A bank proxy log shows one session that negotiated TLS 1.2 and a second session that negotiated TLS 1.3. What differs between those two sessions?
Select an answer to reveal the explanation.
Short Explanation
Two locks built in different years can still guard the same kind of door. You are seeing the protocol version differ, TLS 1.2 on one bank session and TLS 1.3 on the other. The trap is an unrelated certificate serial, a NAT pool, or a VLAN identifier.
Full Explanation
The two sessions are described as negotiating different TLS revisions. TLS 1.2 and TLS 1.3 are protocol versions. Nothing in the stem changes a certificate serial, a translation pool, or a switch VLAN. "The protocol version negotiated on the session, TLS 1.2 versus TLS 1.3" is the difference. "The X.509 serial number of a certificate that belongs to an unrelated host" identifies some other certificate and is not the field the log contrasts. "The NAT pool that would translate addresses, though this log does not show one" is address translation, which the stem does not mention. "The VLAN identifier of a switch port that sits outside this TLS record" is a switching label, not the negotiated TLS revision. Exam caveat: the stem only contrasts the negotiated TLS revision, so an unrelated certificate serial, a NAT pool, and a VLAN id are not the difference on these two sessions. Operational check: read the negotiated version on each session and confirm one record says TLS 1.2 and the other says TLS 1.3. Record both negotiated versions in the case notes.