Exam JN0-334 topic 1 question 27 discussion

option D is correct: "A server certificate and a root certificate authority are both used."Here's why:A server certificate is used to present to the client. This certificate is typically signed by the device performing the SSL proxy function. The client sees this certificate instead of the actual server's certificate. The server certificate used in the proxy must be trusted by the client, either directly or through a chain of trust, which involves a Root Certificate Authority (CA).A root certificate authority (CA) is used by the SSL proxy to sign the server certificate that it presents to the client. The Root CA must be trusted by the client for the client to establish a trusted SSL session. In many cases, the Root CA used by the SSL proxy is an internal CA whose root certificate has been distributed to and trusted by client devices within the organization.

only D

Answer A: Valid SSL proxy configurations - Client-protection SSL Proxy Root CA configuration required Server certificate NOT required - Server-Protection SSL Policy Root CA configuration NOT required Server certificate configuration required

You must configure either root-ca (forward proxy -"client profile") or server-certificate (reverse proxy) in an SSL proxy profile. Otherwise, the commit check fails. source : https://www.juniper.net/documentation/us/en/software/junos/logical-system-security/topics/topic-map/ssp-proxy-lsys.html

A https://www.juniper.net/documentation/us/en/software/junos/logical-system-security/topics/topic-map/ssp-proxy-lsys.html

D is the correct answer

D is correct

D is correct

Should be A correct