CompTIA Security+ (SY0-601) — Question 714

A security analyst is evaluating solutions to deploy an additional layer of protection for a web application. The goal is to allow only encrypted communications without relying on network devices. Which of the following can be implemented?

Answer options

• A. HTTP security header
• B. DNSSEC implementation
• C. SRTP
• D. S/MIME

Correct answer: A

Explanation

The HTTP security header can enforce secure communication by ensuring that only HTTPS traffic is allowed. The other options, such as DNSSEC, SRTP, and S/MIME, do not specifically restrict communication to encrypted channels for web applications.