Scenario: A Citrix Administrator manages an environment that has a Citrix ADC high availability (HA) pair running on two MPX appliances. The administrator notices that the state of the secondary Citrix ADC is ‘Unknown’.What is causing the secondary state to be ‘Unknown’?

The remote procedure call (RPC) nodes are incorrectly configured.

The synchronization on the secondary appliance is disabled.

TCP port 22 is disabled between the primary and secondary ADCs.

The administrator made both Citrix ADCs primary.

The remote procedure call (RPC) nodes are incorrectly configured.

Which two protocols would provide end-to-end data encryption, while allowing a Citrix ADC to optimize the responses? (Choose two.)

SSL bridge protocol for the vServer

SSL bridge protocol for the services

set gslb vServer-GSLB-1-MIR ENABLEDWhat will the Citrix ADC appliance send when the above command is executed?

The best global server load balancing (GSLB) service as the first record in the response, and the remaining active services as additional records

The Remote GSLB service as the first record in the response and adds the remaining active services as additional records

The Local GSLB service as the first record in the response and adds the remaining active services as additional records

Only the best GSLB service in the response

The best global server load balancing (GSLB) service as the first record in the response, and the remaining active services as additional records

Scenario: A Citrix ADC is configured with Interface 1/1 and bound to VLAN 40. A Citrix Administrator executed the below command:> bind vlan 10 –ifnum 1/1What is the result of executing this command on the Citrix ADC?

Interface 1/1 is bound to VLAN 20, and native VLAN is 20.

Interface 1/1 is bound to VLAN 20, and native VLAN is NOT changed.

Interface 1/1 is bound to VLAN 20, and native VLAN is 40.

Interface 1/1 is bound to VLAN 20, and native VLAN is 1.

A Citrix Administrator needs to confirm that all client certificates presented to the authentication vServer are valid until the year 2023.Which expression can the administrator use to meet this requirement?

CLIENT.SSL.CLIENT_CERT.VALID_NOT_AFTER.EQ(GMT2023)

CLIENT.SSL.CLIENT_CERT.VALID_NOT_BEFORE.EQ(GMT2023)

CLIENT.SSL.ORIGIN_SERVER_CERT.VALID_NOT_AFTER.EQ(GMT2023)

CLIENT.SSL.CLIENT_CERT.DAYS_TO_EXPIRE.EQ(2023)

To protect an environment against Hash DoS attacks, which two configurations can a Citrix Administrator use to block all post requests that are larger than 10,000 bytes? (Choose two.)

> add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(\”POST\”)&&http.REQ.CONTENT_LENGTH.GT(10000)”> add rewrite policy drop_rewrite expr_hashdos_prevention DROP> bind rewrite global drop_rewrite 100 END –type REQ_OVERRIDE

> add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(\”POST\”)&&http.REQ.CONTENT_LENGTH.GT(10000)”> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP> bind responder global pol_resp_hashdos_prevention 70 END –type REQ_OVERRIDE

> add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(\”POST\”)&&http.REQ.CONTENT_LENGTH.GT(10000)”> add rewrite policy drop_rewrite expr_hashdos_prevention DROP> bind rewrite global drop_rewrite 100 END –type REQ_OVERRIDE

> add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(\”POST\”)&&http.REQ.CONTENT_LENGTH.GT(10000)”> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP> bind responder global pol_resp_hashdos_prevention 70 END –type REQ_OVERRIDE

> add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(\”POST\”) ||http.REQ.CONTENT_LENGTH.GT(10000)”> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP> bind responder global pol_resp_hashdos_prevention 70 END –type REQ_OVERRIDE

> add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(\”POST\”) ||http.REQ.CONTENT_LENGTH.GT(10000)”> add rewrite policy drop_rewrite expr_hashdos_prevention DROP> bind rewrite global drop_rewrite 70 END –type REQ_OVERRIDE

> add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(\”POST\”) ||http.REQ.CONTENT_LENGTH.GT(10000)”> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP> bind responder global pol_resp_hashdos_prevention 100 END –type REQ_OVERRIDE

> add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(\”POST\”) ||http.REQ.CONTENT_LENGTH.GT(10000)”> add rewrite policy drop_rewrite expr_hashdos_prevention DROP> bind rewrite global drop_rewrite 100 END –type REQ_OVERRIDE

Scenario: A Citrix Administrator suspects an attack on a load-balancing vServer (IP address 192.168.100.25).The administrator needs to restrict access to this vServer for 10 minutes.Which Access Control List (ACL) will accomplish this?

add ns acl rule1 DENY –destIP 192.168.100.25 –TTL 600

add simpleacl rule1 DENY –srcIP 192.168.100.25 –TTL 600000

add simpleacl rule1 DENY –srcIP 192.168.100.25 –TTL 600

add ns acl rule1 DENY –destIP 192.168.100.25 –TTL 600000

add ns acl rule1 DENY –destIP 192.168.100.25 –TTL 600

Scenario: A Citrix Administrator manages an environment that has three SSL websites, all serving the same content. www.company.com www.company.net www.company.org The administrator would like to consolidate the websites into a single, load-balanced SSL vServer.What can the administrator bind to use a single SSL vServer?

