Which of the following is a common type of attack against HTTPS traffic?
Response:

• A. Brute-force password attack
• B. Distributed Denial of Service (DDoS)
• C. SSL Strip Attack
• D. SQL Injection

You are a security analyst for an e-commerce company. Recently, customers have reported seeing strange pop-ups and being redirected to suspicious websites while browsing your company's website, even though HTTPS is enabled. Upon investigation, you discover that an attacker is performing an SSL strip attack, downgrading traffic from HTTPS to HTTP.
Which of the following steps should you take to mitigate this attack and secure user traffic?
(Choose Three)
Response:

• A. Implement HTTP Strict Transport Security (HSTS) to force HTTPS connections
• B. Disable all SSL/TLS encryption
• C. Upgrade SSL/TLS certificates and ensure they are valid and up to date
• D. Enable logging of certificate warnings and suspicious traffic
• E. Redirect all HTTP traffic to HTTPS automatically

For effective network traffic analysis, what should be considered when monitoring encrypted traffic?
(Choose Three)
Response:

• A. The possibility of encrypted malware communication
• B. Ignoring encrypted traffic as it is always secure
• C. The certificate authority (CA) issuing the certificates
• D. Establishing baselines for normal encrypted traffic patterns
• E. The increase in CPU usage due to encryption and decryption processes

Why is it crucial to secure SSH communications, particularly for administrative access?
Response:

• A. Because SSH does not support strong encryption
• B. Because securing SSH is mandated by all data protection regulations
• C. Because SSH is commonly used over untrusted networks
• D. Because unsecured SSH can provide an attacker with elevated privileges and access to sensitive areas of the network