Which statement BEST describes the difference between HTTP and HTTPS?

Which statement BEST describes the difference between HTTP and HTTPS?

• A. HTTP is a programming language; HTTPS enables cookies.
• B. HTTP is a protocol for transferring web data; HTTPS adds TLS encryption to protect data in transit.
• C. HTTP is a database query language; HTTPS compresses data.
• D. HTTP is a secure email protocol; HTTPS ensures offline storage.

Answer: (B)

Understanding how HTTP differs from HTTPS hinges on what they do and how security is handled. HTTP is the protocol used to transfer web data between a browser and a server. It describes how messages are formatted and transmitted, but it does not provide encryption, so data can be read if intercepted. HTTPS adds TLS encryption on top of HTTP, which protects data in transit by encrypting it, authenticating the server, and ensuring data integrity. That combination means sensitive information like passwords or payment details stays private and tamper-proof as it travels. This distinction is why the statement describing HTTP as a protocol for transferring web data and HTTPS as adding TLS encryption to protect data in transit is the best. The other ideas mix up what HTTP or HTTPS do: HTTP is not a programming language, cookies are not something HTTPS “enables” in that sense, HTTP is not a database query language, HTTPS does not inherently compress data, and HTTP is not a secure email protocol or related to offline storage.

Understanding how HTTP differs from HTTPS hinges on what they do and how security is handled. HTTP is the protocol used to transfer web data between a browser and a server. It describes how messages are formatted and transmitted, but it does not provide encryption, so data can be read if intercepted. HTTPS adds TLS encryption on top of HTTP, which protects data in transit by encrypting it, authenticating the server, and ensuring data integrity. That combination means sensitive information like passwords or payment details stays private and tamper-proof as it travels.

This distinction is why the statement describing HTTP as a protocol for transferring web data and HTTPS as adding TLS encryption to protect data in transit is the best. The other ideas mix up what HTTP or HTTPS do: HTTP is not a programming language, cookies are not something HTTPS “enables” in that sense, HTTP is not a database query language, HTTPS does not inherently compress data, and HTTP is not a secure email protocol or related to offline storage.