Certified Information Security Manager (CISM) — Question 461

Organization A offers e-commerce services and uses secure transport protocol! to protect Internet communication. To confirm communication with Organization A, which of the following would be the BEST for a client to verify?

Answer options

• A. The certificate of the e-commerce server
• B. The browser's indication of SSL use
• C. The IP address of the e-commerce server
• D. The URL of the e-commerce server

Correct answer: A

Explanation

Verifying the certificate of the e-commerce server ensures that the client is communicating with the legitimate server and that the connection is secure. While the browser's SSL indication can be helpful, it is not as definitive as checking the server's certificate. The IP address and URL do not provide assurance of the server's authenticity or the security of the connection.