1Y0-401 · Question #10
CGE's security officer states that, for compliance reasons, all network traffic between Delivery Controllers, StoreFront servers, and NetScalers must be encrypted. Why does using SSL meet CGE's…
The correct answer is D. It encrypts network traffic between XenDesktop, StoreFront, and NetScaler. SSL/TLS is a widely used protocol for encrypting communication between various components in a Citrix environment, directly addressing the compliance requirement for internal server traffic.
Question
Options
- AIt eliminates the need to distribute an internal root certificate.
- BIt encrypts end-to-end traffic from remote end users.
- CIt enables the SSL Relay service.
- DIt encrypts network traffic between XenDesktop, StoreFront, and NetScaler.
How the community answered
(27 responses)- A4% (1)
- B4% (1)
- C7% (2)
- D85% (23)
Why each option
SSL/TLS is a widely used protocol for encrypting communication between various components in a Citrix environment, directly addressing the compliance requirement for internal server traffic.
SSL/TLS generally requires certificates, often from an internal or public Certificate Authority, for establishing trust, so it does not eliminate the need for certificate distribution.
While SSL/TLS is used for end-to-end encryption from remote end users (typically via NetScaler Gateway), this choice is less specific to the stated requirement of traffic between internal components compared to choice D.
SSL/TLS is a protocol, not a service enablement feature; it doesn't 'enable' the SSL Relay service but rather is a foundational technology for secure communication.
SSL/TLS (Secure Sockets Layer/Transport Layer Security) is a cryptographic protocol that secures communication over a computer network by encrypting data and verifying server identity. In a Citrix environment, SSL/TLS is commonly used to encrypt traffic between Delivery Controllers, StoreFront servers, and NetScaler Gateway, ensuring that sensitive configuration and authentication data remains confidential during transmission. This directly meets the stated compliance requirement for encrypting internal network traffic between these key infrastructure components.
Concept tested: SSL/TLS for internal Citrix component communication
Source: https://learn.microsoft.com/en-us/windows-server/security/tls/tls-ssl-protocol-overview
Topics
Community Discussion
No community discussion yet for this question.