To enforce HTTPS on a website, which technology should be installed and configured?

• A. TLS
• B. VPN
• C. Firewall ACLs
• D. MFA

Answer: (A)

Enforcing HTTPS on a website relies on TLS to secure the connection. By installing and configuring TLS on the web server and presenting a valid certificate, the server and client perform a TLS handshake that negotiates encryption, authenticates the server, and creates a secure channel for data in transit. This is what makes the site accessible as HTTPS (typically on port 443) and protects confidentiality and integrity of the traffic between the user and the site.

Other options don’t provide this web-traffic encryption role. A VPN secures connections between networks or endpoints, not the standard browser-to-site traffic. Firewall ACLs can restrict who can reach the site but don’t encrypt data in transit. MFA is about verifying user identity during authentication and does not encrypt the transport layer.