What becomes visible after decryption?

• A. Encrypted payload data
• B. Full HTTP data and headers
• C. DNS queries
• D. TLS certificates

Answer: (B)

The essential idea is that decrypting a TLS session reveals the plaintext that was hidden inside the secure tunnel. For HTTPS, that means the actual HTTP messages—the full requests and responses, including methods, URLs, headers (like Host, User-Agent, Cookies), and the body. The TLS certificate is exchanged during the handshake and isn’t the item you’re exposing by decrypting the application data, and DNS queries may lie outside the TLS tunnel unless you’re using DNS over TLS/HTTPS. So the content you gain visibility into is the complete HTTP data and headers.