Configure SSL Offload Deployment CCA-APPDS-TRAFFIC-MANAGEMENT Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the purpose of installing an SSL certificate on a Citrix ADC for SSL offload?

   • ATo allow the ADC to present a trusted identity to clients and establish an encrypted session
   • BTo encrypt traffic between the ADC and the backend servers
   • CTo authenticate backend servers to the ADC
   • DTo replace the need for a firewall in the DMZ
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A company is using a wildcard certificate (*.example.com) for SSL offload. They now need to add a new subdomain (api.example.com) that requires a different certificate due to compliance. The administrator wants to use the same Citrix ADC virtual server for both. What is the best approach?

   • AUse a single certificate that covers both domains.
   • BCreate a separate virtual server for api.example.com.
   • CBind the new certificate to the virtual server and use SNI (Server Name Indication) to select the correct certificate.
   • DReplace the wildcard certificate with the new certificate.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which command-line tool can be used to verify that a Citrix ADC is correctly terminating SSL connections?

   • Aping
   • Bnslookup
   • Ctraceroute
   • Dopenssl s_client
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   An administrator needs to replace an expiring SSL certificate on a Citrix ADC. The new certificate has been issued by the same CA. What is the correct sequence of steps to replace the certificate without downtime?

   • AUpload the new certificate, link it to the existing key, and bind it to the virtual server.
   • BDelete the old certificate, upload the new one, and bind it.
   • CGenerate a new key, upload the certificate, and restart the ADC.
   • DBind the new certificate to a different virtual server and update DNS.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   An administrator has configured SSL offload on a Citrix ADC. Users report that some clients can connect, but others receive a 'handshake failure' error. The administrator checks the SSL virtual server and confirms the certificate is valid and bound. What is the most likely cause of the intermittent failure?

   • AThe certificate is bound to the wrong virtual server.
   • BThe SSL policy is configured to allow only specific TLS versions, and some clients use unsupported versions.
   • CThe backend servers are intermittently unavailable.
   • DThe ADC is overloaded and dropping packets.
   Reveal Solution Discussion Select an answer first