F5 Networks Exam 301b Topic 1 Question 99 Discussion

Actual exam question for F5 Networks's 301b exam

Question #: 99
Topic #: 1

-- Exhibit --

Refer to the exhibit.

An LTM Specialist creates a virtual server to load balance traffic to a pool of HTTPS servers. The servers use client certificates for user authentication. The virtual server has clientssl, serverssl, and http profiles enabled. Clients are unable to connect to the application through the virtual server, but they are able to connect to the application servers directly.

Which change to the LTM device configuration will resolve the problem?

AInstall the server certificate/key and enable Proxy SSL.

BUse the serverssl-insecure-compatible serverssl profile.

CConfigure the clientssl profile to require a client certificate.

DInstall the client's issuing Certificate Authority certificate on the LTM device.

Show Suggested Answer

Suggested Answer: A

by Valene at Sep 13, 2024, 07:12 PM

Limited Time Offer

25%

Off

Get Premium 301b Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Latosha

2 months ago

Haha, I bet the server admins forgot to enable the 'Magical SSL Fairy' option in the LTM config. That's the only way to fix this kind of problem!

upvoted 0 times

Shonda

1 months ago

C) Configure the clientssl profile to require a client certificate.

upvoted 0 times

...

Dalene

1 months ago

B) Use the serverssl-insecure-compatible serverssl profile.

upvoted 0 times

...

Raelene

1 months ago

A) Install the server certificate/key and enable Proxy SSL.

upvoted 0 times

...

Lemuel

2 months ago

Option C looks good too. If the clientssl profile isn't configured to require a client cert, the clients won't be able to authenticate through the virtual server.

upvoted 0 times

Alayna

1 months ago

Installing the client's issuing Certificate Authority certificate is a good idea too.

upvoted 0 times

...

Chandra

1 months ago

That should definitely help with the authentication issue.

upvoted 0 times

...

Estrella

1 months ago

Yeah, configuring the clientssl profile to require a client certificate makes sense.

upvoted 0 times

...

Lavelle

2 months ago

Let's go ahead and make that change to the LTM device configuration.

upvoted 0 times

...

Elke

2 months ago

I agree, configuring the clientssl profile to require a client certificate should fix the issue.

upvoted 0 times

...

Precious

2 months ago

Option C looks like the best solution.

upvoted 0 times

...

Glory

2 months ago

Option C looks like the best solution to me.

upvoted 0 times

...

Frederic

2 months ago

I'm not sure about that. I think the answer might be D) Install the client's issuing Certificate Authority certificate on the LTM device.

upvoted 0 times

...

Brianne

3 months ago

I agree with Leatha. Enabling clientssl profile to require a client certificate should solve the issue.

upvoted 0 times

...

Leatha

3 months ago

I think the answer is C) Configure the clientssl profile to require a client certificate.

upvoted 0 times

...

Leah

3 months ago

I think the answer is D. If the clients are using client certificates, the LTM device needs to have the issuing CA certificate installed to verify those client certs.

upvoted 0 times