Secure Protocol Variants for A+
Short answer
Many older protocols transmit credentials or data in plain text. A+ expects technicians to spot those cases and select the secure counterpart. Typical, easy-to-spot pairs include Telnet->SSH and HTTP->HTTPS. For email and directory access, modern deployments use TLS-wrapped variants; a technician should flag plain-text traffic as a security concern and recommend a secure option.
Why it appears on the exam
- Given a scenario with unencrypted credentials, choose the secure protocol and justify the choice. - Identify which of two protocol options is insecure and state the technician-level risk.
Key concepts
Concept 1
Required terms
SSH vs Telnet: SSH (22) provides encrypted remote command-line access; Telnet (23) is older and sends plain-text credentials. HTTPS vs HTTP: HTTPS (443) is HTTP wrapped in TLS/SSL providing encryption for web traffic; HTTP (80) is unencrypted. Secure email access: Secure variants (IMAPS, POP3S, SMTP with TLS) provide encryption for email retrieval and submission compared with plain POP3/IMAP/SMTP.
Example
A user reports being warned that a login page is "not secure" -> the technician should suggest HTTPS (443) rather than HTTP (80).
Concept 2
How Secure Protocol Variants works
Many older protocols transmit credentials or data in plain text. A+ expects technicians to spot those cases and select the secure counterpart. Typical, easy-to-spot pairs include Telnet->SSH and HTTP->HTTPS. For email and directory access, modern deployments use TLS-wrapped variants; a technician should flag plain-text traffic as a security concern and recommend a secure option.
Example
An admin asks for remote access to a server -> recommend SSH (22) over Telnet (23).
Concept 3
Common confusion
- Equating the ability to connect with suitability; an insecure protocol may connect but still be unacceptable for credentialed access. - Overreaching into certificate troubleshooting; A+ expects recognition to recommend secure choice, not full certificate lifecycle management.
Example
Customer complains about credentials being visible in transit -> escalate to use TLS-wrapped email protocols or web forms.
Concept 4
Core 1 (220-1201) question cues
Given a scenario with unencrypted credentials, choose the secure protocol and justify the choice; Identify which of two protocol options is insecure and state the technician-level risk.
Example
A user reports being warned that a login page is "not secure" -> the technician should suggest HTTPS (443) rather than HTTP (80).
Sample questions
Select an answer to reveal the explanation. For tracked practice and weak-area review, use the Cultiv8 app.
Q1.A technician is troubleshooting this situation: A user reports being warned that a login page is "not secure" -> the technician should suggest HTTPS (443) rather than HTTP (80). What should they identify?
Q2.For this A+ objective, the scenario says: An admin asks for remote access to a server -> recommend SSH (22) over Telnet (23). What is the best match?
Q3.An A+ support scenario describes this situation: Customer complains about credentials being visible in transit -> escalate to use TLS-wrapped email protocols or web forms. Which answer fits best?
Practice this lesson in Cultiv8
The app adds tracked practice, targeted remediation, saved session history, and future readiness scoring.
Continue in Cultiv8