Which two features can a Citrix Administrator use to allow secure external access to a sensitive company web server that is load-balanced by the Citrix ADC? (Choose two.)

Question

Options

• AAuthentication, authorization, and auditing (AAA)
• BCitrix Web App Firewall
• CICA proxy
• DAppFlow
• EIntegrated caching

• A
  77% (34)
• C
  2% (1)
• D
  14% (6)
• E
  7% (3)

Explanation

AAA (A) provides authentication, authorization, and auditing controls - ensuring only verified, authorized users can access the sensitive web server from outside the network. Citrix Web App Firewall (B) protects the web server from application-layer attacks like SQL injection and XSS, making it essential for securing a sensitive web application exposed externally. Together, they address the two pillars of secure external access: who can get in and what attacks are blocked.

Why the distractors are wrong:

• C (ICA proxy) is for proxying Citrix Virtual Apps/Desktops (ICA protocol) traffic - it's not relevant to web server access.
• D (AppFlow) is a monitoring/analytics feature that exports traffic data to reporting tools; it provides visibility, not security.
• E (Integrated caching) improves performance by caching web content; it has no security function.

Memory tip: Think "Guard the gate, guard the app" - AAA guards who enters (authentication/authorization), and Web App Firewall guards what enters (malicious requests). Both are active defenses; the other options are for routing, monitoring, or performance, not security.

No community discussion yet for this question.