Which action would replace the bound default frontend SSL profile on a vServer with a newly created SSL profile?

• A. Globally unbind the ns_default_ssl_profile_frontend SSL profile.
• B. Unbind the default SSL profile and bind the newly created SSL profile.
• C. Create a separate SSL profile.
• D. Unbind the ns_default_ssl_profile_frontend SSL profile from the SSL vServer without binding a replacement SSL profile.

Answer: (B)

To replace the bound frontend SSL profile on a vServer, you substitute the binding on that vServer by removing the existing default profile and attaching your newly created profile to the same vServer. This directly changes which SSL settings and certificates are used for SSL termination on that vServer.

Unbinding globally would affect all vServers and isn’t appropriate when you only want to change this one vServer. Simply creating a separate SSL profile doesn’t apply it to the vServer by itself, and unbinding the default without binding a replacement would leave the vServer without an SSL profile, potentially breaking SSL termination.