Manage SSL Certificates CCA-APPDS-TRAFFIC-MANAGEMENT Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   A Citrix ADC administrator has received a certificate file from a CA in a format that is Base64-encoded and uses the .crt extension. Which certificate file format does this represent?

   • APKCS#7
   • BPFX
   • CPEM
   • DDER
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   When installing a certificate on a Citrix ADC, what is the purpose of linking the intermediate CA certificate?

   • ATo increase the key size of the server certificate
   • BTo encrypt the private key
   • CTo enable SSL offload on the vServer
   • DTo complete the certificate chain so clients can trust the server certificate
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A Citrix ADC administrator has installed a new server certificate on the ADC. The certificate was issued by an intermediate CA, which itself is signed by a root CA. The administrator wants to ensure that clients can validate the certificate chain when connecting to the vServer. What must the administrator do on the ADC?

   • ALink the intermediate CA certificate to the server certificate, and also link the root CA certificate if it is not already trusted by clients.
   • BBind the server certificate to the vServer without linking any CA certificates, because the ADC automatically sends the full chain.
   • CConvert the server certificate to PFX format and reinstall it, because linking is only supported for PFX certificates.
   • DOnly link the root CA certificate to the server certificate, because the intermediate is not needed for validation.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   An administrator wants to be alerted when any SSL certificate on the Citrix ADC is within 30 days of expiration. What is the best way to configure this?

   • ASet up a scheduled task on the ADC to check certificate expiry and send alerts.
   • BManually check the certificate expiry dates every week.
   • CConfigure SNMP traps or email alerts for certificate expiry events on the ADC.
   • DUse the ADC's certificate revocation list (CRL) to monitor expiry.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   An administrator has a Citrix ADC with multiple vServers. They need to enable HTTPS offload for a new vServer that will serve traffic for 'secure.example.com'. The certificate for this domain has already been installed. What is the next step?

   • ACreate a new HTTP vServer and change its port to 443.
   • BBind the certificate to an existing HTTP vServer.
   • CCreate an SSL vServer and bind the certificate to it.
   • DLink the certificate to the vServer's default certificate.
   Reveal Solution Discussion Select an answer first