To disable TLSv1 by default on an SSL vServer, which profile should be configured?

To disable TLSv1 by default on an SSL vServer, which profile should be configured?

• A. DTLS
• B. TCP
• C. SSL
• D. HTTP

Answer: (C)

TLS version control for an SSL vServer is handled by the SSL profile bound to that vServer. The SSL profile defines which protocol versions are allowed (such as TLS 1.0, TLS 1.1, TLS 1.2, TLS 1.3) and can disable older versions like TLSv1 by default, for example by setting a minimum version or explicitly turning off TLS 1.0. The other profiles address different layers or transport behavior—DTLS is for UDP, TCP controls transport, and HTTP governs HTTP-specific settings—so they don’t determine which TLS versions the vServer accepts. Thus, the SSL profile is the correct one to configure to disable TLSv1 by default.

TLS version control for an SSL vServer is handled by the SSL profile bound to that vServer. The SSL profile defines which protocol versions are allowed (such as TLS 1.0, TLS 1.1, TLS 1.2, TLS 1.3) and can disable older versions like TLSv1 by default, for example by setting a minimum version or explicitly turning off TLS 1.0. The other profiles address different layers or transport behavior—DTLS is for UDP, TCP controls transport, and HTTP governs HTTP-specific settings—so they don’t determine which TLS versions the vServer accepts. Thus, the SSL profile is the correct one to configure to disable TLSv1 by default.