Configure TLS for Secure Communications CCP-V-CURRENT Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   In StoreFront, what is the purpose of configuring the 'Base URL' with an HTTPS address?

   • ATo enable Single Sign-On (SSO)
   • BTo ensure that all communications with clients use TLS
   • CTo configure the certificate for StoreFront
   • DTo enable load balancing of StoreFront servers
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A security administrator is explaining to management why TLS is necessary for Citrix Gateway communications. Management asks what would happen if TLS were not used. What is the most accurate explanation?

   • AThe Gateway would be vulnerable to denial-of-service attacks.
   • BUser credentials and session data would be sent in plaintext and could be intercepted by attackers on the network.
   • CThe Gateway would not be able to route traffic to internal resources.
   • DThe Gateway would not be able to authenticate users.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A Citrix environment has two Delivery Controllers. The administrator needs to secure communication between the Delivery Controllers and VDAs using TLS. The certificates are issued by an internal CA. What is the minimum configuration required on the Delivery Controllers to enable TLS for VDA communication?

   • AInstall the same certificate on both Delivery Controllers and configure the VDA to use that exact certificate for validation.
   • BInstall the CA-signed certificate on each Delivery Controller and configure the VDA to trust the internal CA root.
   • CEnable TLS on the Delivery Controller's IIS site and bind the certificate to the default website.
   • DConfigure the Delivery Controller to use TLS 1.3 and disable all older protocols.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A Citrix administrator is deploying a new certificate to a StoreFront server. The certificate was issued by an internal CA. After installing the certificate in the personal store, the administrator notices that the certificate shows 'The issuer of this certificate could not be found.' What is the most likely cause?

   • AThe certificate has expired.
   • BThe certificate is in PFX format and needs to be converted to PEM.
   • CThe certificate's private key is not accessible to the IIS application pool.
   • DThe intermediate CA certificate is not installed on the server.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   What is the purpose of a Certificate Revocation List (CRL)?

   • ATo list all certificates issued by a CA
   • BTo provide a backup of certificates
   • CTo store private keys for certificate renewal
   • DTo list certificates that have been revoked before their expiration date
   Reveal Solution Discussion Select an answer first