Exam 1Y0-241 topic 1 question 58 discussion

A wildcard is still bound to a domain, aka [email protected]. In this case the domains are .com, .net, etc.

I would choose A As It says here: https://support.citrix.com/article/CTX110670/how-to-use-a-wildcard-certificate-to-host-multiple-secure-sites-on-a-single-ssl-virtual-ip-address-of-the-netscaler-appliance

I would choose D. Option C requires to configure SNI since it is not possible to bind 3 certificates (with the same cryptography) to a Load Balancer. In addition, the statement mentions that the three websites are serving the same content, so the backend servers could be the same for all of them and then the SNI config stops making sense. By binding a multiple SAN certificate, we only need to adapt the DNS entries of the websites to point to the same IP (1 IP with 3 DNS) and we will be able to forward the requests to any backend server since all of them are serving the same content.

C because the simplest one, the others you require CS, SNI,etc

C and D are viable, C is quicker since admin has the certs created, D would require a brand new one