DevOps Tools Engineer (LPIC-OT 701) — Question 14
A service should be provided to arbitrary clients on the Internet using HTTPS. Any standard client on the Internet should be able to consume the service without further configuration. Which of the following approaches can be used to implement these requirements? (Choose three correct answers.)
Answer options
- A. Configure the web servers to not use a server certificate when serving HTTPS.
- B. Generate a self-signed certificates during the deployment of each backend server.
- C. Use a certificate issuing service to request certificates during each server deployment.
- D. Use a load balancer that decrypts incoming requests and passes them on in plain HTTP.
- E. Install a wildcard certificate and the respective private key on all the backend servers.
Correct answer: B, C, D
Explanation
The correct answers, B, C, and D, ensure that clients can access the service without additional configuration. B provides self-signed certificates, C uses a certificate issuing service for proper validation, and D allows for traffic to be decrypted before being sent as plain HTTP, simplifying client access. Options A and E are incorrect because A would not provide secure connections, and E could lead to management issues across multiple servers.