Citrix CCP-V key terms

The delivery agent associated with a supported application or desktop host, participating in registration and the user-session delivery path under the actual architecture.

Selecting and coordinating an appropriate resource connection under the configured identity, entitlement, machine-readiness and capacity conditions, distinct from the application’s execution itself.

A managed collection of machines under compatible operating-system and provisioning settings, whose existence does not alone grant a user access to a published resource.

A configuration organizing machines and resources offered to the intended users under supported access settings, distinct from the underlying image-provisioning collection.

An identified source or deployed operating-system/application state used for provisioning or update, which should be traceable to actual test and promotion evidence.

Citrix technologies contributing to remote application and desktop user experience, with actual transport, device, graphics and policy behavior determined by version and configuration.

A setting influencing which printer is selected as a session default under its supported rules, distinct from universally specifying printer creation order.

A supported storage representation for relevant user state attached or otherwise presented under the selected profile solution, requiring actual identity, permission, locking and recovery behavior.

A managed unit of application-related image content under a particular layering workflow, whose compatibility and delivery method depend on the supported platform and design.

A placement context for relevant workloads and supporting components communicating with a cloud-managed service, with actual ownership and dependency responsibilities still needing definition.

A supported communication/proxy component in the documented resource-location-to-cloud arrangement, not a guarantee that every control function or session data path resides on it.

Correlated observations about identity, enumeration, brokering, readiness, connection and application preparation, used to distinguish causes rather than infer health from one successful step.

The principle that users and systems should be granted only the minimum access rights necessary to perform their tasks, reducing the potential damage from accidents or malicious activity.

A control that divides critical tasks among different individuals so that no single person can complete a sensitive action alone, helping to prevent fraud and errors.

An access control model where permissions are assigned to roles rather than individual users, and users are assigned to roles based on their job responsibilities.

An authentication method that requires two or more independent credentials from different categories (something you know, have, or are) to verify a user's identity.

The process of verifying the identity of a user, device, or system, typically through credentials such as passwords, tokens, or biometrics.

The process of determining what actions or resources an authenticated entity is permitted to access, often enforced through access control policies.

A mechanism that allows a user to log in once and access multiple applications or systems without re-entering credentials, improving usability and centralizing access control.

The process of converting plaintext into ciphertext using an algorithm and a key, so that only authorized parties can read the original information.

An encryption method that uses the same secret key for both encryption and decryption, offering speed but requiring secure key distribution.

Encryption using a suitable public-key scheme and a corresponding private key for decryption. Authenticated key distribution and the specified padding/protocol remain essential; signatures and key agreement are distinct constructions.

A digest construction mapping input to an output under its defined algorithm, with cryptographic versions designed for appropriate resistance properties. Password storage needs a suitable salted password-hashing/KDF scheme rather than a bare fast digest.

An electronic signature that uses asymmetric cryptography to verify the authenticity and integrity of a message or document.

The policies and mechanisms that determine who can access which systems, data, or facilities and under what conditions.

A system that collects, aggregates, and analyzes log data from various sources to detect security incidents and support compliance reporting.

A structured approach to handling security incidents, typically including preparation, detection, containment, eradication, recovery, and lessons learned.

A document that outlines how an organization will continue critical operations during and after a disruption, including strategies for recovery and restoration.

A plan focused on restoring IT infrastructure and operations after a disaster, including backup restoration and recovery time objectives.

The process of copying data to a secondary location or medium to enable recovery in case of data loss or corruption.