Which statement is true about end-to-end encryption with NetScaler optimization for responses?

• A. HTTP protocol for the virtual server and HTTP protocol for the services
• B. SSL Bridge protocol for the virtual server and SSL protocol for the services
• C. HTTP protocol for the services and SSL protocol for the virtual server
• D. SSL protocol for the virtual server and SSL protocol for the services

Answer: (D)

End-to-end encryption with NetScaler optimization relies on keeping TLS on every hop that matters, while still allowing NetScaler to optimize the responses. To do this, the client connection to the virtual server must be TLS, and the connection from the virtual server to the backend services must also be TLS. With TLS on both sides, NetScaler can terminate the client TLS, inspect and optimize the response, and then re-encrypt it to send securely to the backend. If any part of the path isn’t encrypted, you’d break the end-to-end protection on that leg, or you wouldn’t be able to apply optimization in a way that preserves end-to-end security. Therefore, configuring TLS on both the virtual server and the services achieves end-to-end encryption with NetScaler optimization for responses.