The BEST protocol to ensure confidentiality of transmissions in a business-to-customer (B2C)
financial web application is:
A.
Secure Sockets Layer (SSL).
B.
Secure Shell (SSH).
C.
IP Security (IPSec).
D.
Secure/Multipurpose Internet Mail Extensions (S/MIME ).
Explanation:
Secure Sockets Layer (SSL) is a cryptographic protocol that provides secure communications
providing end point authentication and communications privacy over the Internet. In typical use, all
data transmitted between the customer and the business are, therefore, encrypted by the
business’s web server and remain confidential. SSH File Transfer Protocol (SFTP) is a network
protocol that provides file transfer and manipulation functionality over any reliable data stream. It is
typically used with the SSH-2 protocol to provide secure file transfer. IP Security (IPSec) is a
standardized framework for securing Internet Protocol (IP) communications by encrypting and/or
authenticating each IP packet in a data stream. There are two modes of IPSec operation: transport
mode and tunnel mode. Secure/Multipurpose Internet Mail Extensions (S/MIME) is a standard for
public key encryption and signing of e-mail encapsulated in MIME; it is not a web transactionprotocol.