Configure SSL Offload CCA-APPDS-GATEWAY Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   Users report that the website is slow. The administrator checks the Citrix ADC and notices that the CPU utilization on the ADC is consistently high. The SSL virtual server is handling all HTTPS traffic. What is the most likely cause of the high CPU usage?

   • AThe backend servers are overloaded and causing a bottleneck.
   • BThe ADC is performing TLS handshakes for every new connection, which is CPU-intensive.
   • CThe cipher suite is set to a weak algorithm like RC4.
   • DThe ADC is configured to use a TCP profile with a large buffer size.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A security audit requires that all TLS connections use Perfect Forward Secrecy (PFS). The administrator configures the SSL virtual server with a cipher group containing only ECDHE ciphers. After the change, a group of users with older Android devices cannot connect. The administrator needs to maintain PFS while restoring connectivity for these users. What is the best course of action?

   • AAdd DHE ciphers to the cipher group, as they also provide PFS.
   • BDisable PFS for the affected users by creating a separate virtual server.
   • CInstruct the users to update their devices.
   • DAdd RSA key exchange ciphers to the group.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   An administrator is troubleshooting an SSL offload issue where some users are getting a 'certificate mismatch' error. The SSL virtual server has a single certificate bound. The users are accessing the site via 'www.example.com'. The certificate is valid for 'example.com' and 'www.example.com'. What is the most likely cause of the error for some users?

   • AThe cipher suite is not supported by the client.
   • BThe users are accessing the site via an IP address instead of the hostname.
   • CThe certificate is expired.
   • DThe backend server is sending its own certificate.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   An administrator is setting up SSL offload for an internal application. The certificate is issued by an internal CA. The administrator uploads the certificate and key to the ADC and binds it to the SSL virtual server. When testing, the browser shows a warning that the certificate is not trusted. What is the most likely cause?

   • AThe certificate is not bound to the virtual server.
   • BThe certificate's private key is not uploaded.
   • CThe SSL protocol is set to TLS 1.0.
   • DThe root CA certificate is not installed in the client's trusted root store.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which Citrix ADC component must be configured with an SSL certificate to perform SSL offloading?

   • AThe load balancing virtual server
   • BThe content switching policy
   • CThe backend server's service
   • DThe network interface
   Reveal Solution Discussion Select an answer first