A company is deploying outbound SSL inspection. They want to ensure that traffic to banking and healthcare websites is not decrypted due to compliance and privacy regulations. What is the BEST way to configure this on the BIG-IP?

Use an iRule to match the destination IP address and bypass inspection for those IPs.

Create a category-based bypass list using the BIG-IP's URL filtering database.

Configure the BIG-IP to only inspect traffic on port 80 and not on port 443.

Disable the SSL forward proxy profile for all traffic and enable it only for specific IP addresses.

A company is deploying an outbound SSL inspection solution. They want to ensure that traffic to a specific high-security partner site is NOT decrypted, while all other outbound traffic is inspected. What is the most efficient way to configure this on the BIG-IP?

Create an SSL bypass rule based on the destination FQDN and apply it to the virtual server.

Use a separate virtual server for the partner's traffic and configure it with an SSL origin server profile.

Disable the SSL forward proxy profile globally and re-enable it only for the partner's traffic.

Install the partner's public certificate on the BIG-IP and use it for the client-side SSL profile.

F5Certified Solution Expert, Security

Domain 3Objective 4

3.04 Articulate Architectural Requirements for Outbound SSL Visibility 401 Practice Questions (Page 3)

Part of the OPERATION AND IMPLEMENTATION domain, which makes up ~38% of our current practice bank. F5 does not publish an official question count, but from its 105-minute exam (~40–70 total, ~15–27 in this domain), expect 2–4 from this objective — we provide 12 practice questions to prepare you well beyond it. (estimate)

12questions here

3free pages

1concept

Questions 11–12

11application · medium
A company is deploying outbound SSL inspection. They want to ensure that traffic to banking and healthcare websites is not decrypted due to compliance and privacy regulations. What is the BEST way to configure this on the BIG-IP?
Select an answer first
12application · medium
A company is deploying an outbound SSL inspection solution. They want to ensure that traffic to a specific high-security partner site is NOT decrypted, while all other outbound traffic is inspected. What is the most efficient way to configure this on the BIG-IP?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to 401

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “401” is a trademark of its owner, used for identification only.

3.04 Articulate Architectural Requirements for Outbound SSL Visibility 401 Practice Questions (Page 3)

Questions 11–12

A company is deploying outbound SSL inspection. They want to ensure that traffic to banking and healthcare websites is not decrypted due to compliance and privacy regulations. What is the BEST way to configure this on the BIG-IP?

A company is deploying an outbound SSL inspection solution. They want to ensure that traffic to a specific high-security partner site is NOT decrypted, while all other outbound traffic is inspected. What is the most efficient way to configure this on the BIG-IP?

Keep studying — OPERATION AND IMPLEMENTATION