Scenario: A Citrix Administrator manages an environment that has three SSL websites, all serving the same content. The administrator would like to consolidate the websites into a single…

Question

Options

• AThe certificate of each website to a single SSL virtual server
• BA wildcard certificate to a single SSL virtual server
• CA multiple SAN certificate to a single SSL virtual server
• DA wildcard certificate to a content-switching virtual server

• A
  10% (3)
• B
  3% (1)
• C
  70% (21)
• D
  17% (5)

Explanation

A SAN (Subject Alternative Name) certificate explicitly lists multiple distinct domain names within a single certificate, making it the correct tool to consolidate three separate SSL websites behind one virtual server. By binding one SAN certificate to a single SSL virtual server on Citrix ADC, the administrator covers all three domains without managing separate certificates.

Why the distractors are wrong:

• A - Binding each site's individual certificate to one virtual server means you're still managing three separate certificates, which doesn't truly consolidate and isn't supported as a clean single-binding solution in this context.
• B - A wildcard certificate (e.g., *.example.com) only covers subdomains of one parent domain; if the three sites have different root domains, a wildcard can't authenticate all of them.
• D - Content-switching virtual servers route traffic to different content/backends, which contradicts the scenario where all three sites serve the same content. The question also calls for an SSL virtual server, not a content-switching one.

Memory tip: Think of SAN = "Several Alternative Names" - when multiple different domain names need to share one certificate and one virtual server, SAN is the answer. Wildcard covers breadth within one domain; SAN covers multiple domains explicitly.

No community discussion yet for this question.