Which type of entity can a Citrix Administrator configure to support the use of an SSL policy?

Question

Options

• AGlobal server load-balancing virtual server
• BSSL_Bridge load-balancing virtual server
• CAuthentication, authorization, and auditing (AAA) group or user
• DSSL load-balancing virtual server

• B
  4% (1)
• C
  4% (1)
• D
  93% (25)

Explanation

Option D is correct because SSL policies in Citrix ADC are designed to be bound directly to SSL load-balancing virtual servers - entities that terminate SSL/TLS connections. This is where parameters like cipher suites, SSL protocol versions, and certificate settings are actually enforced, making it the logical and only supported target for SSL policy binding.

Option A (GSLB virtual server) is wrong because Global Server Load Balancing operates at the DNS level to distribute traffic across data centers - it doesn't handle SSL termination or policy enforcement.

Option B (SSL_Bridge virtual server) is a common trap: SSL_Bridge passes encrypted traffic through without decrypting it, so there is no SSL session to apply a policy against - the ADC has no visibility into the SSL handshake.

Option C (AAA group/user) is wrong because AAA entities govern authentication, authorization, and auditing workflows - not SSL/TLS configuration.

Memory tip: Anchor on "terminate to regulate." SSL policies only apply where SSL is terminated (decrypted and re-encrypted). SSL_Bridge = passthrough (no termination), GSLB = DNS routing (no termination), AAA = auth (unrelated) - only the plain SSL virtual server terminates SSL, so that's the only place a policy sticks.

No community discussion yet for this question.