Configure SSL Offload Deployment CCA-APPDS-TRAFFIC-MANAGEMENT Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the purpose of binding an SSL policy to a Citrix ADC virtual server?

   • ATo apply the policy's SSL settings to that virtual server's traffic
   • BTo enable SSL offload on the virtual server
   • CTo associate the virtual server with a backend service
   • DTo install a certificate on the virtual server
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company is experiencing high CPU usage on their backend servers due to TLS encryption. They decide to implement SSL offload on Citrix ADC. After implementation, they notice that the ADC's CPU usage is high, but the backend CPU usage has decreased. What is the most likely reason for the ADC's high CPU usage?

   • AThe ADC is not offloading enough traffic.
   • BThe backend servers are still handling some TLS.
   • CThe ADC is performing TLS termination, which is CPU-intensive.
   • DThe SSL policy is misconfigured, causing extra processing.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A company has a Citrix ADC with SSL offload configured. The security team wants to block clients that present a revoked certificate. The administrator has enabled client authentication and bound a CA certificate. What additional configuration is required to check certificate revocation?

   • ACreate an SSL policy that blocks revoked certificates.
   • BEnable OCSP or CRL checking on the SSL virtual server.
   • CBind a second CA certificate to the virtual server.
   • DConfigure the backend servers to check revocation.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which file format is commonly used when installing an SSL certificate and its private key on a Citrix ADC?

   • APEM
   • BISO
   • CMSI
   • DDMG
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   An administrator has configured SSL offload and wants to monitor the number of TLS handshakes the Citrix ADC is handling per second. Which monitoring tool or command should the administrator use?

   • AUse the 'netstat' command on the backend servers.
   • BUse 'openssl s_client' in a loop.
   • CUse the 'ping' command to check ADC responsiveness.
   • DUse the Citrix ADC 'stat ssl' command to view SSL statistics.
   Reveal Solution Discussion Select an answer first