F5
101 · Question #38
101 Question #38: Real Exam Question with Answer & Explanation
The correct answer is A: No SSL certificates are required on the BIG-IP.. A ServerSSL profile configures the BIG-IP to act as an SSL client toward backend servers, so the BIG-IP itself does not need to hold any SSL certificates for this profile to function.
Question
Assume a virtual server has a ServerSSL profile. What SSL certificates are required on the BIG- IP.
Options
- ANo SSL certificates are required on the BIG-IP.
- BThe BIG-IP's SSL certificates must only exist.
- CThe BIG-IP's SSL certificates must be issued from a certificate authority.
- DThe BIG-IP's SSL certificates must be created within the company hosting the BIG-IPs.
Explanation
A ServerSSL profile configures the BIG-IP to act as an SSL client toward backend servers, so the BIG-IP itself does not need to hold any SSL certificates for this profile to function.
Common mistakes.
- B. Stating that the BIG-IP's SSL certificates must 'only exist' is incorrect because no SSL certificate is required on the BIG-IP at all when using only a ServerSSL profile.
- C. There is no requirement for CA-issued certificates on the BIG-IP when using a ServerSSL profile, since the certificate resides on the backend server and the BIG-IP acts purely as the SSL client.
- D. Certificates do not need to originate from the company hosting the BIG-IP for a ServerSSL profile; in fact, no certificate installed on the BIG-IP is needed for this profile type.
Concept tested. F5 BIG-IP ServerSSL profile certificate requirements
Community Discussion
No community discussion yet for this question.