Describe NetScaler Gateway Features and Architecture CCA-APPDS-GATEWAY Practice Questions (Page 3)

Questions 11–15

1. 11expert · medium

   A company is deploying NetScaler Gateway to provide remote access. The security team is concerned about web-based attacks targeting the Gateway itself. They want to enable protection against SQL injection and cross-site scripting (XSS) attacks on the Gateway's login page. Which feature should be enabled?

   • AThe Web Application Firewall (WAF) with a default or custom signature policy.
   • BAn SSL/TLS policy that requires the use of TLS 1.2 or higher.
   • CAn authentication policy that requires a complex password and MFA.
   • DAn access policy that restricts the login page to specific source IP addresses.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   An administrator is troubleshooting an issue where users can authenticate to NetScaler Gateway successfully, but they are immediately disconnected after login. The session policy is configured to allow all traffic. What is the most likely cause of this issue?

   • AThe SSL certificate on the Gateway is expired.
   • BThe user's account is locked out in Active Directory.
   • CThe session policy is not bound to the Gateway virtual server.
   • DThe authentication policy is configured with the wrong LDAP server IP address.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   An organization is migrating from Citrix Receiver to Citrix Workspace. Users currently access their desktops through a NetScaler Gateway. The administrator wants to ensure that the new Workspace app can seamlessly connect through the Gateway without requiring users to manually enter the Gateway address on each device. What should the administrator configure?

   • AA DNS SRV record for _citrix._tcp that points to the Gateway's FQDN.
   • BA load-balancing virtual server on the Gateway for the Workspace app traffic.
   • CA session policy on the Gateway that allows all traffic from the Workspace app.
   • DAn authentication policy that uses the user's email address as the login.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   An administrator needs to configure NetScaler Gateway so that users in the 'Sales' group are granted access to the CRM application, while users in the 'Finance' group are granted access to the accounting application. All users authenticate with Active Directory. What is the most efficient way to configure this on the Gateway?

   • ACreate a single session policy that grants access to both applications and rely on the backend applications to enforce user permissions.
   • BConfigure the authentication policy to assign a different session type based on the user's password.
   • CCreate two separate Gateway virtual servers, one for each user group, and configure different authentication policies on each.
   • DCreate two session policies, one for each application, and bind them to the Gateway virtual server with expressions that check the user's group membership.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   In NetScaler Gateway architecture, which process is responsible for verifying the identity of a user attempting to access the network?

   • AAuthentication
   • BAuditing
   • CAuthorization
   • DLoad balancing
   Reveal Solution Discussion Select an answer first