101 · Question #699

101 Question #699: Real Exam Question with Answer & Explanation

The correct answer is B: provides single point of management for private keys. SSL offloading centralizes certificate and key management on the offload device and removes computationally expensive TLS processing from backend servers.

Question

What we two advantages of using SSL offloading? (Choose two)

Options

AOffloads the client to SSL processing
Bprovides single point of management for private keys
Creduces server load significantly
Dencrypts all communications and to end
Eallows secure remote access to internal server resources

Explanation

SSL offloading centralizes certificate and key management on the offload device and removes computationally expensive TLS processing from backend servers.

Common mistakes.

A. SSL offloading shifts cryptographic processing from backend servers to the offload device - the client still performs its side of the TLS handshake, so no client-side load is reduced.
D. SSL offloading terminates the SSL session at the load balancer, which means traffic between the load balancer and backend servers is typically sent unencrypted, making it the opposite of end-to-end encryption.
E. Secure remote access to internal resources is a function of VPN gateways or zero-trust network access solutions, not of SSL offloading on a load balancer.

Concept tested. SSL offloading benefits - key management and server load reduction

Reference. https://techdocs.f5.com/en-us/bigip-16-0-0/big-ip-ltm-implementations/ssl-offloading-to-servers.html

Community Discussion

No community discussion yet for this question.

Full 101 Practice