Which statement best describes the relevance of TLS and SSH for pentesting?

• A. TLS and SSH are irrelevant to pentesting.
• B. They are deprecated and irrelevant to pentesting.
• C. TLS and SSH are relevant targets and rely on encryption to protect data in transit.
• D. They are only used by attackers.

Answer: (C)

Encryption in transit is a critical area to assess in a pentest because TLS and SSH sit at the boundary where sensitive data travels and are designed to protect that data from eavesdropping, tampering, and impersonation. In practice, a tester examines TLS configurations—versions supported, cipher suites, certificate validity and trust, and features like renegotiation—to spot weaknesses that could expose secrets or enable man-in-the-middle attacks. For SSH, the focus includes authentication methods, key management, and the use of strong ciphers, since misconfigurations or weak keys can allow unauthorized access or credential leakage. Because these protocols guard the privacy and integrity of data in transit, they are highly relevant targets during a pentest. The other statements miss the reality: TLS and SSH are not irrelevant or deprecated, and they are not only used by attackers; they are foundational to secure communications for legitimate services, making their proper setup and hardening essential.