Oracle Cloud Infrastructure 2022 Architect Professional — Question 5
An Oracle Cloud Infrastructure (OCI) Public Load Balancers SSL certificate is expiring soon. You notice that the Load Balancer is configured with SSL Termination only. When the certificate expires, data traffic can be interrupted and could compromise security.
What steps do you need to take to prevent this situation?
Answer options
- A. Add the new SSL certificate to the Load Balancer and implement end-to-end SSL so it can encrypt the traffic from clients all the way to the backend servers.
- B. Add the new SSL certificate to the Load Balancer, update listeners and backend sets so they can use the new certificate bundle.
- C. Add the new SSL certificate to the Load Balancer, update backend servers to work with a new certificate and edit listeners so they can use the new certificate bundle.
- D. Add the new SSL certificate to the Load Balancer and update listeners to use the new certificate bundle.
- E. Add the new SSL certificate to the Load Balancer and update backend servers to use the new certificate bundle.
Correct answer: D
Explanation
The correct answer is D because it directly addresses the need to update the Load Balancer's listeners with the new SSL certificate bundle, ensuring continued secure data traffic. Options A, C, and E involve unnecessary steps like configuring backend servers or enabling end-to-end SSL, which are not required for this situation. Option B incorrectly suggests updating backend sets, which is also unnecessary when only listener updates are needed.