Oracle Cloud Infrastructure 2020 Architect Professional — Question 6

An Oracle Cloud Infrastructure (OCI) Public Load Balancer's SSL certificate is expiring soon. You noticed the Load Balancer is configured with SSL Termination only. When the certificate expires, data traffic can be interrupted and security compromised.
What steps do you need to take to prevent this situation? (Choose the best answer.)

Answer options

• A. Add the new SSL certificate to the Load Balancer and update backend servers to use the new certificate bundle.
• B. Add the new SSL certificate to the Load Balancer and update listeners to use the new certificate bundle.
• C. Add the new SSL certificate to the Load Balancer, update listeners and backend sets so they can use the new certificate bundle.
• D. Add the new SSL certificate to the Load Balancer, update backend servers to work with a new certificate and edit listeners so they can use the new certificate bundle.
• E. Add the new SSL certificate to the Load Balancer and implement end to end SSL so it can encrypt the traffic from clients all the way to the backend servers.

Correct answer: A

Explanation

The correct answer is A because it focuses on updating the Load Balancer with the new SSL certificate and ensuring that backend servers are configured to use the new certificate bundle. Options B, C, D, and E include unnecessary steps or misinterpret the requirement for SSL Termination, which does not need backend server updates or end-to-end SSL in this instance.