nerdexam
F5

201 · Question #211

Refer to the exhibit. A BIG-IP Administrator configures a Virtual Server to handle HTTPS traffic. Users report that the application is NOT working. Which actional configuration is regard to resolve th

The correct answer is A. Configure SSL Profile (Client). For a Virtual Server to handle HTTPS traffic, an SSL Client Profile must be configured to decrypt incoming encrypted connections from clients.

Section 2: Configure Load Balancing Features

Question

Refer to the exhibit. A BIG-IP Administrator configures a Virtual Server to handle HTTPS traffic. Users report that the application is NOT working. Which actional configuration is regard to resolve this issue?

Exhibit

201 question #211 exhibit

Options

  • AConfigure SSL Profile (Client)
  • BConfigure Protocol Profile (Server)
  • CConfigure Service Profile HTTP
  • DConfigure SSL Profile (Server)

How the community answered

(44 responses)
  • A
    89% (39)
  • B
    2% (1)
  • C
    2% (1)
  • D
    7% (3)

Why each option

For a Virtual Server to handle HTTPS traffic, an SSL Client Profile must be configured to decrypt incoming encrypted connections from clients.

AConfigure SSL Profile (Client)Correct

When a Virtual Server is configured to handle HTTPS traffic, it needs to decrypt incoming encrypted connections from clients. An SSL Client Profile specifies the SSL/TLS protocols, ciphers, and certificates that the BIG-IP system uses to establish a secure connection with a client. Without an SSL Client Profile configured on the Virtual Server, the BIG-IP cannot decrypt the HTTPS traffic, preventing the application from working.

BConfigure Protocol Profile (Server)

A Protocol Profile (Server) is typically a TCP profile and does not directly handle the SSL/TLS encryption for HTTPS client connections.

CConfigure Service Profile HTTP

A Service Profile HTTP refers to an HTTP profile, which processes HTTP-layer traffic, but SSL decryption must occur before the HTTP profile can process the clear text.

DConfigure SSL Profile (Server)

An SSL Profile (Server) is used for re-encrypting traffic when the BIG-IP connects to a backend server, not for decrypting initial client connections to the Virtual Server.

Concept tested: BIG-IP Virtual Server SSL Client Profile for HTTPS decryption

Source: https://techdocs.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-ssl-administration-13-1-0/2.html

Topics

#HTTPS virtual server#Client SSL profile#SSL offloading#virtual server configuration

Community Discussion

No community discussion yet for this question.

Full 201 Practice