F5 Networks Exam 201 Topic 7 Question 93 Discussion

Actual exam question for F5 Networks's 201 exam

Question #: 93
Topic #: 7

[All 201 Questions]

Which statement is true concerning SSL termination?

AA virtual server that has both ClientSSL and ServerSSL profiles can still support cookie persistence.

BDecrypting traffic at the BIG-IP allows the use of iRules for traffic management, but increases the load on the pool member.

CWhen any virtual server uses a ClientSSL profile, all SSL traffic sent to the BIG-IP is decrypted before it is forwarded to servers.

DIf a virtual server has both a ClientSSL and ServerSSL profile, the pool members have less SSL processing than if the virtual server had only a ClientSSL profile.

Show Suggested Answer

Suggested Answer: A, C

by Clement at Jul 13, 2024, 08:07 PM

Limited Time Offer

25%

Off

Get Premium 201 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Virgie

3 months ago

Hmm, I'm tempted to go with option B. Sounds like a 'work smarter, not harder' kind of situation to me.

upvoted 0 times

Alishia

2 months ago

Yeah, it's all about optimizing resources efficiently.

upvoted 0 times

...

Allene

2 months ago

I think you're right, option B does sound like a smart approach.

upvoted 0 times

...

Merissa

2 months ago

Option B) Decrypting traffic at the BIG-IP allows the use of iRules for traffic management, but increases the load on the pool member.

upvoted 0 times

...

Ciara

3 months ago

A is the way to go. A virtual server with both ClientSSL and ServerSSL profiles can still support cookie persistence. That's the key here.

upvoted 0 times

Cherrie

3 months ago

Yes, that's true. It's a trade-off between functionality and performance.

upvoted 0 times

...

Hayley

3 months ago

But decrypting traffic at the BIG-IP can increase the load on pool members, right?

upvoted 0 times

...

Cheryl

3 months ago

I agree, A is the correct option. It allows for cookie persistence.

upvoted 0 times

...

Devon

3 months ago

D is definitely the right answer. If a virtual server has both a ClientSSL and ServerSSL profile, the pool members have less SSL processing than if it had only a ClientSSL profile.

upvoted 0 times

...

Portia

4 months ago

I think C is the correct answer. When a virtual server uses a ClientSSL profile, all SSL traffic sent to the BIG-IP is decrypted before being forwarded to the servers.

upvoted 0 times

Paz

3 months ago

D) If a virtual server has both a ClientSSL and ServerSSL profile, the pool members have less SSL processing than if the virtual server had only a ClientSSL profile.

upvoted 0 times

...

Becky

3 months ago

C) When any virtual server uses a ClientSSL profile, all SSL traffic sent to the BIG-IP is decrypted before it is forwarded to servers.

upvoted 0 times

...

Skye

3 months ago

B) Decrypting traffic at the BIG-IP allows the use of iRules for traffic management, but increases the load on the pool member.

upvoted 0 times

...

Dominque

3 months ago

A) A virtual server that has both ClientSSL and ServerSSL profiles can still support cookie persistence.

upvoted 0 times

...

Alesia

4 months ago

Option B seems the most accurate to me. Decrypting traffic at the BIG-IP allows for more flexibility in traffic management, but it does increase the load on the pool members.

upvoted 0 times

...