MENU
An TLM Specialist needs to configure a virtual server to terminate SSL connection on the LTM device.
Cryptographic information must be re-authorized for SSL sessions that remain open for longer than 30 seconds.
Which settings should the LTM Specialist configure in the client SSL profile?
Suggested Answer: A, C
Get Premium 301a Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
It is required that cookie persist must be used and http profile must be used, and SSL offloading must also be required. It must be in standard mode, excluding BD E.
29 comments · newest first
JE
Jennie
11 months ago
B seems unnecessary, we don’t need Peer SN1 for this setup.
MA
Marquetta
11 months ago
I’d go with A instead. Handshake Timeout is crucial too!
SA
Samira
11 months ago
Wait, are we sure 30 seconds is enough time? Seems a bit short.
TH
Theresia
12 months ago
Totally agree with C! It fits the requirement perfectly.
MA
Mattie
12 months ago
I think option C is the right choice. Renegotiate Period makes sense.
YE
Yen
12 months ago
I don't think Require Peer SN1 Support is relevant for this scenario, but I could be mistaken. It seems more about the connection itself rather than session re-authorization.
GA
Gabriele
1 year ago
I feel like the Renegotiate Max Record Delay could be a factor too, but I can't recall the specifics on how it ties into the 30-second requirement.
ST
Stephaine
1 year ago
I remember practicing a question about renegotiation settings, so maybe the Renegotiate Period is the right choice here?
TA
Tamar
1 year ago
I think the Handshake Timeout might be related, but I'm not sure if it directly affects the re-authorization for SSL sessions.
MA
Malcom
1 year ago
Okay, I've got this. The question is specifically asking about the client SSL profile settings, and the requirement is to re-authorize the crypto info every 30 seconds. So the answer has to be option C, setting the Renegotiate Period to 30 seconds.
MA
Maia
1 year ago
Hmm, I'm a bit confused. Is the question asking about the Handshake Timeout, Renegotiate Period, or Renegotiate Max Record Delay? I'll need to carefully read through the options to determine the best setting.
TH
Theresia
1 year ago
This looks like a straightforward SSL configuration question. I think the key is to focus on the requirement to re-authorize the cryptographic information every 30 seconds.
JI
Jin
1 year ago
I'm not entirely sure about this one. The wording is a bit tricky, and I'm not familiar with all the SSL profile settings. I'll need to review my notes and maybe ask the instructor for some clarification before attempting to answer.
EL
Elouise
1 year ago
This is a tricky one. I'll need to think carefully about the potential data loss implications.
FA
Fatima
1 year ago
Once a minute? That seems way too frequent for signature updates. I doubt Palo Alto is pushing out changes that rapidly. I'm leaning towards either once a day or once a week as the more reasonable options here. I'll need to weigh the pros and cons of each.
DE
Denny
1 year ago
Ah, the joys of SSL configuration. It's like a never-ending game of 'Guess the Right Setting'.
RE
Reita
1 year ago
Hmm, I'm not sure about that 'Require Peer SN1 Support' option. Sounds like something straight out of a sci-fi movie. Let's stick to the basics and go with the Renegotiate Period.
TW
Twana
1 year ago
Whoa, 30 seconds for the Renegotiate Period? That's like an eternity in the digital world! Might as well set it to 'Never' and call it a day.
RO
Rodolfo
1 year ago
Exactly, we need to make sure the SSL sessions are secure and up to date.
SA
Sabra
1 year ago
I agree, it's better to be safe than sorry when it comes to SSL connections.
AS
Ashlee
1 year ago
Yeah, it's important to re-authorize cryptographic information for security.
TE
Teresita
1 year ago
I think setting the Renegotiate Period to 30 seconds is a good idea.
MI
Mitzie
2 years ago
Setting the Renegotiate Period to 30 seconds seems like the obvious choice here. Gotta keep those SSL sessions secure!
VI
Viola
1 year ago
D) set the Renegotiate Max Record Delay to 30
MA
Maybelle
1 year ago
C) set the Renegotiate Period to 30 seconds
AN
Andree
1 year ago
A) set the Handshake Timeout to 30 seconds
QU
Queenie
2 years ago
I'm not sure, but I think enabling Require Peer SN1 Support could also be a valid option for terminating SSL connections.
LE
Leslie
2 years ago
I agree with Samira, setting the Renegotiate Period to 30 seconds makes sense for re-authorization of SSL sessions.
SA
Samira
2 years ago
I think the correct setting is to set the Renegotiate Period to 30 seconds.