Courseiva
← SSCP
Full test
mediumMultiple ChoiceObjective-mapped

SSCP Practice Question: A company deploys a web application that handles…

A company deploys a web application that handles sensitive financial transactions. To protect data in transit, which protocol should be used?

⚠ Common exam trap

Test-takers frequently confuse SSH with a general-purpose encryption protocol or think SSL 3.0 is still acceptable because it was historically used, but the exam tests awareness of deprecated protocols and the correct protocol for web-specific security.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

TLS 1.2

TLS 1.2 is the correct choice because it is the industry-standard protocol for securing HTTP traffic, providing encryption, integrity, and authentication for data in transit. It is widely supported, has no known practical vulnerabilities (unlike SSL 3.0), and is specifically designed for web application protocols like HTTPS, making it ideal for protecting sensitive financial transactions.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    SSH (Secure Shell)

    Why it's wrong here

    SSH is for secure remote login, not web traffic.

  • ✗

    SSL 3.0

    Why it's wrong here

    SSL 3.0 is deprecated and vulnerable to POODLE attack.

  • ✗

    IPsec in transport mode

    Why it's wrong here

    IPsec is typically used for VPNs, not directly for web applications.

  • ✓

    TLS 1.2

    Why this is correct

    TLS 1.2 is secure and appropriate for web applications.

About these practice questions

One of 920 original SSCP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.