Configure SSL Offload CCA-APPDS-GATEWAY Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   When configuring SSL offload on a Citrix ADC, what is the typical protocol used between the ADC and the backend servers?

   • ATCP
   • BFTP
   • CHTTP
   • DHTTPS
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   An administrator created a new SSL virtual server for a public-facing website. The certificate has been uploaded to the ADC. However, clients receive a certificate error. The certificate is valid for the domain 'www.example.com', and the virtual server's IP is reachable. What is the most likely cause of the error?

   • AThe certificate is not bound to the SSL virtual server.
   • BThe SSL protocol version is set to TLS 1.0 only.
   • CThe backend servers are not configured with the same certificate.
   • DThe certificate's private key is encrypted with a password.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   An administrator notices that SSL handshake failures are increasing on the Citrix ADC. The ADC is configured for SSL offload. The administrator checks the logs and sees 'no shared cipher' errors for some clients. The cipher group bound to the vServer includes only 'TLS1.2-ECDHE-RSA-AES256-GCM-SHA384'. What is the most likely reason for the failures?

   • AThe certificate on the ADC is expired.
   • BThe SSL virtual server is bound to the wrong IP address.
   • CThe backend server is not responding.
   • DThe clients are using an outdated browser or operating system that does not support ECDHE or AES-GCM.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which command is used to bind an SSL certificate to a Citrix ADC virtual server?

   • Aset ssl vserver <vserver-name> -certkeyName <certkey-name>
   • Badd ssl certkey <certkey-name> -cert <cert-file> -key <key-file>
   • Clink ssl certkey <certkey-name> to vserver <vserver-name>
   • Dbind ssl vserver <vserver-name> -certkeyName <certkey-name>
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company runs a legacy web application that only supports HTTP/1.1 and cannot handle TLS termination. The security team requires all client traffic to be encrypted in transit. The Citrix ADC sits in front of the web servers. What is the most efficient way to meet the security requirement while minimizing changes to the backend?

   • ACreate an HTTP virtual server and enable the 'SSL Redirect' option to forward clients to a different HTTPS server.
   • BCreate an SSL virtual server on the ADC, bind the certificate, and configure the service to use HTTP on port 80.
   • CInstall the certificate on each web server and enable HTTPS directly on the backend.
   • DConfigure a TCP virtual server to pass through the encrypted traffic to the backend.
   Reveal Solution Discussion Select an answer first