Describe SSL Session Processes CCA-APPDS-GATEWAY Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A Citrix Gateway administrator wants to enable session resumption for a group of users. The administrator is concerned about security and wants to ensure that session tickets are not reused indefinitely. What is the best practice?

   • ASet a short ticket lifetime and rotate the ticket encryption key regularly.
   • BUse a long ticket lifetime to reduce the frequency of full handshakes.
   • CDisable session resumption entirely to maximize security.
   • DUse session IDs instead of tickets because they are more secure.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is the role of the Citrix Gateway in an SSL session?

   • AIt stores all session tickets for the client
   • BIt terminates the SSL connection from the client and initiates a new SSL connection to the backend server
   • CIt generates the server's private key
   • DIt only forwards encrypted traffic without inspecting it
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A client attempts to connect to a Citrix Gateway. The gateway presents a certificate that is signed by an intermediate CA. The client does not have the intermediate CA in its trust store. What must happen for the client to validate the certificate chain?

   • AThe gateway must use a certificate signed directly by a root CA.
   • BThe client must ignore the intermediate CA and trust the server certificate directly.
   • CThe gateway must send the intermediate CA certificate along with its own certificate.
   • DThe client must download the intermediate CA from the internet.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which statement accurately describes the SSL/TLS handshake process?

   • AIt is a process that only occurs when the server requires client certificates
   • BIt is a single message sent from the client to the server to start encryption
   • CIt is a method to compress data before transmission
   • DIt is a negotiation that results in a shared secret and agreed encryption parameters
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A Citrix Gateway deployment has multiple nodes behind a load balancer. The administrator wants to enable SSL session resumption to improve performance. The gateway supports both session IDs and session tickets. Which approach is most effective in this multi-node environment?

   • AUse session tickets and configure all nodes to share the same ticket encryption key.
   • BUse session IDs and configure a shared session cache across all nodes.
   • CDisable session resumption to avoid complexity.
   • DUse session IDs and configure sticky sessions on the load balancer.
   Reveal Solution Discussion Select an answer first