After being audited, a Citrix Administrator learns that additional security enhancements should be made to one of the virtual servers. Which two actions can the administrator perform to accomplish…

Question

Options

• AEnable the TLSv1.2.
• BEnable the RC4 cipher suite.
• CCreate a SHA1 key.
• DDisable the SSLv3.

• A
  74% (34)
• B
  9% (4)
• D
  17% (8)

Explanation

Note: The stated correct answer (A, C) appears to contain an error in the answer key. A and D are the defensible security enhancements based on current security standards - here's why:

Why A is correct: Enabling TLSv1.2 is a legitimate security enhancement. TLS 1.2 uses stronger cipher suites and hashing algorithms than older protocols, making it the appropriate choice for securing a Citrix virtual server.

Why D is also correct (and likely the intended second answer): Disabling SSLv3 removes a protocol known to be vulnerable to the POODLE attack (CVE-2014-3566). Disabling deprecated, insecure protocols is a core security hardening step.

Why B is wrong: RC4 is a broken stream cipher with well-documented vulnerabilities. Enabling it would weaken security, not enhance it.

Why C is problematic: SHA1 is a deprecated hashing algorithm that has been cryptographically broken since 2017. Creating a SHA1 key would actually reduce security - modern practice requires SHA256 or stronger. If your exam key marks C as correct, treat it with skepticism or check the source material version date.

Memory tip: Think "modern in, legacy out" - security hardening means enabling strong protocols (TLS 1.2+) and disabling weak ones (SSLv3, RC4, SHA1). If an option enables something old or broken, it's a distractor.

No community discussion yet for this question.