nerdexam
Citrix

1Y0-401 · Question #9

Scenario: CGE's security officer states that, for compliance reasons, all network traffic between Delivery Controllers, StoreFront servers, and NetScalers must be encrypted. Why does using IPsec…

The correct answer is B. It encrypts ICA traffic from remote end users. IPsec can be used to encrypt ICA traffic from remote end users, thereby addressing a common security compliance requirement for securing user session data in a Citrix environment.

Design Operational Management and Security

Question

Scenario: CGE's security officer states that, for compliance reasons, all network traffic between Delivery Controllers, StoreFront servers, and NetScalers must be encrypted. Why does using IPsec meet CGE's compliance requirements?

Options

  • AIt encrypts internal network traffic.
  • BIt encrypts ICA traffic from remote end users.
  • CIt enables the SSL Relay service.
  • DIt complies with industry-standard SSL encryption requirements.

How the community answered

(42 responses)
  • A
    17% (7)
  • B
    71% (30)
  • C
    5% (2)
  • D
    7% (3)

Why each option

IPsec can be used to encrypt ICA traffic from remote end users, thereby addressing a common security compliance requirement for securing user session data in a Citrix environment.

AIt encrypts internal network traffic.

While IPsec can encrypt internal network traffic, choice B points to a specific and critical type of traffic (ICA from remote users) that IPsec can secure in a Citrix environment, which is often a key compliance focus.

BIt encrypts ICA traffic from remote end users.Correct

IPsec provides network layer encryption that can be configured to secure the ICA protocol traffic originating from remote client devices to the Virtual Delivery Agents (VDAs) within the Citrix environment. This end-to-end encryption of user session data helps meet compliance mandates for protecting sensitive information transmitted over the network.

CIt enables the SSL Relay service.

IPsec is a distinct network security protocol and does not enable or rely on the Citrix SSL Relay service.

DIt complies with industry-standard SSL encryption requirements.

IPsec is a different protocol suite (Internet Protocol Security) than SSL/TLS, and therefore does not inherently comply with SSL encryption requirements.

Concept tested: IPsec for ICA traffic encryption

Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/internet-protocol-security-ipsec

Topics

#IPsec#network encryption#ICA traffic#compliance

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 1Y0-401 Practice