Mixed Deck — All CCA Topics Flashcards

An administrator wants users to authenticate with SAML through Citrix Gateway and then sign in to Windows VDAs without typing a password again. Which component makes this possible?

Answer: Federated Authentication Service (FAS)

FAS issues virtual smart card certificates for users so they can sign in to the VDA after non-password authentication methods such as SAML.

A change to a Delivery Group was made but no one knows who made it. Which feature records administrative changes in a Citrix site?

Answer: Configuration Logging

Configuration Logging records administrative changes made to the site, including who made them and when.

In Citrix Analytics for Performance, which factor is NOT part of the User Experience (UX) score?

Answer: Number of published applications in the site

The UX score uses logon duration, responsiveness, availability, and resiliency, not how many apps are published.

For Citrix Provisioning, which write cache option is generally recommended for best performance?

Answer: Cache in device RAM with overflow on hard disk

RAM cache with overflow to the local disk gives the best performance while avoiding RAM exhaustion.

What is the primary role of Citrix ADC (formerly NetScaler) in a Citrix Virtual Apps and Desktops deployment?

Answer: Application delivery controller providing load balancing, SSL offloading, and traffic management

Citrix ADC acts as an application delivery controller, optimizing and securing application traffic through load balancing, SSL offloading, and traffic management.

How should you document troubleshooting methods configurations?

Answer: Maintain up-to-date documentation in a centralized, accessible location

Centralized, accessible, and current documentation is essential for troubleshooting, disaster recovery, and knowledge sharing.

Which feature allows Delivery Controllers to keep brokering connections when the site database is unavailable?

Answer: Local Host Cache

Local Host Cache keeps a local copy of site data on each controller so brokering continues during a database outage.

Which PVS write cache option does Citrix generally recommend for the best performance?

Answer: Cache in device RAM with overflow on hard disk

RAM cache with overflow on hard disk cuts storage IOPS while avoiding crashes when the RAM cache fills up.

After you apply a fix for a recurring issue, what should a structured troubleshooting process include next?

Answer: Verify the fix resolved the issue and document it

Good methodology ends by verifying the resolution and documenting the cause and fix for future reference.

In a load management policy, what happens when the 'Maximum number of sessions' value is reached on a server?

Answer: The server reports full load and no new sessions are brokered to it

Reaching the maximum sessions value makes the server report full load, so the broker sends new sessions elsewhere.

Which Citrix policy setting controls whether users can copy and paste between their local device and the virtual session?

Answer: Client clipboard redirection

The 'Client clipboard redirection' policy controls whether the clipboard is shared between the client device and the virtual Citrix session.

Users in a branch office should automatically be detected as internal by Citrix Workspace app. Which StoreFront setting is used for this detection?

Answer: Internal beacon

Workspace app tries to reach the internal beacon, and if it can, it treats the device as being on the internal network.

Which object links a machine catalog to the users who get access to its desktops or applications?

Answer: Delivery Group

Delivery Groups take machines from catalogs and assign them to users and groups.

After changing WEM settings, an administrator wants agents to pick them up without waiting for the scheduled sync. What should they do?

Answer: Refresh the agent cache from the administration console

Refreshing agents from the console makes them get the latest configuration right away.

When users connect from outside through Citrix Gateway, which component issues and validates the Secure Ticket Authority ticket?

Answer: The Delivery Controller

The STA service runs on the Delivery Controller and issues tickets that Gateway validates before proxying ICA traffic.

An administrator needs to enable TLS encryption directly between Citrix Workspace app and a VDA without using Citrix Gateway. Which tool does Citrix provide to configure the VDA listener for this?

Answer: The Enable-VdaSSL.ps1 PowerShell script

Citrix provides the Enable-VdaSSL.ps1 script to bind a certificate and turn on the TLS listener on the VDA.

What is the recommended minimum TLS version for Citrix Gateway and StoreFront connections in a compliance-focused deployment?

Answer: TLS 1.2

SSL 3.0, TLS 1.0, and TLS 1.1 are deprecated, so TLS 1.2 or higher is required by most standards.

Which certificate requirement must be met for the server certificate bound to a Citrix Gateway virtual server?

Answer: Its common name or SAN must match the FQDN users connect to, and the ADC must have its private key

Clients check that the certificate name matches the Gateway FQDN, and the ADC needs the private key to complete the TLS handshake.

Which Citrix feature records on-screen activity of user sessions so auditors can review what was done in sensitive applications?

Answer: Session Recording

Session Recording captures and plays back session activity for audit and compliance purposes.

An administrator must keep a record of every change made to Delivery Groups and Machine Catalogs. Which feature provides this?

Answer: Configuration Logging

Configuration Logging captures administrative configuration changes in the Site for auditing.