Examice

Exam 101 All QuestionsBrowse all questions from this exam

Question 63

Which statement is true concerning SSL termination.

A virtual server that has both ClientSSL and ServerSSL profiles can still support cookie persistence.

Decrypting traffic at the BIG-IP allows the use of iRules for traffic management, but increases the load on the pool member.

When any virtual server uses a ClientSSL profile, all SSL traffic sent to the BIG-IP is decrypted before it is forwarded to servers.

If a virtual server has both a ClientSSL and ServerSSL profile, the pool members have less SSL processing than if the virtual server had only a ClientSSL profile.

Correct Answer: D

If a virtual server has both a ClientSSL and ServerSSL profile, the pool members have less SSL processing than if the virtual server had only a ClientSSL profile. This is because the server SSL profile allows the BIG-IP to handle the SSL termination and re-encryption process, reducing the SSL processing load on the pool members.

Discussion

samqqOption: A

should be A. C is not right, since the C says when any virtual server enabled clientSSL, all the traffic arrive to the BIGIP will be decrypt. No, only the traffic arrive to those virtual server which has the clientSSL enabled will be decrypt, not ALL

laptaOption: C

The correct answer is C. Ssl termination or ssl offload is configured with client ssl profile, decrypt it, and forward to the servers

whiteherondanceOption: C

Answer should be C