HTTPS — end of module

What this checks. That you can describe the stack precisely, including where it stops being TCP. You need 3 of 4 to pass, and every option is explained afterwards — including the ones you did not pick.

1. 1/4Which description of the HTTPS stack is accurate?

   Tell two ideas apart

   HTTP over TLS over TCP — except with HTTP/3, where it is HTTP over QUIC over UDP and TLS is built into QUIC

   HTTPS is a separate protocol from HTTP

   HTTPS is HTTP on port 443 with no other difference
2. 2/4In a capture of an HTTPS page load over HTTP/1.1, how many packets pass between the TCP handshake completing and the first request being sent?

   Predict what happens next

   Several — the TLS handshake happens first

   None — the request follows the ACK directly, encrypted

   Exactly one — the certificate
3. 3/4Which machine decides whether the connection continues after the certificate is presented?

   Identify the responsible endpoint

   The client

   The server, since it chose the certificate

   The certificate authority, contacted during the handshake
4. 4/4A service moves from HTTPS over TCP to HTTP/3. Which troubleshooting habit stops working?

   Apply it somewhere new

   Looking for the TCP handshake and reading connection state from SYN, FIN and RST — QUIC carries all of that inside encrypted UDP

   Reading the Host header

   Checking DNS