Which technique helps prevent eavesdropping on HTTP communications by wrapping them in encryption?

• A. IPsec VPN
• B. SSH
• C. HTTPS/TLS encryption
• D. DNSSEC

Answer: (C)

Wrapping HTTP in encryption is achieved by HTTPS using TLS. When you connect to a secure website, the browser and the server perform a TLS handshake to establish a session key, and every HTTP request and response are then encrypted with that key. This encryption hides the content from anyone eavesdropping on the network and also ensures the data isn’t tampered with and that you’re talking to the genuine server (thanks to certificates).

The other options don’t fit as precisely. An IPsec VPN encrypts traffic at the IP layer, protecting all data between endpoints rather than specifically wrapping HTTP content, which is the usual way users interact with the web. SSH is great for secure remote access or tunneling other protocols, but is not the standard mechanism for securing typical web traffic. DNSSEC protects the integrity of DNS responses, not the confidentiality of HTTP messages themselves.