Describe SSL Session Processes CCA-APPDS-GATEWAY Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A Citrix Gateway administrator wants to reduce the latency of SSL handshakes for users who frequently reconnect. The gateway supports session resumption. Which mechanism requires the server to store session state?

   • ASession IDs
   • BTLS False Start
   • CSession tickets
   • DOCSP stapling
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A Citrix Gateway is configured to load balance SSL traffic to multiple backend web servers. The gateway presents its own certificate to clients. When a client connects, the gateway validates the backend server's certificate. Which validation step is the gateway responsible for?

   • AEnsuring the backend server's certificate is trusted by the client's browser.
   • BChecking that the backend server's certificate is not expired and chains to a trusted root.
   • CVerifying that the backend server's certificate matches the client's requested hostname.
   • DConfirming that the backend server's certificate is signed by the same CA as the gateway's certificate.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   During cipher suite negotiation, what does the client send to indicate its preferences?

   • AA list of supported cipher suites in order of preference
   • BThe cipher suite it has selected for the session
   • CIts public key for encryption
   • DA random number used only for key derivation
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A Citrix Gateway is configured to use session tickets for resumption. A user connects, disconnects, and reconnects within a few minutes. The gateway has multiple nodes behind a load balancer. What must be true for the session ticket to be accepted on the new connection?

   • AAll gateway nodes must share the same session ticket encryption key.
   • BThe gateway must store the session state in a shared database.
   • CThe client must present the same session ID that was used in the previous connection.
   • DThe user must connect to the same gateway node that issued the ticket.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A Citrix Gateway administrator is troubleshooting a client that fails to connect. The client's browser supports TLS 1.2 and TLS 1.3, but the gateway is configured to accept only TLS 1.2. During the handshake, the client sends a ClientHello with a list of cipher suites. What happens next?

   • AThe gateway selects the strongest cipher suite from the client's list and responds with ServerHello.
   • BThe gateway sends a list of its own cipher suites, and the client selects one.
   • CThe gateway uses the first cipher suite in the client's list without negotiation.
   • DThe gateway responds with a fatal alert because the client offered TLS 1.3 cipher suites.
   Reveal Solution Discussion Select an answer first