Manage SSL Certificates CCA-APPDS-GATEWAY Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   An administrator configures Citrix ADC to validate client certificates using OCSP. What does the appliance do when a client presents a certificate?

   • AIt checks the certificate's expiration date only
   • BIt verifies the certificate's signature using the CA's public key
   • CIt downloads a full list of revoked certificates from the CA
   • DIt sends a query to the OCSP responder to check the certificate's current revocation status
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A Citrix ADC administrator is configuring certificate revocation checking for an HTTPS vServer. The CA provides a CRL that is updated daily. What should the administrator configure on the ADC to ensure clients can check revocation status?

   • ADisable certificate validation on the vServer.
   • BRebind the certificate to the vServer.
   • CUpload the CRL to the ADC and enable CRL checking on the vServer.
   • DConfigure an OCSP responder with the CRL as the source.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   An administrator wants Citrix ADC to check whether a client's certificate has been revoked. Which two methods can the appliance use to perform this validation?

   • ASSL and TLS
   • BCSR and PEM
   • CPFX and DER
   • DCRL and OCSP
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   An administrator needs to back up all SSL certificates and private keys from a Citrix ADC before performing a major upgrade. What is the recommended method to back up the certificates?

   • ATake a snapshot of the ADC's virtual machine.
   • BExport each certificate and its private key from the ADC.
   • CCopy the certificate files from the /nsconfig/ssl directory.
   • DRe-issue the certificates from the CA after the upgrade.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   Users report that they receive a 'certificate mismatch' error when accessing an HTTPS site hosted on a Citrix ADC. The certificate is installed and bound to the vServer. What is the most likely cause of this error?

   • AThe certificate is bound to the wrong vServer.
   • BThe certificate's common name (CN) does not match the URL used by the clients.
   • CThe certificate chain is incomplete.
   • DThe private key is missing from the ADC.
   Reveal Solution Discussion Select an answer first