Describe SSL Session Processes CCA-APPDS-GATEWAY Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   During an SSL/TLS handshake, what is the primary purpose of the exchange of messages between the client and server?

   • ATo verify the server's IP address against a public DNS record
   • BTo encrypt all application data before any communication begins
   • CTo establish a secure session by agreeing on parameters and generating shared keys
   • DTo authenticate the client to the server using a username and password
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A Citrix Gateway administrator notices that users connecting from mobile devices experience slower SSL handshakes on every new connection, even when they reconnect frequently. The gateway supports both session IDs and session tickets. What is the most likely reason session resumption is not working?

   • AThe gateway is using a different cipher suite for each connection, so the session cannot be resumed.
   • BThe clients are using a different TLS version than the gateway, preventing resumption.
   • CThe mobile clients are behind a NAT that changes their IP address, invalidating the session ID.
   • DThe gateway is configured to disable session resumption for security reasons.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which of the following is part of the SSL session state maintained by the server?

   • AThe client's username
   • BThe server's certificate chain
   • CThe master secret
   • DThe client's private key
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which component of a cipher suite determines how the session keys are exchanged?

   • AThe certificate authority that issued the certificate
   • BThe message authentication code (MAC) algorithm
   • CThe bulk encryption algorithm
   • DThe key exchange method
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A Citrix Gateway administrator is troubleshooting slow SSL handshakes for a group of users. The users are connecting from a remote site that uses a proxy server. The proxy server is configured to cache SSL sessions. Which statement best describes the impact of the proxy on session resumption?

   • AThe proxy can cache session IDs and reuse them, which may cause the gateway to resume sessions that the proxy has cached.
   • BThe proxy must be configured to support session tickets for resumption to work.
   • CThe proxy terminates the SSL connection and establishes a new one to the gateway, so session resumption is not possible.
   • DThe proxy forwards the ClientHello unchanged, so session resumption works normally.
   Reveal Solution Discussion Select an answer first