Refer to the exhibit. Which two functions are performed by the load balancer when it handles traffic originating from the Internet destined to an application hosted on the file server farm? (Choose two.)
A.
Terminate the TLS over the UDP connection from the router and originate an HTTPS connection to the selected server.
B.
Terminate the TLS over the UDP connection from the router and originate an HTTP connection to the selected server.
C.
Terminate the TLS over the TCP connection from the router and originate an HTTP connection to the selected server.
D.
Terminate the TLS over the TCP connection from the router and originate an HTTPS connection to the selected server.
E.
Terminate the TLS over the SCTP connection from the router and originate an HTTPS connection to the selected server.
C and D
A and B cannot be good as the connectionless UDP will not map to the connection-oriented TCP, which http and https use
E cannot be true, as SCTP is a stream control protocol, cannot be mapped to http
In both C and D the LB terminates TLS, and originates the http connection, either encrypted (HTTP), or not encrypted (HTTPS=HTTP+TLS) way.
Selected Answer: CD
Stream Control Transmission Protocol (SCTP) use DTLS
DTLS is a protocol based on TLS that is capable of securing the datagram transport. DTLS is well-suited for securing applications and services that are delay-sensitive (and hence use datagram transport), tunneling applications such as VPNs, and applications that tend to run out of file descriptors or socket buffers.
https://datatracker.ietf.org/doc/html/rfc9260
In the context of load balancing, TLS termination is typically handled over a TCP connection. UDP and SCTP are less common for this use case due to the lack of reliability compared to TCP, especially for applications such as file servers.
Once TLS is terminated, the load balancer can then initiate a new connection to the selected server. This can be either HTTP or HTTPS depending on the specific needs of the network and application, although using HTTP is more common after termination because the load balancer has already decrypted the traffic and can then send it unencrypted to the server in a secure network.
Given these considerations, the two correct options are:
C. Terminate the TLS over the TCP connection from the router and originate an HTTP connection to the selected server.
D. Terminate the TLS over the TCP connection from the router and originate an HTTPS connection to the selected server.
Tend to think it is - DE
TLS with HTTPs is obvious.
And from the rest the only protocol supporting TLS is SCTP.
UDP is usind DTLS. And HTTP is NOT using TLS at all.
Disagree.. from your link
6.2. TLS-based user data transmission
In general, the bi-directional stream will be used for TLS-based user
data transmission and it SHOULD NOT be used for SCTP-based user data
transmission. The exception to this rule is for protocols which
contain upgrade-to-TLS mechanisms, such as those of HTTP upgrade
[RFC2817]
C and D are the correct answer. The traffic from the router is via the internet so LB should secure and use TLS to terminate the connection from the router. and the LB should handle the SSL offloading. Then from LB, it will create a new session originating from the LB (via selfIPs) and whether to use HTTP or HTTPS to the server.
Good because there are two connections. One to LB and one to Server. This is known as SSL offloading when the TLS is terminated on load balancer and http to server so as to remove the ssl processing from the server which does not have dedicated crypto hardware.
The question is wrongly formulated and not complete. What is it originated from the router or a user making website requests i.e what client and destination application is used being haled.
I would say C and D.
I don't think I've ever configured SCTP on a load balancer, and it's not really a 'security' protocol. Also a ton of load balancers don't even know how to differentiate them (https://support.f5.com/csp/article/K3800)
This section is not available anymore. Please use the main Exam Page.350-901 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Jeki4an
Highly Voted 4 years, 10 months agoLala26
Highly Voted 4 years, 2 months agodrduck
Most Recent 1 year, 9 months agoPecoto
1 year, 9 months agotartarus23
1 year, 11 months agoSupersede
2 years, 7 months agoldlpi
2 years, 1 month ago3ca28d8
1 year, 1 month agobluesky2022
2 years, 9 months agoMelven
2 years, 9 months agoblurain
2 years, 11 months agothedes
8 months, 2 weeks agoJINKIN1985
3 years, 3 months ago[Removed]
3 years, 5 months agoGuillaume
3 years, 5 months agoNpirate
3 years, 9 months agoKelevra1300
4 years, 6 months agoroomi
4 years, 6 months agowiwa1978
4 years, 6 months agoflambadone
4 years, 7 months agosan111
4 years, 7 months ago