Configure SSL Offload CCA-APPDS-GATEWAY Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   An administrator is monitoring the SSL virtual server and notices that the 'SSL Handshake' counter is high, and the 'SSL Session Reuse' counter is low. The site has a large number of users who access the site frequently. What is the most likely cause of the low session reuse rate?

   • AThe ADC is configured to use TLS 1.3 only.
   • BThe clients are not sending session IDs or session tickets.
   • CThe certificate is being renegotiated frequently.
   • DThe backend servers are restarting frequently.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A Citrix ADC administrator is configuring SSL offload for a new application. The security team mandates that the cipher suite 'TLS1.2-ECDHE-RSA-AES128-GCM-SHA256' be used. The administrator creates a new cipher group and adds this cipher. However, when testing, the handshake fails. The client is a modern browser. What is the most likely cause?

   • AThe cipher is not supported by the ADC's hardware.
   • BThe client does not support ECDHE.
   • CThe certificate is not bound to the virtual server.
   • DThe cipher group is not bound to the SSL virtual server.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   An administrator needs to replace an expiring certificate on an SSL virtual server. The new certificate has been uploaded to the ADC. What is the correct procedure to apply the new certificate?

   • AOnly update the certificate on the backend servers.
   • BUnbind the old certificate, bind the new certificate to the SSL virtual server, and save the configuration.
   • CCreate a new SSL virtual server and migrate the traffic.
   • DDelete the old certificate and upload the new one with the same name.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the primary purpose of SSL offloading on a Citrix ADC?

   • ATo provide a secure tunnel between the client and the backend server without any decryption
   • BTo replace the need for SSL certificates on the backend servers
   • CTo shift the CPU-intensive work of SSL encryption/decryption from backend servers to the Citrix ADC
   • DTo encrypt traffic between the Citrix ADC and backend servers
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company is experiencing high CPU usage on its backend web servers. The servers are handling all HTTPS traffic directly. The company decides to deploy a Citrix ADC for SSL offloading. After the deployment, the ADC's CPU is high, but the backend servers' CPU usage has decreased. However, the overall response time for users has increased. What is the most likely reason for the increased response time?

   • AThe backend servers are now idle and slow to respond.
   • BThe ADC is a single point of failure and is now a bottleneck.
   • CThe network latency between the ADC and the backend has increased.
   • DThe cipher suite is too weak, causing the ADC to use more CPU.
   Reveal Solution Discussion Select an answer first