Which two protocols would provide end-to-end data encryption, while allowing a Citrix ADC to optimize the responses? (Choose two.)

Question

Options

• AHTTP protocol for the services
• BSSL bridge protocol for the vSerer
• CHTTP protocol for the vServer
• DSSL protocol for the services
• ESSL bridge protocol for the services
• FSSL protocol for the vServer

• A
  4% (2)
• B
  11% (6)
• C
  5% (3)
• D
  79% (45)
• E
  2% (1)

Explanation

SSL offload with re-encryption is the key concept here. Configuring SSL on the vServer (F) encrypts the client-to-ADC leg, while SSL on the services (D) encrypts the ADC-to-backend leg. Because the ADC terminates and re-initiates SSL at each end, it can decrypt traffic in the middle to perform optimizations (compression, caching, etc.), while maintaining encryption across the entire path - true end-to-end encryption.

Why the distractors fail:

• A (HTTP for services) - leaves the backend leg unencrypted, breaking end-to-end encryption.
• C (HTTP for vServer) - leaves the client leg unencrypted, same problem.
• B & E (SSL bridge) - bridge mode makes the ADC a transparent pass-through; it never decrypts the traffic, so it cannot optimize. This satisfies encryption but kills optimization - the opposite tradeoff.

Memory tip: Think of it as a relay race with a baton inspection station. SSL vServer + SSL services = the baton is wrapped (encrypted) on both legs, but the ADC unwraps and re-wraps it in the middle to check and improve it. SSL bridge = the ADC is blindfolded and just hands the baton through - no inspection, no optimization.

No community discussion yet for this question.