Study. uk . com
  1. Home
  2. All questions
  3. Question 297

CISSP study material · question 297 of 500

A page on a known HSTS host contains an image referenced over plain HTTP. What does a conformant browser do before fetching it?

  1. Fetches it over HTTP but refuses to render the result.
  2. Blocks the fetch and records a policy violation report.
  3. Fetches it over HTTP and warns the user about mixed content.
  4. Rewrites the insecure reference into a secure one before dereferencing it.
Show the answer

Answer: D. Rewrites the insecure reference into a secure one before dereferencing it.

Under the HSTS policy a conformant user agent transforms insecure references to an HSTS host into secure references before dereferencing them.

Source: RFC 6797 (IETF) — RFC 6797 > 2.2 HTTP Strict Transport Security Policy Effects

Challenge yourself on this topic → Study as cards