JNCIS-ENT: Juniper Networks Certified Specialist – Enterprise Routing and Switching (2021) — Question 61

Which two statements are correct about SSL proxy server protection? (Choose two.)

Answer options

• A. You do not need to configure the servers to use the SSL proxy function on the SRX Series device.
• B. You must load the server certificates on the SRX Series device.
• C. The servers must be configured to use the SSL proxy function on the SRX Series device.
• D. You must import the root CA on the servers.

Correct answer: A, B

Explanation

Answer A is correct because the SSL proxy function can work without server configuration. Answer B is also correct since server certificates must be loaded onto the SRX Series device for proper SSL proxy operation. Answers C and D are incorrect because servers do not need to be configured for SSL proxy and root CA installation is not required on the servers.