What is one reason a Citrix Administrator should configure the AlwaysON VPN feature?

Management wants to regulate the network access provided to its users when they are connected to a VPN tunnel.

An employee needs to have client choices after logging on outside the enterprise network.

Management wants to regulate the network access provided to its users when they are connected to a VPN tunnel.

Management wants web traffic to go out locally instead of across the VPN.

An employee starts the laptop outside the enterprise network and needs assistance to establish VPN connectivity.

Scenario: A Citrix Administrator needs to configure an authentication workflow on Citrix ADC with the below requirements.All internal users must use their corporate credentials to authenticate.Users from partner organizations must be authenticated using their own directory services without replication or a synchronization process.How can the administrator meet the above requirements while authenticating the users?

Configure nFactor authentication with two LDAP advanced policies and one SAML advanced policy.

Deploy SAML on Citrix ADC in the service provider (SP) role for users from partner organizations.

Create two LDAP and two SAML authentication policies on the authentication, authorization, and auditing (AAA) virtual server.

Configure nFactor authentication with two LDAP advanced policies and one SAML advanced policy.

Configure two dedicated AAA virtual servers for internal and partner users.

A Citrix Administrator wants to configure independent and isolated access on a single appliance to allow three different departments to manage and isolate their own applications.What can the administrator configure to isolate department-level administration?

Admin partitions that use dedicated VLANs

Dedicated routes in the admin partitions for each department

Admin partitions that use dedicated VLANs

Policy-based routes for each department in the nsroot partition

A VIP in each partition, and bind a VLAN for the department

Which set of items can a Citrix Administrator change when configuring a portal theme for users?

Browser requirements, logo, labels

Logo, background, browser requirements

Font color, labels, URL displayed

Scenario: A Citrix Administrator manages an environment that has three SSL websites, all serving the same content.www.company.comwww.company.netwww.company.orgThe administrator would like to consolidate the websites into a single, load-balanced SSL virtual server.What can the administrator bind to use a single SSL virtual server?

A multiple SAN certificate to a single SSL virtual server

The certificate of each website to a single SSL virtual server

A wildcard certificate to a single SSL virtual server

A multiple SAN certificate to a single SSL virtual server

A wildcard certificate to a content-switching virtual server

Scenario: A Citrix Administrator configured Citrix ADC load balancing to send requests to one of three identical backend servers. Each server handles multiple protocols, and load balancing is set up in round-robin mode. The current loadbalancing setup on the Citrix ADC is:One load-balancing virtual server with one externally accessible VIPOne service created for each protocol typeOne server entity for each backend resourceDuring business hours, the administrator wants to make changes to one backend server without affecting the other serversWhat is the most efficient way for the administrator to ensure that all traffic is routed away from the server without impeding responses from other resources?

Unbind the correct server entity from the load-balancing virtual server.

Disable the backend server entity targeted for change.

Disable the load-balancing virtual server.

Disable the backend service entity targeted for change.

Unbind the correct server entity from the load-balancing virtual server.

Scenario: A Citrix Administrator configured the policies below:POLICY 1:add rewrite action ACT_1 corrupt_http_header Accept-Encodingadd rewrite policy POL_1 HTTP.REQ.IS_VALID ACT_1POLICY 2:add rewrite action ACT_2 insert_http_header Accept-Encoding “\”identity\””add rewrite policy POL_2 “HTTP.REQ.IS_VALID” ACT_2Which set of commands can the administrator use to bind the rewrite policies to the LB vserver lb_vsrv so that POL_2 is evaluated after POL_1 is evaluated successfully?

bind lb vserver lb_vsrv -policyName POL_1 -priority 110 -gotoPriorityExpression NEXT -type REQUEST bind lb vserver lb_vsrv -policyName POL_2 -priority 100 -gotoPriorityExpression END -type REQUEST B.bind lb vserver lb_vsrv -policyName POL_1 -priority 90 -type REQUEST bind lb vserver lb_vsrv -policyName POL_2 -priority 100 -type REQUEST

bind lb vserver lb_vsrv -policyName POL_1 -priority 90 -gotoPriorityExpression END -type REQUEST bind lb vserver lb_vsrv -policyName POL_2 -priority 80 -gotoPriorityExpression NEXT -type REQUEST D.bind lb vserver lb_vsrv -policyName POL_1 -priority 90 -gotoPriorityExpression NEXT -type REQUEST bind lb vserver lb_vsrv -policyName POL_2 -priority 100 -gotoPriorityExpression END -type REQUEST

Scenario: A Citrix Administrator needs to integrate LDAP for Citrix ADC system administration using current Active Directory (AD) groups. The administrator created the group on the Citrix ADC, exactly matching the group name in LDAP.What can the administrator bind to specify the permission level and complete the LDAP configuration?

Users to the group on the Citrix ADC

A nested group to the new group

An authentication, authorization, and auditing (AAA) action to the group

Scenario: A Citrix Administrator needs to test a SAML authentication deployment to be used by internal users while accessing several externally hosted applications. During testing, the administrator notices that after successfully accessing any partner application, subsequent applications seem to launch without any explicit authentication request.Which statement is true regarding the behavior described above?

It is expected due to SAML authentication successfully logging on to all internal applications.

It is expected if the Citrix ADC appliance is the common SAML identity provider (IdP) for all partners.

It is expected due to SAML authentication successfully logging on to all internal applications.

It is expected if all partner organizations use a common SAML service provider (SP).

It indicates the SAML authentication has failed and the next available protocol was used.

A Citrix Administrator needs to configure a Citrix ADC high availability (HA) pair with each Citrix ADC in a different subnet.What does the administrator need to do for HA to work in different subnets?

