Describe SSL Session Processes CCA-APPDS-GATEWAY Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   When a Citrix Gateway terminates an SSL session, what does it do with the decrypted traffic?

   • AIt stores it in a log file for later analysis
   • BIt can apply access policies and then re-encrypt it to the backend server
   • CIt immediately re-encrypts it without any processing
   • DIt sends it to the client for verification
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A security auditor is reviewing the SSL configuration of a Citrix Gateway. The auditor notes that the gateway supports TLS 1.2 with cipher suites that use RSA key exchange. The auditor recommends disabling RSA key exchange to achieve forward secrecy. What is the impact of this change?

   • AClients that only support RSA key exchange will no longer be able to connect.
   • BThe gateway will use a slower key exchange method, increasing CPU usage.
   • CThe change will have no impact because RSA key exchange is rarely used.
   • DThe gateway will automatically fall back to TLS 1.3 for all connections.
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A Citrix Gateway is configured to offload SSL for a web application. The backend server uses a certificate from an internal CA. The gateway is configured to validate the backend certificate. The validation fails because the internal CA is not trusted by the gateway. What is the best solution?

   • ADisable certificate validation on the gateway for the backend connection.
   • BImport the internal CA certificate into the gateway's trust store.
   • CReplace the backend certificate with a public CA-signed certificate.
   • DConfigure the gateway to ignore the certificate chain and only check the expiration date.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A company deploys Citrix Gateway to provide remote access to internal web applications. The security team notices that the gateway terminates the client SSL connection and then initiates a new SSL connection to the backend web server. They are concerned about the security implications. Which statement accurately describes this behavior?

   • AThe gateway uses the same session keys for both connections to avoid re-negotiation.
   • BThe gateway passes the encrypted traffic through unchanged, so the backend server sees the original client certificate.
   • CThe gateway decrypts client traffic, inspects it, and re-encrypts it to the backend, which is standard SSL offload.
   • DThe gateway only performs a TCP handshake with the client and forwards the SSL handshake to the backend server.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Which parameter is used to uniquely identify an SSL session for resumption?

   • AThe session ID
   • BThe client's MAC address
   • CThe server's IP address
   • DThe cipher suite name
   Reveal Solution Discussion Select an answer first