SSL/TLS typically provides security for which scope?

• A. Database level protection
• B. End-to-end session between client and server at the application level
• C. IP network layer protection
• D. Router-level encryption

Answer: (B)

SSL/TLS secures the data as it moves between the client and the server, creating an encrypted end-to-end session for the application’s communication. This means the application-layer messages—such as HTTP requests and responses—are encrypted, their integrity protected, and the server authenticated (with optional client authentication). It operates on the transport/channel between the client and server, not the underlying IP path or router devices, and it isn’t limited to a single database. So the best description is that TLS provides end-to-end security for the application-layer session between client and server.