Compliance Standards Flashcards

A healthcare organization delivers patient-record apps through Citrix Virtual Apps and Desktops. Which U.S. regulation primarily drives the need to encrypt ICA/HDX traffic carrying protected health information?

Answer: HIPAA

HIPAA's Security Rule requires safeguards such as transmission encryption for electronic protected health information.

Which Citrix feature records on-screen activity of user sessions so auditors can review what was done in sensitive applications?

Answer: Session Recording

Session Recording captures and plays back session activity for audit and compliance purposes.

An administrator must keep a record of every change made to Delivery Groups and Machine Catalogs. Which feature provides this?

Answer: Configuration Logging

Configuration Logging captures administrative configuration changes in the Site for auditing.

Which Configuration Logging setting prevents administrators from making Site changes when the logging database is unavailable?

Answer: Block changes while the database is unavailable

Enabling the block-changes option ensures no configuration change goes unaudited if logging fails.

Which payment-industry standard requires protection of cardholder data when call-center agents use virtual desktops?

Answer: PCI DSS

PCI DSS sets requirements for any environment that stores, processes, or transmits cardholder data.

To reduce PCI DSS scope, an administrator wants to stop users copying card numbers from a virtual app to their local device. Which policy should be configured?

Answer: Client clipboard redirection

Disabling or restricting clipboard redirection prevents data from being pasted to the endpoint.

Which App Protection capability helps compliance by blocking screen capture tools on the endpoint while a protected app is open?

Answer: Anti-screen capture

Anti-screen capture blanks protected windows when screenshot or sharing tools try to capture them.