Without decrypting, what portion of an HTTPS session is visible with a packet capture? (Choose one answer)
Correct Answer: B
In an HTTPS session, the application-layer payload--including HTTP request headers, response headers, cookies, and body content--is encrypted using SSL/TLS. Without decrypting the traffic (for example, without SSL offloading on BIG-IP or access to the private keys), a packet capture cannot reveal any HTTP-level details.
However, network-layer and transport-layer information remains visible, even when encryption is used. This includes source and destination IP addresses, source and destination ports, TCP flags, sequence numbers, and TLS handshake metadata. Therefore, thesource IP address (Option B) is visible in a packet capture of HTTPS traffic without decryption.