Configure Citrix Gateway for Secure User Access CCP-V-CURRENT Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   A Citrix Gateway administrator wants to authenticate users against an existing Active Directory domain. Which authentication method should they configure in the authentication action?

   • ASAML
   • BClient certificate
   • CRADIUS
   • DLDAP
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which Citrix Gateway object binds an authorization policy to a specific user or group?

   • AAuthorization policy
   • BAuthorization action
   • CSession profile
   • DAuthentication policy
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A Citrix Gateway administrator is troubleshooting an issue where users cannot authenticate. The Gateway logs show 'Authentication failed' for the users. The administrator has verified that the LDAP server is reachable and the bind credentials are correct. What should the administrator check next?

   • AVerify that the Gateway's SSL certificate is trusted by the LDAP server.
   • BCheck if the users are in the correct Active Directory group.
   • CCheck if the StoreFront server is reachable from the Gateway.
   • DVerify that the LDAP server is using the correct port (389 or 636) and that the Gateway can communicate over that port.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   An organization is implementing MFA on Citrix Gateway. They currently use LDAP for primary authentication. They want to add a one-time password (OTP) sent via email as the second factor. The administrator has configured a RADIUS server that validates the OTP. What additional configuration is required on the Citrix Gateway to ensure the OTP is requested after the LDAP authentication succeeds?

   • ACreate a session policy that forces the user to re-authenticate with the OTP.
   • BEnable the 'Require MFA' checkbox on the Gateway's global settings.
   • CCreate a secondary authentication policy for RADIUS and link it to the LDAP policy.
   • DConfigure the LDAP policy to also validate the OTP by using the 'OTP' attribute in the directory.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A Citrix Gateway administrator is replacing the gateway's SSL certificate. The new certificate is a wildcard certificate for '*.contoso.com'. After installing the certificate and restarting the Gateway, users report that they receive a certificate warning when connecting to 'https://remote.contoso.com'. The certificate is valid and trusted by the client devices. What is the most likely cause of the warning?

   • AThe wildcard certificate does not cover the hostname 'remote.contoso.com'.
   • BThe client devices do not trust the root CA that issued the wildcard certificate.
   • CThe Gateway requires a SAN certificate instead of a wildcard certificate.
   • DThe certificate was not bound to the correct virtual server on the Gateway.
   Reveal Solution Discussion Select an answer first