Configure Authentication, Authorization, and Auditing CCA-APPDS-TRAFFIC-MANAGEMENT Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which Citrix ADC component is responsible for actually contacting the external authentication server (such as LDAP or RADIUS) to validate user credentials?

   • AAuthentication policy
   • BAuthentication vserver
   • CAAA application
   • DAuthentication action
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   An organization wants to implement SSO for a web application that uses Kerberos authentication. The Citrix ADC will be the front-end. Users will authenticate to the ADC via LDAP. What must be configured on the ADC to enable Kerberos SSO to the backend?

   • AConfigure an authorization policy that allows Kerberos-authenticated users
   • BConfigure a Kerberos SSO action and bind it to the authentication policy or virtual server
   • CConfigure an LDAP SSO action and bind it to the authentication policy
   • DConfigure a rewrite policy to add Kerberos headers to the request
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company wants to use Citrix ADC to authenticate users against a RADIUS server for a VPN-like access to internal resources. The RADIUS server is already configured. What must be configured on the ADC to enable this?

   • AA local authentication action and policy, bound to the VPN virtual server
   • BAn LDAP authentication action and policy, bound to the VPN virtual server
   • CA RADIUS authentication action and a RADIUS authentication policy, bound to the VPN virtual server
   • DA SAML authentication action and policy, bound to the VPN virtual server
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   An organization is deploying Citrix ADC for SSO to multiple backend applications. Some applications require SAML, others require LDAP, and one requires RADIUS. The administrator wants to use a single authentication virtual server. What is the most appropriate approach?

   • AConfigure multiple authentication policies (SAML, LDAP, RADIUS) and bind them all to the same virtual server, using priority to control the order
   • BUse a single LDAP authentication policy and configure the backend applications to accept LDAP
   • CConfigure a single SAML authentication policy and use it for all applications
   • DCreate separate virtual servers for each authentication type
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   An administrator wants to allow only users from the 'sales' group to access a specific web application. Which Citrix ADC feature should be used to enforce this restriction?

   • ASSL policies
   • BAuditing policies
   • CAuthentication policies
   • DAuthorization policies
   Reveal Solution Discussion Select an answer first