CCA Citrix ADC & Gateway Configuration 2 — Questions and Answers
Question 1: What is the primary purpose of the Content Switching feature in Citrix ADC?
- Encrypting all network traffic end-to-end
- Routing client requests to different backend server pools based on URL, host header, or other content attributes (Correct answer)
- Monitoring application response time and alerting on SLA breaches
- Compressing HTTP responses to reduce bandwidth
Correct answer: Routing client requests to different backend server pools based on URL, host header, or other content attributes
Content Switching directs incoming requests to different load-balancing virtual servers (and their associated server pools) based on traffic attributes such as URL path, host header, or HTTP method.
Question 2: Which authentication protocol is most commonly integrated with Citrix Gateway to enable RADIUS-based multi-factor authentication?
- SNMP
- RADIUS (Correct answer)
- SMTP
- NetBIOS
Correct answer: RADIUS
RADIUS is the standard protocol used to integrate Citrix Gateway with MFA solutions such as RSA SecurID, Duo, and Google Authenticator, allowing a second authentication factor to be required.
Question 3: What does GSLB stand for in the context of Citrix ADC, and what is its primary use case?
- Global Server Load Balancing — distributing traffic across geographically dispersed data centers (Correct answer)
- Generic Subnet Load Bridging — bridging subnets for Layer 2 traffic
- Gateway Service Link Bridge — linking ADC instances within a cluster
- Global SSL Load Balancer — offloading SSL across multiple ADC nodes
Correct answer: Global Server Load Balancing — distributing traffic across geographically dispersed data centers
GSLB (Global Server Load Balancing) uses DNS-based load balancing to direct client requests to the most appropriate data center based on factors such as proximity, load, or health.
Question 4: In Citrix ADC, what distinguishes a Service Group from individual Services?
- Service Groups support more protocols than individual Services
- Service Groups allow members to be added or removed dynamically without modifying the virtual server binding (Correct answer)
- Service Groups provide higher SSL throughput than individual Services
- Service Groups enable content switching capabilities
Correct answer: Service Groups allow members to be added or removed dynamically without modifying the virtual server binding
Service Groups simplify management by allowing administrators to add, remove, or autoscale backend servers within the group without needing to rebind each Service individually to the virtual server.
Question 5: What is the function of a Session Policy and its associated Session Profile in Citrix Gateway?
- To bind SSL certificates to the Gateway virtual server
- To define per-user or per-group session parameters such as idle timeout, split tunneling, and client choices (Correct answer)
- To configure health monitoring intervals for backend Citrix servers
- To set load balancing algorithms for ICA traffic
Correct answer: To define per-user or per-group session parameters such as idle timeout, split tunneling, and client choices
Session Policies evaluate conditions (e.g., user group membership or client endpoint) and apply Session Profiles that define settings like idle timeout, split tunneling mode, and whether Citrix Workspace app or clientless access is used.
Question 6: Which Citrix ADC capability can rate-limit client connections or requests per second to help mitigate application-layer (Layer 7) DDoS attacks?
- AppFlow export to Citrix Analytics
- GSLB site persistence
- Rate Limiting (AppQoE or Surge Protection) (Correct answer)
- Content Switching vServer
Correct answer: Rate Limiting (AppQoE or Surge Protection)
Citrix ADC Rate Limiting and Surge Protection features allow administrators to cap the number of requests or connections from clients, throttling traffic spikes that could indicate a DDoS attack.
Question 7: Which Citrix ADC IP address type is used by the ADC to initiate connections to backend servers on subnets other than the management subnet?
- NetScaler IP (NSIP)
- Virtual IP (VIP)
- Subnet IP (SNIP) (Correct answer)
- Cluster IP (CLIP)
Correct answer: Subnet IP (SNIP)
The Subnet IP (SNIP) is the source IP the ADC uses when opening connections to backend servers, allowing communication across different network subnets.
CCA Citrix ADC & Gateway Configuration 2
What is the primary purpose of the Content Switching feature in Citrix ADC?