F5 Networks Exam 201 Topic 7 Question 93 Discussion

Actual exam question for F5 Networks's 201 exam

Question #: 93
Topic #: 7

[All 201 Questions]

Which statement is true concerning SSL termination?

AA virtual server that has both ClientSSL and ServerSSL profiles can still support cookie persistence.

BDecrypting traffic at the BIG-IP allows the use of iRules for traffic management, but increases the load on the pool member.

CWhen any virtual server uses a ClientSSL profile, all SSL traffic sent to the BIG-IP is decrypted before it is forwarded to servers.

DIf a virtual server has both a ClientSSL and ServerSSL profile, the pool members have less SSL processing than if the virtual server had only a ClientSSL profile.

Show Suggested Answer

Suggested Answer: A, C

by Clement at Jul 13, 2024, 08:07 PM

Limited Time Offer

25%

Off

Get Premium 201 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Virgie

1 months ago

Hmm, I'm tempted to go with option B. Sounds like a 'work smarter, not harder' kind of situation to me.

upvoted 0 times

Allene

8 days ago

I think you're right, option B does sound like a smart approach.

upvoted 0 times

...

Merissa

16 days ago

Option B) Decrypting traffic at the BIG-IP allows the use of iRules for traffic management, but increases the load on the pool member.

upvoted 0 times

...

Ciara

2 months ago

A is the way to go. A virtual server with both ClientSSL and ServerSSL profiles can still support cookie persistence. That's the key here.

upvoted 0 times

Cherrie

24 days ago

Yes, that's true. It's a trade-off between functionality and performance.

upvoted 0 times

...

Hayley

1 months ago

But decrypting traffic at the BIG-IP can increase the load on pool members, right?

upvoted 0 times

...

Cheryl

1 months ago

I agree, A is the correct option. It allows for cookie persistence.

upvoted 0 times

...

Devon

2 months ago

D is definitely the right answer. If a virtual server has both a ClientSSL and ServerSSL profile, the pool members have less SSL processing than if it had only a ClientSSL profile.

upvoted 0 times

...

Portia

2 months ago

I think C is the correct answer. When a virtual server uses a ClientSSL profile, all SSL traffic sent to the BIG-IP is decrypted before being forwarded to the servers.

upvoted 0 times

Paz

1 months ago

D) If a virtual server has both a ClientSSL and ServerSSL profile, the pool members have less SSL processing than if the virtual server had only a ClientSSL profile.

upvoted 0 times

...

Becky

1 months ago

C) When any virtual server uses a ClientSSL profile, all SSL traffic sent to the BIG-IP is decrypted before it is forwarded to servers.

upvoted 0 times

...

Skye

1 months ago

B) Decrypting traffic at the BIG-IP allows the use of iRules for traffic management, but increases the load on the pool member.

upvoted 0 times

...

Dominque

1 months ago

A) A virtual server that has both ClientSSL and ServerSSL profiles can still support cookie persistence.

upvoted 0 times

...

Alesia

2 months ago

Option B seems the most accurate to me. Decrypting traffic at the BIG-IP allows for more flexibility in traffic management, but it does increase the load on the pool members.

upvoted 0 times

...