Which feature can a Citrix Administrator use to create a consistent set of front-end SSL parameters across multiple SSL virtual servers?

• A. SSL Policy
• B. SSL Profile
• C. SSL Bridge
• D. SSL Offload

Answer: (B)

Use an SSL Profile to standardize the front-end TLS settings across multiple SSL virtual servers. An SSL Profile bundles the TLS parameters you care about—such as supported TLS versions, cipher suites, and other front-end negotiation options—into a single object. Bind the same profile to all the SSL vServers you want to be consistent with. When you update the profile, all bound vServers automatically reflect those changes, giving you a uniform negotiation behavior across your deployment.

SSL Policy is about applying actions based on conditions rather than defining the actual SSL negotiation parameters. SSL Bridge is a pass-through/bridging mode that doesn’t consolidate SSL settings across vServers. SSL Offload concerns where TLS termination occurs, but the unified parameter set across many vServers is achieved by using a shared SSL Profile.