Configure Authentication, Authorization, and Auditing CCA-APPDS-TRAFFIC-MANAGEMENT Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company wants to use Citrix ADC to provide SSO to a legacy web application that uses HTTP Basic authentication. Users will authenticate to the ADC using LDAP. The ADC needs to pass the user's credentials to the backend application. What must be configured on the ADC?

   • AAn audit policy that logs the credentials for the backend application
   • BAn authorization policy that allows all authenticated users to access the backend
   • CAn SSO action that uses the authenticated user's credentials and is bound to the authentication policy
   • DA rewrite policy to inject the user's password into the HTTP header
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A company has a compliance requirement to retain authentication logs for at least one year. The Citrix ADC is currently sending logs to a local syslog server that only retains data for 30 days. What should the administrator do to meet the retention requirement?

   • AConfigure the Citrix ADC to send audit logs to a remote syslog server that retains data for the required period
   • BConfigure an audit policy to log only successful authentications to reduce log volume
   • CEnable audit logging on the ADC and store logs locally on the ADC
   • DIncrease the local syslog server's retention period to one year
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A Citrix ADC administrator is troubleshooting an issue where users are unable to authenticate. The ADC is configured with an LDAP authentication policy. The administrator checks the audit logs and sees 'LDAP authentication failed' messages. What is the most likely cause of this issue?

   • AThe user's password is correct but the account is locked
   • BThe authorization policy is denying access
   • CThe LDAP server is unreachable or the bind credentials are incorrect
   • DThe audit policy is not configured correctly
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A security auditor requires that all successful and failed login attempts to a Citrix ADC-managed application be recorded for compliance. The ADC is currently configured with an LDAP authentication policy. What should the administrator configure to meet this requirement?

   • ACreate an authorization policy that denies all users and review the logs
   • BEnable 'Audit Logging' in the global ADC settings
   • CEnable auditing on the authentication virtual server and configure an audit policy to log authentication events
   • DConfigure the LDAP authentication action to write logs to the local syslog server
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   An organization uses Citrix ADC to publish internal web applications. They want to allow access to the 'HR Portal' application only for users who authenticate successfully AND are members of the 'HR-Employees' Active Directory group. The ADC has an LDAP authentication policy already configured and bound to the virtual server. What must be added to enforce the group membership requirement?

   • AConfigure an audit policy to log all access attempts and manually review them
   • BModify the existing LDAP authentication policy to include a group filter
   • CCreate an authorization policy with an expression checking 'AAA.USER.ATTRIBUTE("memberOf")' and bind it to the virtual server
   • DBind an additional LDAP authentication policy that checks group membership
   Reveal Solution Discussion Select an answer first