nerdexam
F5

101 · Question #525

A device needs to decrypt traffic and send unencrypted traffic to the web server. Which method should the BIG-IP Administrator use?

The correct answer is C. SSL Termination. SSL Termination is the BIG-IP feature where the load balancer decrypts the client's SSL/TLS session and forwards plaintext HTTP traffic to the backend web server.

Section 5: Application Delivery Basics

Question

A device needs to decrypt traffic and send unencrypted traffic to the web server. Which method should the BIG-IP Administrator use?

Options

  • ASSL Optimization
  • BSSL Caching
  • CSSL Termination
  • DSSL Bridging

How the community answered

(27 responses)
  • A
    4% (1)
  • C
    93% (25)
  • D
    4% (1)

Why each option

SSL Termination is the BIG-IP feature where the load balancer decrypts the client's SSL/TLS session and forwards plaintext HTTP traffic to the backend web server.

ASSL Optimization

SSL Optimization is a broad marketing term for general TLS performance improvements and does not specifically describe terminating encryption before the backend.

BSSL Caching

SSL Caching stores session ticket data to accelerate TLS session resumption for returning clients, which is unrelated to whether backend traffic is encrypted or plaintext.

CSSL TerminationCorrect

SSL Termination ends the encrypted SSL/TLS session at the BIG-IP, offloading the computationally expensive decryption from backend servers. The BIG-IP then communicates with the web server over unencrypted HTTP on the server-side VLAN, which precisely matches the described requirement of sending unencrypted traffic to the web server.

DSSL Bridging

SSL Bridging decrypts traffic at the BIG-IP but then re-encrypts it before forwarding to the web server, so the backend server still receives encrypted traffic - the opposite of the stated requirement.

Concept tested: F5 BIG-IP SSL Termination vs SSL Bridging

Source: https://techdocs.f5.com/en-us/bigip-16-1-0/big-ip-local-traffic-management-getting-started-with-ssl-termination.html

Topics

#SSL termination#SSL offloading#encryption#BIG-IP

Community Discussion

No community discussion yet for this question.

Full 101 Practice