MENU
-- Exhibit --
-- Exhibit --
Refer to the exhibit.
An LTM Specialist creates a virtual server to load balance traffic to a pool of HTTPS servers. The servers use client certificates for user authentication. The virtual server has clientssl, serverssl, and http profiles enabled. Clients are unable to connect to the application through the virtual server, but they are able to connect to the application servers directly.
Which change to the LTM device configuration will resolve the problem?
Suggested Answer: A
Get Premium 301b Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
34 comments · newest first
LY
Lyla
11 months ago
Just to clarify, clients can connect directly but not through the virtual server? That's weird.
PE
Percy
11 months ago
Proxy SSL could also be a solution, but D is more straightforward.
LE
Leeann
11 months ago
Wait, why would they need to require a client cert? That seems off.
HA
Haley
12 months ago
I agree, option D seems like the right fix.
GE
German
12 months ago
Looks like they need to install the client's CA certificate.
CO
Colette
12 months ago
I feel like the serverssl-insecure-compatible profile might not be the best choice, but I can't recall why exactly.
RA
Rasheeda
1 year ago
This seems similar to a practice question I did where we had to install the client's issuing CA certificate. That might be the right answer here too.
DE
Derick
1 year ago
I’m not entirely sure, but I think installing the server certificate and enabling Proxy SSL could help with the connection issue.
AD
Adolph
1 year ago
I remember something about client certificates being crucial for authentication, so maybe we need to configure the clientssl profile to require one?
CL
Cletus
1 year ago
I've seen issues like this before. My guess is that the clientssl profile needs to be configured to require the client certificate. I'll make sure to check that option.
VE
Vernice
1 year ago
Okay, I think the key here is to figure out where the issue is occurring - is it with the client-side SSL, the server-side SSL, or something else? I'll need to analyze the profiles and settings.
LE
Leonida
1 year ago
Hmm, I'm a bit confused about the client certificate requirement. I'll need to make sure I understand how that should be handled on the LTM device.
BR
Brigette
1 year ago
This looks like a tricky one. I'll need to carefully review the details about the client certificates and the LTM device configuration.
FE
Felix
1 year ago
This seems straightforward. The problem is that the client certificates aren't being properly handled by the LTM device. I'll go with option C and configure the clientssl profile accordingly.
LA
Latosha
2 years ago
Haha, I bet the server admins forgot to enable the 'Magical SSL Fairy' option in the LTM config. That's the only way to fix this kind of problem!
SH
Shonda
2 years ago
C) Configure the clientssl profile to require a client certificate.
DA
Dalene
2 years ago
B) Use the serverssl-insecure-compatible serverssl profile.
RA
Raelene
2 years ago
A) Install the server certificate/key and enable Proxy SSL.
LE
Lemuel
2 years ago
Option C looks good too. If the clientssl profile isn't configured to require a client cert, the clients won't be able to authenticate through the virtual server.
AL
Alayna
2 years ago
Installing the client's issuing Certificate Authority certificate is a good idea too.
CH
Chandra
2 years ago
That should definitely help with the authentication issue.
ES
Estrella
2 years ago
Yeah, configuring the clientssl profile to require a client certificate makes sense.
LA
Lavelle
2 years ago
Let's go ahead and make that change to the LTM device configuration.
EL
Elke
2 years ago
I agree, configuring the clientssl profile to require a client certificate should fix the issue.
PR
Precious
2 years ago
Option C looks like the best solution.
GL
Glory
2 years ago
Option C looks like the best solution to me.
FR
Frederic
2 years ago
I'm not sure about that. I think the answer might be D) Install the client's issuing Certificate Authority certificate on the LTM device.
BR
Brianne
2 years ago
I agree with Leatha. Enabling clientssl profile to require a client certificate should solve the issue.
LE
Leatha
2 years ago
I think the answer is C) Configure the clientssl profile to require a client certificate.
LE
Leah
2 years ago
I think the answer is D. If the clients are using client certificates, the LTM device needs to have the issuing CA certificate installed to verify those client certs.
FR
Francine
2 years ago
Let's go ahead and make that change to the configuration.
WA
Wai
2 years ago
Installing the CA certificate should resolve the issue.
IZ
Izetta
2 years ago
I agree, the LTM device needs the CA certificate to verify client certs.
DE
Denae
2 years ago
I think the answer is D.