Question
A company’s web filter is configured to scan the URL for strings and deny access when matches are found. Which of the following search strings should an analyst employ to prohibit access to non-encrypted websites?
- A. encryption=off
- B. http:// Correct
- C. www.*.com
- D. :443
Explanation
Unencrypted websites are served over plain HTTP, so their URLs begin with the scheme http://, and blocking that string denies access to non-encrypted sites while leaving https:// URLs untouched. Port 443 is the HTTPS port, so blocking :443 would block encrypted traffic instead. encryption=off is not a standard URL component, and www.*.com would match encrypted and unencrypted sites alike.
