nerdexam
F5

201 · Question #77

Which is an advantage of terminating SSL communication at the BIGIP rather than the ultimate web server.

The correct answer is A. Terminating SSL at the BIGIP can eliminate SSL processing at the web servers. SSL termination at the BIG-IP offloads computationally intensive decryption from backend web servers, allowing them to focus on application logic.

Section 7: Configure Advanced Features

Question

Which is an advantage of terminating SSL communication at the BIGIP rather than the ultimate web server.

Options

  • ATerminating SSL at the BIGIP can eliminate SSL processing at the web servers.
  • BTerminating SSL at IP the eliminates BIG all unencrypted traffic from the nternal.network.Terminating SSL at
  • CTerminating SSL at the BIGIP eliminates the need to purchase SSL certificates from a certificate authority.
  • DTerminating SSL at the BIGIP eliminates the need to use SSL acceleration hardware anywhere in the

How the community answered

(31 responses)
  • A
    90% (28)
  • C
    6% (2)
  • D
    3% (1)

Why each option

SSL termination at the BIG-IP offloads computationally intensive decryption from backend web servers, allowing them to focus on application logic.

ATerminating SSL at the BIGIP can eliminate SSL processing at the web servers.Correct

By terminating SSL at the BIG-IP, the BIG-IP handles the CPU-intensive encryption and decryption, sending unencrypted (or re-encrypted) traffic to the backend web servers, which significantly reduces the processing load on those servers.

BTerminating SSL at IP the eliminates BIG all unencrypted traffic from the nternal.network.Terminating SSL at

Terminating SSL at the BIG-IP does not eliminate all unencrypted traffic from the internal network; traffic between the BIG-IP and web servers might still be unencrypted unless re-encrypted, and other internal network traffic is unaffected.

CTerminating SSL at the BIGIP eliminates the need to purchase SSL certificates from a certificate authority.

SSL certificates are still required for the BIG-IP to present to clients, so purchasing certificates from a certificate authority is not eliminated.

DTerminating SSL at the BIGIP eliminates the need to use SSL acceleration hardware anywhere in the

The BIG-IP itself often uses SSL acceleration hardware (either built-in or external) to efficiently handle SSL termination, so the need for acceleration hardware is not eliminated but rather centralized.

Concept tested: SSL offloading benefits

Source: https://techdocs.f5.com/en-us/big-ip-15-1-0/big-ip-local-traffic-management-implementations/configuring-ssl-profiles.html

Topics

#SSL offloading#SSL termination#server performance#encryption

Community Discussion

No community discussion yet for this question.

Full 201 Practice