Among the following, which method is specifically designed to hide the content of network traffic from observers?

• A. IPsec VPN
• B. Tor
• C. SSH
• D. HTTPS/TLS encryption

Answer: (D)

Protecting the content of network traffic from observers hinges on end-to-end encryption of the actual data being transmitted. HTTPS uses TLS to encrypt the HTTP payload between your browser and the web server, so anyone sniffing the packets cannot read the content, even though they may see the fact that a secure connection is in use. TLS also provides authentication and integrity, ensuring you’re talking to the intended server and that the data hasn’t been tampered with.

The other options address security in different ways. An IPsec VPN creates an encrypted tunnel for traffic to a VPN endpoint, which protects data on the path to that endpoint but doesn’t guarantee end-to-end confidentiality for all destinations once traffic leaves the VPN. Tor focuses on anonymity by routing traffic through multiple relays; while it encrypts data within the network, the exit point can observe plaintext if the application isn’t separately encrypted. SSH encrypts a channel for a specific task like remote login, not general web traffic across the internet.