mediumMultiple ChoiceObjective-mapped
220-1201 Practice Question: A company deploys a new web server and wants to…
A company deploys a new web server and wants to ensure that data transmitted between clients and the server is encrypted. The technician configures the server to use a certificate. Which protocol should be enabled on the server?
⚠ Common exam trap
CompTIA A+ often tests the distinction between secure and insecure protocols, and the trap here is that candidates may confuse SSH (used for secure remote shell access) with HTTPS (used for secure web traffic), or think that HTTP with a certificate is sufficient without enabling the encryption layer.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
HTTPS
HTTPS (Hypertext Transfer Protocol Secure) encrypts data between clients and a web server using TLS/SSL. The certificate you configured on the server is used to establish a trusted, encrypted session, ensuring confidentiality and integrity of transmitted data.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
HTTPS
Why this is correct
HTTPS (Hypertext Transfer Protocol Secure) is the appropriate protocol for a new web server because it ensures secure, encrypted communication between the client and the server. It leverages Transport Layer Security (TLS) to encrypt data, protecting its confidentiality and integrity from eavesdropping and tampering during transit. Furthermore, HTTPS requires a digital certificate to authenticate the server's identity, establishing trust and verifying that clients are connecting to the legitimate website. This robust security makes it indispensable for any modern web application, especially those handling sensitive user information, and it typically operates over TCP port 443.
- ✗
HTTP
Why it's wrong here
HTTP (Hypertext Transfer Protocol) transmits data in plain text, meaning all information exchanged between the client and server is unencrypted and easily readable by anyone intercepting the traffic. This fundamental lack of encryption makes HTTP inherently insecure and unsuitable for any web server handling sensitive data like login credentials, personal information, or financial transactions. While it operates over TCP port 80, its vulnerability to eavesdropping and data manipulation makes it an unacceptable choice for modern, secure web deployments.
- ✗
FTP
Why it's wrong here
FTP (File Transfer Protocol) is primarily designed for transferring files between a client and a server, not for serving web pages to browsers. By default, FTP transmits data, including usernames and passwords, in plain text, offering no encryption or security against interception. While it uses TCP ports 20 and 21, its fundamental purpose and inherent insecurity for general web traffic make it an entirely inappropriate protocol for deploying a new web server that needs to deliver content to end-users securely.
- ✗
SSH
Why it's wrong here
SSH (Secure Shell) is a cryptographic network protocol used for secure remote administration of servers and network devices, providing a secure channel over an unsecured network. It enables secure command-line access, remote execution of commands, and secure file transfers via SFTP, typically operating over TCP port 22. However, SSH is not designed for client-server communication to deliver web content to end-user browsers, making it an unsuitable choice for the primary function of a new web server.
Go deeper
Related to this question
Learn chapter
Proxy Server Configuration
Key term
Hypertext Transfer Protocol
Hypertext Transfer Protocol (HTTP) is the foundational communication protocol used to transfer web pages and other data between a web browser and a web server over the internet.
Key term
HTTPS
HTTPS (Hypertext Transfer Protocol Secure) is the secure version of HTTP that encrypts data between a web browser and a web server using SSL/TLS protocols.
About these practice questions
Courseiva writes every 220-1201 question from scratch — 972 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1201 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1201 exam.