to ensure that data transmitted between clients and the server is encrypted. The technician configures the server to use a certificate. Which protocol should be enabled on the server?

⚠ Common exam trap

CompTIA A+ often tests the distinction between secure and insecure protocols, and the trap here is that candidates may confuse SSH (used for secure remote shell access) with HTTPS (used for secure web traffic), or think that HTTP with a certificate is sufficient without enabling the encryption layer.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

HTTPS

HTTPS (Hypertext Transfer Protocol Secure) encrypts data between clients and a web server using TLS/SSL. The certificate you configured on the server is used to establish a trusted, encrypted session, ensuring confidentiality and integrity of transmitted data.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • HTTPS

    Why this is correct

    HTTPS (Hypertext Transfer Protocol Secure) is the appropriate protocol for a new web server because it ensures secure, encrypted communication between the client and the server. It leverages Transport Layer Security (TLS) to encrypt data, protecting its confidentiality and integrity from eavesdropping and tampering during transit. Furthermore, HTTPS requires a digital certificate to authenticate the server's identity, establishing trust and verifying that clients are connecting to the legitimate website. This robust security makes it indispensable for any modern web application, especially those handling sensitive user information, and it typically operates over TCP port 443.

  • HTTP

    Why it's wrong here

    HTTP (Hypertext Transfer Protocol) transmits data in plain text, meaning all information exchanged between the client and server is unencrypted and easily readable by anyone intercepting the traffic. This fundamental lack of encryption makes HTTP inherently insecure and unsuitable for any web server handling sensitive data like login credentials, personal information, or financial transactions. While it operates over TCP port 80, its vulnerability to eavesdropping and data manipulation makes it an unacceptable choice for modern, secure web deployments.

  • FTP

    Why it's wrong here

    FTP (File Transfer Protocol) is primarily designed for transferring files between a client and a server, not for serving web pages to browsers. By default, FTP transmits data, including usernames and passwords, in plain text, offering no encryption or security against interception. While it uses TCP ports 20 and 21, its fundamental purpose and inherent insecurity for general web traffic make it an entirely inappropriate protocol for deploying a new web server that needs to deliver content to end-users securely.

  • SSH

    Why it's wrong here

    SSH (Secure Shell) is a cryptographic network protocol used for secure remote administration of servers and network devices, providing a secure channel over an unsecured network. It enables secure command-line access, remote execution of commands, and secure file transfers via SFTP, typically operating over TCP port 22. However, SSH is not designed for client-server communication to deliver web content to end-user browsers, making it an unsuitable choice for the primary function of a new web server.

About these practice questions

Courseiva writes every 220-1201 question from scratch — 972 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This 220-1201 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1201 exam.