Citrix DaaS on Citrix Cloud Certified flashcards
Citrix DaaS on Citrix Cloud Certified · Build recall with a focused review session.
30 cards. Read the term and the definition here. The deck at the top of this page is optional.
- VDA
- The delivery agent associated with a supported application or desktop host, participating in registration and the user-session delivery path under the actual architecture.
- Brokering
- Selecting and coordinating an appropriate resource connection under the configured identity, entitlement, machine-readiness and capacity conditions, distinct from the application’s execution itself.
- Machine catalog
- A managed collection of machines under compatible operating-system and provisioning settings, whose existence does not alone grant a user access to a published resource.
- Delivery group
- A configuration organizing machines and resources offered to the intended users under supported access settings, distinct from the underlying image-provisioning collection.
- Image version
- An identified source or deployed operating-system/application state used for provisioning or update, which should be traceable to actual test and promotion evidence.
- HDX
- Citrix technologies contributing to remote application and desktop user experience, with actual transport, device, graphics and policy behavior determined by version and configuration.
- Default printer policy
- A setting influencing which printer is selected as a session default under its supported rules, distinct from universally specifying printer creation order.
- Profile container
- A supported storage representation for relevant user state attached or otherwise presented under the selected profile solution, requiring actual identity, permission, locking and recovery behavior.
- Application layer
- A managed unit of application-related image content under a particular layering workflow, whose compatibility and delivery method depend on the supported platform and design.
- Resource location
- A placement context for relevant workloads and supporting components communicating with a cloud-managed service, with actual ownership and dependency responsibilities still needing definition.
- Cloud Connector
- A supported communication/proxy component in the documented resource-location-to-cloud arrangement, not a guarantee that every control function or session data path resides on it.
- Launch-stage evidence
- Correlated observations about identity, enumeration, brokering, readiness, connection and application preparation, used to distinguish causes rather than infer health from one successful step.
- Least Privilege
- The principle that users and systems should be granted only the minimum access rights necessary to perform their tasks, reducing the potential damage from accidents or malicious activity.
- Separation of Duties
- A control that divides critical tasks among different individuals so that no single person can complete a sensitive action alone, helping to prevent fraud and errors.
- Role-Based Access Control (RBAC)
- An access control model where permissions are assigned to roles rather than individual users, and users are assigned to roles based on their job responsibilities.
- Multi-Factor Authentication (MFA)
- An authentication method that requires two or more independent credentials from different categories (something you know, have, or are) to verify a user's identity.
- Authentication
- The process of verifying the identity of a user, device, or system, typically through credentials such as passwords, tokens, or biometrics.
- Authorization
- The process of determining what actions or resources an authenticated entity is permitted to access, often enforced through access control policies.
- Single Sign-On (SSO)
- A mechanism that allows a user to log in once and access multiple applications or systems without re-entering credentials, improving usability and centralizing access control.
- Encryption
- The process of converting plaintext into ciphertext using an algorithm and a key, so that only authorized parties can read the original information.
- Symmetric Encryption
- An encryption method that uses the same secret key for both encryption and decryption, offering speed but requiring secure key distribution.
- Asymmetric Encryption
- Encryption using a suitable public-key scheme and a corresponding private key for decryption. Authenticated key distribution and the specified padding/protocol remain essential; signatures and key agreement are distinct constructions.
- Hash Function
- A digest construction mapping input to an output under its defined algorithm, with cryptographic versions designed for appropriate resistance properties. Password storage needs a suitable salted password-hashing/KDF scheme rather than a bare fast digest.
- Digital Signature
- An electronic signature that uses asymmetric cryptography to verify the authenticity and integrity of a message or document.
- Access control
- The policies and mechanisms that determine who can access which systems, data, or facilities and under what conditions.
- Security Information and Event Management (SIEM)
- A system that collects, aggregates, and analyzes log data from various sources to detect security incidents and support compliance reporting.
- Incident Response
- A structured approach to handling security incidents, typically including preparation, detection, containment, eradication, recovery, and lessons learned.
- Business Continuity Plan (BCP)
- A document that outlines how an organization will continue critical operations during and after a disruption, including strategies for recovery and restoration.
- Disaster Recovery Plan (DRP)
- A plan focused on restoring IT infrastructure and operations after a disaster, including backup restoration and recovery time objectives.
- Backup
- The process of copying data to a secondary location or medium to enable recovery in case of data loss or corruption.