Which vulnerability arises from weak transport-layer security that can allow eavesdropping or tampering?

Which vulnerability arises from weak transport-layer security that can allow eavesdropping or tampering?

• A. Cookie poisoning attack
• B. Insecure deserialization
• C. Unvalidated Redirects and Forwards
• D. Insufficient Transport Layer Protection

Answer: (D)

Protecting data in transit is essential. When transport-layer security is weak or absent, data can be read as it travels between client and server (eavesdropping) or altered in transit (tampering). This is what insufficient transport layer protection describes: the encryption and integrity mechanisms guarding the communication are not strong enough or are improperly configured, leaving sensitive information exposed and modifyable. Using HTTPS with proper TLS configurations, enforcing strong ciphers, and adopting protections like HSTS helps prevent these risks. The other options point to different weaknesses that don’t involve the security of data in transit: cookies manipulated on the client, processing untrusted serialized data, or redirects/forwards that aren’t properly validated. The key idea here is that weak protection during transmission enables interception and tampering of information.

Protecting data in transit is essential. When transport-layer security is weak or absent, data can be read as it travels between client and server (eavesdropping) or altered in transit (tampering). This is what insufficient transport layer protection describes: the encryption and integrity mechanisms guarding the communication are not strong enough or are improperly configured, leaving sensitive information exposed and modifyable. Using HTTPS with proper TLS configurations, enforcing strong ciphers, and adopting protections like HSTS helps prevent these risks. The other options point to different weaknesses that don’t involve the security of data in transit: cookies manipulated on the client, processing untrusted serialized data, or redirects/forwards that aren’t properly validated. The key idea here is that weak protection during transmission enables interception and tampering of information.