Which below statements are valid Regular security assessments, such as penetration testing, can help identify and prevent code injection vulnerabilities. SSL$/$TLS certificates can be used to prevent man$-$in$-$the$-$middle attacks. A man$-$in$-$the$-$middle attack can be used to intercept and modify encrypted web traffic if the attacker has access to the encryption keys. HTTPS only encrypts the data sent from the client to the server, but not vice versa.