Turn on Independent Network Configuration (INC) mode

Turn on HA monitoring on all Interfaces

Which four steps should a Citrix Administrator take to configure SmartAccess?(Choose four.)

Execute “set-BrokerSite -TrustRequestsSentToTheXMLServicePort rue” on any Citrix Delivery Controller in the Site.

Ensure that the SmartAccess filter name on the Delivery Group matches the name of the Citrix Gateway virtual server.

Ensure that ICA Only is unchecked on the Citrix Gateway virtual server.

Ensure that the Callback URL is defined in the Citrix Gateway configuration within Store Front.

Execute “set-BrokerSite -TrustRequestsSentToTheXMLServicePort rue” on any Citrix Delivery Controller in the Site.

Enable Citrix Workspace control within StoreFront.

Ensure that the SmartAccess filter name on the Delivery Group matches the name of the Citrix Gateway virtual server.

Ensure that the SmartAccess filter name on the Delivery Group matches the name of the Citrix Gateway policy.

Ensure that ICA Only is unchecked on the Citrix Gateway virtual server.

Ensure that the Callback URL is defined in the Citrix Gateway configuration within Store Front.

Ensure that ICA Only is checked on the Citrix Gateway virtual server.

Which three Citrix Gateway elements can be configured by the Citrix Gateway Wizard? (Choose three.)

The Citrix Gateway primary virtual server

The bind SSL server certificate for the Citrix Gateway virtual server

The primary and optional secondary authentications

The rewrite policy for HTTP to HTTPS redirect

The responder policy for HTTP to HTTPS redirect

The Citrix Gateway primary virtual server

The bind SSL server certificate for the Citrix Gateway virtual server

The primary and optional secondary authentications

Scenario: A Citrix Administrator configures an access control list (ACL) to block traffic from the IP address 10.102.29.5: add simpleacl rule1 DENY -srcIP 10.102.29.5A week later, the administrator discovers that the ACL is no longer present on the Citrix ADC.What could be the reason for this?

The administrator did NOT run the apply ACL command.

The simple ACLs remain active for only 600 seconds.

The simple ACLs remain active for only 60 seconds.

The Citrix ADC has been restarted without saving the configurations.

A Citrix Network Engineer informs a Citrix Administrator that a data interface used by Citrix ADC SDX is being saturated.Which action could the administrator take to address this bandwidth concern?

Configure LACP on the SDX for the data interface.

Add a second interface to each Citrix ADC VPX instance.

Configure LACP on the SDX for management interface.

Configure LACP on the SDX for the data interface.

Configure a failover interface set on each Citrix ADC VPX instance.

Scenario: Users are attempting to logon through Citrix Gateway. They successfully pass the Endpoint Analysis (EPA) scan, but are NOT able to see the client choices at logon.What can a Citrix Administrator disable to allow users to see the client choices at logon?

Client choices globallyC. Split tunneling

Scenario: To meet the security requirements of the organization, a Citrix Administrator needs to configure a Citrix Gateway virtual server with time-outs for user sessions triggered by the behaviors below:Inactivity for at least 15 minutes.No keyboard or mouse activity for at least 15 minutesWhich set of time-out settings can the administrator configure to meet the requirements?

Session time-out and client idle time-out set to 15

Session time-out and forced time-out set to 15

Client idle time-out and forced time-out set to 15

Client idle time-out and forced time-out set to 900

A Citrix Administrator needs to configure a Citrix Gateway virtual IP to allow incoming connections initiated exclusively from web browser sessions.Which advanced policy will accomplish this?

REQ.HTTP.HEADER User-Agent NOTCONTAINS CitrixReceiver

REQ.HTTP.HEADER User-Agent CONTAINS Chrome/78.0.3904.108 Safari/537.36

HTTP.REQ.HEADER(“User-Agent”).CONTAINS(“Mozilla”)

HTTP.REQ.HEADER(“User-Agent”).CONTAINS(“CitrixReceiver”)

Scenario: A Citrix Administrator currently manages a Citrix ADC environment for a growing retail company that may soon double its business volume. A Citrix ADC MPX 5901 is currently handling web and SSL transactions, but is close to full capacity. Due to the forecasted growth, the administrator needs to find a cost-effective solution.Which cost-effective recommendation can the administrator provide to management to handle the growth?

A license upgrade to a Citrix ADC MPX 5905

The addition of another MPX 5901 appliance

A hardware upgrade to a Citrix ADC MPX 8905

A hardware upgrade to a Citrix ADC SDX 15020

Which two features can a Citrix Administrator use to allow secure external access to a sensitive company web server that is load-balanced by the Citrix ADC? (Choose two.)

Authentication, authorization, and auditing (AAA)

Scenario: A Citrix ADC MPX is using one of four available 10G ports. A Citrix Administrator discovers a traffic bottleneck at the Citrix ADC.What can the administrator do to increase bandwidth on the Citrix ADC?

Add two more 10G Citrix ADC ports to the network and configure VLAN.

Add another 10G Citrix ADC port to the switch, and configure link aggregation control protocol (LACP).

Purchase another Citrix ADC MPX appliance.

Plug another 10G Citrix ADC port into the router.

Citrix 1Y0-231 Practice Test 1 - Free Online Exam Prep & Questions

Scenario: A Citrix Administrator needs to create local, limited-privilege user accounts for other administrators. The other administrators will require only:

The ability to enable and disable services and servers Read- only access

Which built-in command policy permission level can the administrator use?

Read-only

Operator

Sysadmin

Network

Comment (0)

Citrix 1Y0-231 Practice Test 1

Question

Citrix 1Y0-231 Practice Tests

Practice Tests