Selected Answer: B A. FTP works at the application layer, not the session layer. B. FTP uses separate control and data connections to transfer files between a server and a client. The control connection is used to send commands and get responses, while the data connection is set up separately for the actual file transfer. C. FTP itself does not offer native encryption; however, FTPS (FTP Secure) and SFTP (SSH File Transfer Protocol) are secure alternatives that provide encryption. D. FTP uses TCP.

B is correct

Selected Answer: B The File Transfer Protocol (FTP) is a standard communication protocol used to transfer computer files from a server to a client on a computer network. FTP is built on a client–server model architecture using separate control and data connections between the client and the server.

I know that B is correct. However, C also looks correct since FTP supports encryption. Can someone explain why C is not correct?

The File Transfer Protocol (FTP) is a standard communication protocol used to transfer computer files from a server to a client on a computer network. FTP is built on a client–server model architecture using separate control and data connections between the client and the server.

Source: CCNA 200-301 Official Cert Guide, Volume 2 Table 12-3 Common Methods to Copy Files Outside a Router Method Method - Encrypted? TFTP - No FTP - No SCP - Yes Source: https://en.wikipedia.org/wiki/File_Transfer_Protocol#:~:text=The%20File%20Transfer%20Protocol%20(FTP,the%20client%20and%20the%20server FTP uses unencrypted connections, which leaves both the data you transfer and your credentials open to eavesdropping attacks.

Both B & C are function of FTP

FTP doesn't use encryption. - SFTP does - FTPS does - FTP does not (well, you can put it in an IPsec tunnel, however...)