Citrix ADC 13 Advanced Topics – Security, Management and Optimization — Question 109

Which two items must be true for a client to connect to an SSL offload vServer without any SSL errors? (Choose two.)

Answer options

• A. The server certificate is from a private certificate authority (CA).
• B. The server certificate is bound to the load-balancing vServer.
• C. The root certificate is installed on the Citrix ADC.
• D. The root certificate is installed on the client’s device.

Correct answer: B, D

Explanation

The correct answer includes B and D because the server certificate must be bound to the load-balancing vServer for secure communication, and the client's device must have the root certificate installed to trust the server certificate. Options A and C are incorrect; a server certificate does not have to come from a private CA, and while the root certificate on the Citrix ADC is important, it does not directly affect the client connection.