nerdexam
Citrix

1Y0-401 · Question #11

Scenario: CGE's security officer states that, for compliance reasons, all network traffic between Delivery Controllers, StoreFront servers, and NetScalers must be encrypted. Why does using L2TP meet…

The correct answer is A. It encrypts internal ICA traffic. L2TP, typically when combined with IPsec, can encrypt internal ICA traffic within the Citrix environment, helping to secure communication between components or across internal networks.

Design Operational Management and Security

Question

Scenario: CGE's security officer states that, for compliance reasons, all network traffic between Delivery Controllers, StoreFront servers, and NetScalers must be encrypted. Why does using L2TP meet CGE's compliance requirements?

Options

  • AIt encrypts internal ICA traffic.
  • BIt encrypts ICA traffic from remote end users.
  • CIt enables the SSL Relay service.
  • DIt complies with industry-standard SSL encryption requirements.

How the community answered

(37 responses)
  • A
    84% (31)
  • B
    5% (2)
  • C
    8% (3)
  • D
    3% (1)

Why each option

L2TP, typically when combined with IPsec, can encrypt internal ICA traffic within the Citrix environment, helping to secure communication between components or across internal networks.

AIt encrypts internal ICA traffic.Correct

L2TP (Layer 2 Tunneling Protocol), typically combined with IPsec for encryption (L2TP/IPsec), establishes secure tunnels at Layer 2 of the OSI model. When implemented within an internal network, it can encapsulate and encrypt traffic, including ICA traffic between various internal Citrix components or from VDAs to other internal services, thus securing internal data transmissions. This addresses compliance needs for encrypting specific data flows within the internal infrastructure.

BIt encrypts ICA traffic from remote end users.

L2TP/IPsec is more commonly used for VPNs or internal network segmentation, not typically as the primary method for directly encrypting ICA traffic from external remote end users through a NetScaler Gateway.

CIt enables the SSL Relay service.

L2TP is a tunneling protocol and has no direct relationship to enabling the Citrix SSL Relay service.

DIt complies with industry-standard SSL encryption requirements.

L2TP/IPsec is a distinct tunneling and encryption protocol suite, and does not comply with SSL encryption requirements, as SSL/TLS operates at a different layer.

Concept tested: L2TP/IPsec for internal ICA traffic encryption

Source: https://learn.microsoft.com/en-us/windows-server/remote/remote-access/vpn/vpn-protocols

Topics

#L2TP#VPN#network encryption#ICA traffic

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 1Y0-401 Practice