CCA Security Fundamentals 5 — Questions and Answers
Question 1: Domain users on domain-joined Windows endpoints should be signed in to StoreFront automatically with their Windows logon credentials. Which authentication method should be enabled?
- Smart card
- HTTP Basic
- Domain pass-through (Correct answer)
- SAML only
Correct answer: Domain pass-through
Domain pass-through sends the user's existing Windows credentials from Citrix Workspace app to StoreFront for automatic logon.
Question 2: For domain pass-through to StoreFront to work, which part must be installed and enabled on the Windows endpoint?
- The Citrix Workspace app single sign-on (SSON) component (Correct answer)
- The Citrix Federated Authentication Service
- The VDA on the endpoint
- The Citrix Gateway plug-in in full VPN mode
Correct answer: The Citrix Workspace app single sign-on (SSON) component
The SSON component of Citrix Workspace app captures the Windows logon credentials and passes them to StoreFront and the VDA.
Question 3: Which Citrix component records the screen activity of user sessions for auditing, compliance, and troubleshooting?
- Configuration Logging
- Session Recording (Correct answer)
- Citrix Monitor Service
- Profile Management
Correct answer: Session Recording
Session Recording captures what happens in a user session so it can be played back later for compliance and investigations.
Question 4: Before giving a remote user access, Citrix Gateway checks whether the client device has current antivirus software and a supported operating system. What is this feature called?
- Endpoint Analysis (EPA) (Correct answer)
- Session Reliability
- Secure Ticket Authority
- Load Balancing
Correct answer: Endpoint Analysis (EPA)
Endpoint Analysis scans the client device against Gateway expressions before or after authentication to decide what access to allow.
Question 5: An auditor asks who changed a Delivery Group's settings in Citrix Studio last week. Which feature records administrator changes made in the site?
- Session Recording
- Configuration Logging (Correct answer)
- Citrix Analytics for Performance
- Event Viewer on the VDA
Correct answer: Configuration Logging
Configuration Logging writes administrative changes and the administrators who made them to a logging database for auditing.
Question 6: Which Citrix Gateway access mode lets users reach web applications and published resources in a browser without installing the full VPN plug-in?
- Full VPN tunnel
- Clientless access (Correct answer)
- Always On VPN
- Split DNS mode
Correct answer: Clientless access
Clientless access rewrites and proxies web content through Gateway, so users only need a browser instead of the VPN client.
Question 7: Users who authenticate to their virtual desktop with smart cards report that the card is not detected inside the session. Which Citrix policy setting should the administrator check first?
- Client clipboard redirection
- Smart card redirection (Correct answer)
- Client printer redirection
- Session watermark
Correct answer: Smart card redirection
Smart card redirection must be allowed so the local smart card reader and card can be used inside the HDX session.
CCA Security Fundamentals 5
Domain users on domain-joined Windows endpoints should be signed in to StoreFront automatically with their Windows logon credentials.
Which authentication method should be enabled?