201 · Question #2
You need to terminate client SSL traffic at the BIGIP and also to persist client traffic to the same pool member based on a BIG IP supplied cookie. Which four are profiles that would normally be inclu
The correct answer is A. TCP B. HTTP D. ClientSSL F. CookieBased Persistence. To terminate client SSL, handle HTTP traffic, and use cookie-based persistence, a virtual server requires profiles for TCP, ClientSSL, HTTP, and Cookie persistence.
Question
You need to terminate client SSL traffic at the BIGIP and also to persist client traffic to the same pool member based on a BIG IP supplied cookie. Which four are profiles that would normally be included in the virtual server's definition. (Choose four.)
Options
- ATCP
- BHTTP
- CHTTPS
- DClientSSL
- EServerSSL
- FCookieBased Persistence
How the community answered
(32 responses)- A78% (25)
- C9% (3)
- E13% (4)
Why each option
To terminate client SSL, handle HTTP traffic, and use cookie-based persistence, a virtual server requires profiles for TCP, ClientSSL, HTTP, and Cookie persistence.
The TCP profile is fundamental for any virtual server handling TCP-based traffic, providing low-level connection management.
The HTTP profile is essential for inspecting, modifying, or optimizing HTTP traffic, which is implicitly present when discussing SSL termination for web traffic.
HTTPS is a protocol, not a profile type on the BIG-IP; the combination of ClientSSL and HTTP profiles handles HTTPS traffic.
The ClientSSL profile is mandatory for the BIG-IP to decrypt and terminate incoming SSL/TLS traffic from clients.
ServerSSL is used for re-encrypting traffic to the backend servers, which is not required by the question's scenario of terminating client SSL and persisting traffic, without mentioning re-encryption.
The CookieBased Persistence profile is explicitly required to maintain client-to-server affinity using BIG-IP generated cookies.
Concept tested: Virtual server profile requirements for SSL termination and cookie persistence
Source: https://clouddocs.f5.com/clouddocs/big-ip-system-and-modules/latest/big-ip-ltm-basics/virtual-servers.html
Topics
Community Discussion
No community discussion yet for this question.