Citrix Certified Professional - App Delivery and Security (CCP-AppDS) flashcards
Citrix Certified Professional - App Delivery and Security (CCP-AppDS) · Build recall with a focused review session.
30 cards. Read the term and the definition here. The deck at the top of this page is optional.
- Relaxation
- A scoped exception to a supported application-security check, requiring trusted justification, testing and ownership rather than automatic acceptance of observed traffic.
- WAF profile
- A configuration defining selected web-protection behavior under its product and version, linked to eligible traffic through the appropriate policy arrangement.
- Authentication profile
- A configuration association used in supported NetScaler access designs to connect a Gateway with relevant authentication virtual-server behavior and policies.
- Login schema
- A description of relevant authentication input presentation in the supported nFactor arrangement, which is not a requirement for every factor to display another prompt.
- Launch ticket
- A purpose-specific value participating in an application-launch authorization or validation workflow, distinct from a universal identity-authentication or single-sign-on mechanism.
- Service group
- A NetScaler object grouping relevant backend services under supported settings, distinct from the front-end virtual-server listener and each monitor’s observation.
- Content switching
- Selecting an application-delivery destination using evaluated request information under configured policies, followed by the destination’s own backend-selection behavior.
- Subnet IP
- An address that can support relevant appliance-to-server communication in the selected NetScaler routing and source-address model, not a universal per-backend-subnet requirement.
- Full proxy
- A traffic-processing arrangement with distinct client-side and server-side connection contexts, whose reuse and protocol behavior depend on the actual configuration.
- Persistence key
- The configured value used to associate later traffic with a destination, distinct from the application’s own stored user-session state.
- Application-aware monitor
- A controlled health check that tests relevant application behavior using defined requests and expected results, rather than only establishing a transport connection.
- Least Privilege
- The principle that users and systems should be granted only the minimum access rights necessary to perform their tasks, reducing the potential damage from accidents or malicious activity.
- Separation of Duties
- A control that divides critical tasks among different individuals so that no single person can complete a sensitive action alone, helping to prevent fraud and errors.
- Role-Based Access Control (RBAC)
- An access control model where permissions are assigned to roles rather than individual users, and users are assigned to roles based on their job responsibilities.
- Multi-Factor Authentication (MFA)
- An authentication method that requires two or more independent credentials from different categories (something you know, have, or are) to verify a user's identity.
- Authentication
- The process of verifying the identity of a user, device, or system, typically through credentials such as passwords, tokens, or biometrics.
- Authorization
- The process of determining what actions or resources an authenticated entity is permitted to access, often enforced through access control policies.
- Single Sign-On (SSO)
- A mechanism that allows a user to log in once and access multiple applications or systems without re-entering credentials, improving usability and centralizing access control.
- Encryption
- The process of converting plaintext into ciphertext using an algorithm and a key, so that only authorized parties can read the original information.
- Symmetric Encryption
- An encryption method that uses the same secret key for both encryption and decryption, offering speed but requiring secure key distribution.
- Asymmetric Encryption
- Encryption using a suitable public-key scheme and a corresponding private key for decryption. Authenticated key distribution and the specified padding/protocol remain essential; signatures and key agreement are distinct constructions.
- Hash Function
- A digest construction mapping input to an output under its defined algorithm, with cryptographic versions designed for appropriate resistance properties. Password storage needs a suitable salted password-hashing/KDF scheme rather than a bare fast digest.
- Digital Signature
- An electronic signature that uses asymmetric cryptography to verify the authenticity and integrity of a message or document.
- Access control
- The policies and mechanisms that determine who can access which systems, data, or facilities and under what conditions.
- Firewall
- A network security device or software that monitors and controls incoming and outgoing traffic based on predetermined security rules, acting as a barrier between trusted and untrusted networks.
- Intrusion Detection System (IDS)
- A system that monitors network or system activities for malicious actions or policy violations and generates alerts, but does not typically take active blocking measures.
- Intrusion Prevention System (IPS)
- A system that monitors network traffic for malicious activity and can actively block or prevent detected threats, unlike an IDS which only alerts.
- Network Segmentation
- The practice of dividing a computer network into smaller subnetworks or segments to improve security, limit lateral movement, and contain breaches.
- Virtual Private Network (VPN)
- A technology that creates a secure, encrypted connection over an untrusted network, allowing remote users or sites to communicate as if on a private network.
- Security Information and Event Management (SIEM)
- A system that collects, aggregates, and analyzes log data from various sources to detect security incidents and support compliance reporting.