Exam 350-901 topic 1 question 143 discussion

It's C

C ......

Not C, because C (The API data is protected against man-in-the-middle attacks) ❌ While TLS encryption prevents man-in-the-middle (MITM) attacks, E2EE is not primarily designed for this purpose. E2EE ensures only the intended recipient can read the data, even if MITM attackers or service providers intercept it.

MITM is done by the HTTPS protocol already

IMO, if owners tries to access data in motion it will still be same as MitM

I guess A and C are correct. Maybe something was misspelled on writing the answers

agree with designated. But the end-to-end encryption has the following challenges: - Endpoint Security - Man-in-the-Middle - Backdoors https://www.ibm.com/topics/end-to-end-encryption

As this question mentions end-to-end encryption, it clearly is about the communication (C) and not about the endpoints (A&B&D).

A is correct. In many messaging services, third parties store the data, which is encrypted only in transit. This server-side encryption method secures the data from unauthorized viewers only. But as an effect of this method, the sender can view the information, too, which can be undesirable in cases where data privacy at all points is needed. ### In the case of end-to-end encryption, encrypted data is only viewable by those with decryption keys. In other words, E2EE prevents unintended users, including third parties, from reading or modifying data when only the intended readers should have this access and ability. ### But the end-to-end encryption has the following challenges: - Endpoint Security - Man-in-the-Middle - Backdoors https://www.ibm.com/topics/end-to-end-encryption