Citrix CCA-N study plan
Citrix CCA-N · Give each week a clear focus.
8 weeks · About 7 hours per week
Networking architecture and Citrix ADC platform fundamentals & Load balancing and traffic management
Diagram the Citrix ADC packet-processing path from NIC ingress through load balancing, persistence, and policy evaluation, labeling where each decision is made
Explain the roles of NSIP, SNIP, VIP, and MIP and predict which one sources traffic in three given scenarios
Configure a basic virtual server with a service group and two monitors on a lab ADC, then verify state changes in the GUI
Describe how the default load balancing methods (round robin, least connection, least response time, hash-based) choose a service for a given client request
Your checkpoint
A one-page architecture diagram plus a working lab virtual server with two healthy backends and a screenshot-equivalent configuration write-up
Load balancing and traffic management & Networking architecture and Citrix ADC platform fundamentals
Configure and test at least four load balancing methods, then document which method produced which distribution across three test runs
Build persistence configurations for source IP, cookie, and SSL session ID, and verify stickiness with repeated client requests
Tune monitor intervals, retries, and timeouts and observe how fail and success thresholds change service state
Write the CLI commands needed to create a virtual server, service group, and monitor from scratch without the GUI
Your checkpoint
A comparison table of load balancing methods and persistence types with observed test results and the CLI script used to build the configuration
Load balancing and traffic management & Networking topology, high availability, and deployment modes
Configure content switching to route requests to different virtual servers based on URL, host header, and policy expression
Implement a responder and rewrite policy that redirects HTTP to HTTPS and rewrites a response header
Explain the difference between one-arm, two-arm, and transparent deployment modes and select the correct mode for three given topologies
Trace how return traffic flows in each deployment mode and identify where asymmetric routing can break a connection
Your checkpoint
A working content-switching and policy configuration with a written justification of the chosen deployment mode for each of the three scenarios
Networking topology, high availability, and deployment modes & Monitoring, troubleshooting, and optimization
Build a high availability pair in the lab and verify synchronization of configuration and failover behavior
Explain the roles of primary and secondary nodes and how failover is triggered, including forced and graceful failover
Use the ADC dashboards and log files to identify the cause of a failed health check
Interpret nstrace or a packet capture to confirm that traffic reaches the virtual server and is forwarded to a service
Your checkpoint
A failover test report showing pre-failover state, the failover event, post-failover state, and the troubleshooting evidence used to diagnose one injected fault
SSL/TLS offloading and certificate management & Security, authentication, and authorization
Generate a certificate signing request, install a signed certificate and chain, and bind it to an SSL virtual server
Configure SSL profiles and explain how protocol versions, ciphers, and HSTS settings affect client connections
Explain how client authentication certificates and server certificates differ in an SSL offload deployment
Configure an authentication policy for local and LDAP users and verify authorization behavior for a protected resource
Your checkpoint
A working SSL offload virtual server with a valid certificate chain plus an authentication policy that admits one user and denies another, with configuration notes
Security, authentication, and authorization & SSL/TLS offloading and certificate management
Configure an authorization policy that restricts access by group membership and test allow and deny paths
Describe how AAA virtual servers, authentication policies, and session profiles work together
Apply certificate renewal and replacement steps to a running SSL virtual server without dropping service
Explain the security implications of SSL protocol downgrade and weak cipher selection and demonstrate a hardened profile
Your checkpoint
A security configuration write-up covering AAA flow, group-based authorization tests, and a before-and-after comparison of SSL profile hardening
Global Server Load Balancing (GSLB) & Networking topology, high availability, and deployment modes
Configure a GSLB site with local and remote services and verify DNS-based site selection
Explain how GSLB metrics, persistence, and backup virtual servers influence site selection decisions
Compare active-active and active-passive GSLB configurations and predict client behavior in each
Describe how GSLB interacts with the local load balancing tier and where DNS TTL affects failover speed
Your checkpoint
A GSLB lab configuration with a documented site-failover test showing DNS resolution before and after a site goes down
Monitoring, troubleshooting, and optimization & Load balancing and traffic management
Run a timed practice assessment across all seven domains and record the score by domain
Re-study the two lowest-scoring domains using targeted lab exercises rather than rereading notes
Build a troubleshooting checklist that maps common symptoms to likely causes in load balancing, SSL, and HA
Review every missed practice question and write the correct reasoning for each in your own words
Your checkpoint
A scored practice assessment with a per-domain breakdown and a prioritized remediation list for the final days before the exam
Milestones
Week 2: You can build a load balanced virtual server with monitors and persistence from the CLI alone and explain each choice you made
Week 4: You can induce and diagnose an HA failover and a failed health check using logs and packet capture
Week 6: You can deploy SSL offload with a valid chain and enforce group-based authorization without referring to notes
Week 8: Your timed practice score is at or above your target passing margin with no domain below 60 percent