Compliance Standards Flashcards

Which compliance requirement is directly supported by enabling HDX encryption through TLS/DTLS on the VDA?

Answer: Encryption of data in transit

TLS/DTLS on the VDA encrypts ICA traffic as it travels between client and VDA.

Which audit report type attests that a service provider's security controls operated effectively over a period of time?

Answer: SOC 2 Type II

A SOC 2 Type II report evaluates operating effectiveness of controls over a review period.

Which U.S. Department of Defense configuration guidance is often applied to harden Citrix components for compliance?

Answer: DISA STIGs

DISA Security Technical Implementation Guides define hardening requirements for DoD systems, including Citrix products.

Which Citrix ADC (NetScaler) model type is designed for environments that require FIPS 140-validated hardware key protection?

Answer: NetScaler MPX FIPS appliance

MPX FIPS appliances include a validated hardware security module to protect private keys.

A user idles in a session that displays confidential data. Which setting helps satisfy a compliance requirement to end inactive sessions?

Answer: Session idle timer

The session idle timer disconnects or ends sessions after a period of inactivity.

Which Workspace app setting prevents users from saving credentials locally, supporting authentication compliance rules?

Answer: Disabling remember-password options in the store/authentication configuration

Disabling credential caching ensures users must reauthenticate according to policy.

For data residency, a company must ensure Citrix Cloud control-plane data stays in a specific geography. What should be selected when onboarding?

Answer: The appropriate Citrix Cloud region (for example, EU)

Citrix Cloud regions such as US, EU, and Asia Pacific South determine where customer control-plane data is stored.