Compliance Standards Flashcards

Which U.S. government program authorizes cloud services, such as Citrix DaaS for government, for use by federal agencies?

Answer: FedRAMP

FedRAMP standardizes security assessment and authorization of cloud products for federal agencies.

Where should Session Recording files be stored to support compliance retention requirements?

Answer: A secured, access-controlled storage location with defined retention

Recordings contain sensitive data and must be protected and retained according to policy.

Which Session Recording capability helps detect that a recording file was tampered with after capture?

Answer: Digital signing of recordings

Digitally signing recordings with a certificate allows the player to verify integrity.

Which component lets administrators define rules so that only certain users, apps, or groups are recorded, supporting privacy requirements?

Answer: Session Recording policies

Session Recording policies control who and what is recorded, limiting capture to what compliance requires.

A privacy regulation requires users to be informed before their session is recorded. Which Session Recording setting addresses this?

Answer: Recording notification message

Session Recording can display a notification so users know their sessions are recorded.

Which practice best supports a least-privilege compliance requirement for Citrix site administration?

Answer: Delegated administration with custom roles and scopes

Delegated administration limits each admin to the specific permissions and objects they need.

Which Citrix cloud service uses user behavior analytics to detect risky actions such as unusual logons or excessive file downloads for security compliance?

Answer: Citrix Analytics for Security

Citrix Analytics for Security builds risk scores from user behavior and can trigger automated actions.