Which protocol is used for secure file transfers?

• A. Secure File Transfer Protocol (SFTP)
• B. File Transfer Protocol (FTP)
• C. Trivial File Transfer Protocol (TFTP)
• D. Hypertext Transfer Protocol (HTTP)

Answer: (A)

Secure file transfers rely on encrypting both the data and the control information as it moves between systems. SFTP does this by operating file transfers over SSH, which provides encryption, strong authentication, and data integrity for every file and command in the session. Because the SSH layer protects the entire exchange, credentials and file contents are not sent in clear text. FTP, in contrast, sends usernames, passwords, and file contents in plaintext, making it easy to eavesdrop or tamper. TFTP is stripped-down and intentionally unencrypted and without authentication, so it can’t provide secure transfers. HTTP by itself is not used for secure file transfer; if security is desired, HTTPS would be used, but the standard HTTP protocol isn’t designed for secure file transfers. Therefore, the protocol designed for secure file transfers is SFTP.