Which feature provides secure access to a sensitive internal web server load-balanced by a Citrix ADC?

• A. Integrated caching
• B. ICA proxy
• C. Application Firewall
• D. AAA

Answer: (C)

When a sensitive internal web server is placed behind a Citrix ADC, the primary way to ensure the traffic reaching that server is safe is to inspect and filter the HTTP/HTTPS requests before they arrive at the server. The Application Firewall provides this layer of protection as a Web Application Firewall (WAF) integrated into the ADC. It applies security policies, detects and blocks common web attacks (like SQL injection and XSS), enforces rules for traffic patterns, and can limit or block abusive requests. This creates a secure barrier around the application, making it the best-fit feature for providing secure access to the internal web server.

Integrated caching is about performance, not protection. ICA proxy is for proxying Citrix virtual apps/desktops, not web server security. AAA focuses on authenticating and authorizing users, which is important, but the question emphasizes protecting the web application itself, which the Application Firewall is designed to do.