Apply Citrix Security Best Practices CCA-V-CURRENT Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which security principle ensures that administrators are granted only the permissions necessary to perform their job functions?

   • ASeparation of duties
   • BDefense in depth
   • CSingle sign-on
   • DLeast privilege
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the primary purpose of security hardening in a Citrix environment?

   • ATo increase the performance of virtual desktops by disabling security features
   • BTo simplify the user login process by removing authentication requirements
   • CTo reduce the attack surface by removing unnecessary services and applying secure configurations
   • DTo reduce the cost of licensing by removing unnecessary components
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A Citrix administrator is reviewing the security posture of their Virtual Apps and Desktops environment. They want to ensure that the environment complies with industry standards and that security hardening guidelines are applied. Which action should they take first?

   • AEnable multi-factor authentication for all administrators.
   • BImplement a third-party security scanning tool to identify vulnerabilities.
   • CImmediately disable all unused ports and services on the Delivery Controllers.
   • DReview the Citrix security hardening guidelines and apply the recommended settings to all components.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A Citrix administrator is setting up a new Citrix Gateway for external access. They want to ensure that all communication between the user's device and the gateway is encrypted, and that the gateway presents a trusted identity to users. What is the minimum configuration required on the Citrix Gateway?

   • AEnable TLS on the gateway virtual server without installing any certificate.
   • BInstall a self-signed certificate on the gateway and enable TLS for the gateway virtual server.
   • CInstall a server certificate issued by a public CA that matches the gateway's external FQDN, and enable TLS for the gateway virtual server.
   • DInstall a certificate from an internal CA that matches the internal FQDN of the gateway.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which protocol is used to encrypt communications between Citrix components and clients?

   • AICMP (Internet Control Message Protocol)
   • BFTP (File Transfer Protocol)
   • CSNMP (Simple Network Management Protocol)
   • DTLS (Transport Layer Security)
   Reveal Solution Discussion Select an answer first