A commonly SSL/TLS-aware application is ________.

• A. Webservice
• B. Database
• C. Both A and B
• D. Neither A nor B

Answer: (A)

The main idea here is recognizing where SSL/TLS is most commonly used to protect data in transit. A webservice is typically accessed over HTTPS, which means it uses HTTP over TLS. When a client connects, the TLS handshake establishes an encrypted channel, authenticates the server with a certificate, and ensures the data exchanged is confidential and integral. Because web traffic over the internet almost always relies on TLS, webservices are the classic, widely recognized SSL/TLS–aware applications.

Databases can support TLS for encrypting client connections, but that isn’t as universal or as immediately visible as the web’s HTTPS usage. Many deployments still run database connections without TLS or with TLS only in specific configurations, so while TLS-capable databases exist, they aren’t as representative of the typical SSL/TLS–aware app as web services. That’s why the best single answer is a webservice.