1Y0-401 · Question #8
Scenario: CGE's security officer states that, for compliance reasons, all network traffic between Delivery Controllers, StoreFront servers, and NetScalers must be encrypted. Why does using SecureICA…
The correct answer is D. It complies with industry-standard SSL encryption requirements. SecureICA meets compliance requirements for encrypted network traffic between Citrix components by ensuring the encryption it provides adheres to industry-standard SSL encryption protocols.
Question
Options
- AIt encrypts internal ICA traffic.
- BIt encrypts ICA traffic from remote end users.
- CIt enables the SSL Relay service.
- DIt complies with industry-standard SSL encryption requirements.
How the community answered
(39 responses)- A15% (6)
- B5% (2)
- C5% (2)
- D74% (29)
Why each option
SecureICA meets compliance requirements for encrypted network traffic between Citrix components by ensuring the encryption it provides adheres to industry-standard SSL encryption protocols.
While SecureICA encrypts internal ICA traffic, this statement is incomplete as the compliance requirement is for 'all network traffic' between specific infrastructure components, and the reason for meeting compliance is the standard of encryption.
Encrypting ICA traffic from remote end users is a function of SecureICA, but the scenario explicitly focuses on traffic between Delivery Controllers, StoreFront servers, and NetScalers, which are internal infrastructure components.
SecureICA is an encryption feature for ICA traffic; it does not enable or relate to the SSL Relay service directly.
SecureICA provides robust encryption for ICA traffic, and its adherence to industry-standard SSL encryption requirements ensures that the data in transit between relevant Citrix components, when configured for SecureICA, meets necessary security and compliance mandates.
Concept tested: SecureICA and compliance standards
Source: https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/manage/secure.html
Topics
Community Discussion
No community discussion yet for this question.