Exam CISA topic 1 question 1183 discussion

Transport Layer Security (TLS) certificates should be installed on the web servers in an e-commerce environment to secure the communication between customers' phones and the web servers. TLS is a cryptographic protocol that provides secure communication over a computer network, and it is commonly used to encrypt data transmitted between web servers and clients (such as mobile devices). TLS certificates should be installed on the web servers to secure the communication between customers' phones and the e-commerce system.

TLS (Transport Layer Security) certificates should primarily be installed on web servers (option B) when it comes to securing communication between the customer's phones and the e-commerce company's website. TLS encrypts the data exchanged between the user's device (in this case, the phone) and the web server, ensuring that sensitive information like payment details is transmitted securely over the internet. While TLS termination might happen at a proxy server in some configurations for performance reasons, the primary location for installing TLS certificates to secure communication with customers' phones is on the web servers that handle the customer-facing web application.