Certified Ethical Hacker (CEH v11) — Question 311

Although FTP traffic is not encrypted by default, which layer 3 protocol would allow for end-to-end encryption of the connection?

Answer options

• A. SFTP
• B. Ipsec
• C. SSL
• D. FTPS

Correct answer: B

Explanation

Ipsec is a protocol suite designed for securing Internet Protocol (IP) communications through authenticating and encrypting each IP packet in a communication session. While SFTP and FTPS provide encryption for FTP traffic, they do not operate at the layer 3 level like Ipsec does. SSL, on the other hand, is primarily used at the transport layer, making Ipsec the correct choice for layer 3 encryption.