Scenario: A Citrix Administrator configured the "-denySSLReneg" Parametetr using the below command on Citrix ADC to enhance security. set ssl parameter -denySSLReneg <option> Which two options can…

The correct answer is A. NONSECURE C. FRONTEND_CLIENT. The -denySSLReneg parameter specifies the type of SSL renegotiation that the Citrix ADC denies. The possible options are: NONSECURE: Deny renegotiation requests from a client if the initial handshake between the Citrix ADC and the client is not secure. A secure handshake is one…

Citrix Gateway

Question

Scenario: A Citrix Administrator configured the “-denySSLReneg” Parametetr using the below command on Citrix ADC to enhance security. set ssl parameter –denySSLReneg <option> Which two options can the administrator use to complete the command? (Choose two.)

Options

ANONSECURE
BHIGHSECURE
CFRONTEND_CLIENT
DNO
EALL

How the community answered

(26 responses)

A
81% (21)
B
4% (1)
D
4% (1)
E
12% (3)

Explanation

The -denySSLReneg parameter specifies the type of SSL renegotiation that the Citrix ADC denies. The possible options are: NONSECURE: Deny renegotiation requests from a client if the initial handshake between the Citrix ADC and the client is not secure. A secure handshake is one in which both parties prove their identities to each other by presenting valid certificates. FRONTEND_CLIENT: Deny renegotiation requests from a client on a front-end SSL connection, regardless of whether the initial handshake is secure or not. A front-end SSL connection is one in which the Citrix ADC communicates with the client over SSL. ALL: Deny all renegotiation requests from a client on a front-end SSL connection and from a server on a back-end SSL connection. A back-end SSL connection is one in which the Citrix ADC communicates with the server over SSL. NO: Allow all renegotiation requests.

Topics

#SSL security#denySSLReneg#SSL renegotiation#ADC security

Community Discussion

No community discussion yet for this question.

Full 1Y0-204 Practice