The certificate of each website to a single SSL vServer

A wildcard certificate to a single SSL vServer

A wildcard certificate to a content-switching vServer

The certificate of each website to a single SSL vServer

A multiple SAN certificate to a single SSL vServer

Scenario: The primary content switching vServer has gone down. To troubleshoot, a Citrix Administrator has issued the following command:> show csvserver CSVCSV (10.1.100.100:443) – HTTPS Type: CONTENTState: UPLast state change was at Mon Jun 29 15:20:43 2020Time since last state change: 1 day, 06:47:58 610Client Idle Timeout: 180 secDown state flush: ENABLEDDisable Primary vServer On Down: DISABLEDAppflow logging: ENABLEDPort Rewrite: DISABLEDState Update: DISABLEDDefault: Content Precedence: URL vServer IP and Port insertion: OFF Persistence: NONE redirect: http://www.site1.com/mysite1/maintenance Backup: vServer–LB–2 Listen Policy: NONE IcmpResponse: PASSIVE RHIstate: PASSIVE Traffic Domain: 0 Based on this output, where will the subsequent request be redirected?

http://www.site1.com/mysite1/maintenance

Backup content switching vServer

A Citrix Network Engineer informs a Citrix Administrator that a data interface used by Citrix ADC SDX is being saturated.Which action could the administrator take to address this bandwidth concern?

Configure LACP on the SDX for the data interface.

Add a second interface to each Citrix ADC VPX instance.

Configure a failover interface set on each Citrix ADC VPX instance.

Configure LACP on the SDX for the data interface.

Configure LACP on the SDX for management interface.

Scenario: Users are trying to access https://cs.mycompany.com, but are receiving the error below:HTTP 503 Service UnavailableWhat can a Citrix Administrator change in the Citrix ADC configuration to fix this?

Bind the default load-balancing vServer.

Enable the content switching feature.

Disable the spillover redirect URL.

Bind the default load-balancing vServer.

When a Citrix ADC high availability (HA) pair failover occurs, by what method does the Citrix ADC communicate to the network switches and routers that IP-to-MAC address bindings have changed?

Gratuitous ARPs (GARPs) to update the network devices

Reverse ARP (RARP) to update the network devices

MAC-based forwarding (MBF) to update the routers

Proxy ARP to update the network devices

Gratuitous ARPs (GARPs) to update the network devices

Scenario: A Citrix Administrator needs to integrate LDAP for Citrix ADC system administration using current active directory (AD) groups. The administrator created the group on the Citrix ADC, exactly matching the group name in LDAP.What can the administrator bind to specify the permission level and complete the LDAP configuration?

A nested group to the new group

Users to the group on the Citrix ADC

An authentication, authorization, and auditing (AAA) action to the group

Scenario: A Citrix Administrator is configuring a Citrix ADC high availability (HA) pair. The administrator needs to ensure that one Citrix ADC is UP and primary at all times to guarantee that business websites are always available.In the event that both nodes become unavailable or fail a health check, what does the administrator need to do to ensure that the Citrix ADCs still handle web traffic?

Configure HA fail-safe mode on each Citrix ADC independently.

Configure HA fail-safe mode on the primary Citrix ADC only.

Disable HA fail-safe mode on each Citrix ADC independently.

Configure HA fail-safe mode on each Citrix ADC independently.

Disable HA fail-safe mode on the primary Citrix ADC only.

Scenario: A Citrix Administrator observes that when the client gets redirected to www.citrix.com/owa/search?q=username, an HTTP 503 response is received from the content switching vServer.The relevant configuration is as follows:> add cs action CS_Act_1 -targetLBVserver SERVER_1> add cs action CS_Act_2 -targetLBVserver SERVER_2> add cs action CS_Act_3 -targetLBVserver SERVER_3> add cs action CS_Act_4 -targetLBVserver SERVER_4> add cs policy CS_Pol_1 -rule "http.REQ.URL path_and_queryCONTAINS(\"connect\")" -actionCS_Act_1> add cs policy CS_Pol_2 -rule "http.REQ.URL path_and_query EQ(\"owa\")" -action CS_Act_2> add cs policy CS_Pol_3 -rule "http REQ.URL path_and_query CONTAINS(\"owa\")" -action CS_Act_3> add cs policy CS_Pol_4 -rule "http.REQ.IS_VALID" -action CS_Act_4> bind cs vServer CS_vserver1 -policyName CS_Pol_1 -priority 110> bind cs vServer CS_vserver1 -policyName CS_Pol_4 -priority 120 How can the administrator correct the issue?

Bind Policy CS_Pol_3 with priority 100.

Bind Policy CS_Pol_2 with priority 100.

Scenario: For security reasons, a Citrix Administrator needs to block access to multiple URLs.The administrator executes the below commands:> add policy patset BAD_URL> bind policy patset BAD_URL badurl1.mylab.lab -index 11 -charset ASCII> bind policy patset BAD_URL badurl2.mylab.lab -index 10 -charset ASCII Which final two commands should the administrator execute to accomplish this?

> add responder policy BAD_URL_DNS "DNS.REQ.QUESTION.DOMAIN.CONTAINS(\"BAD_URL\" RESET> bind responder global BAD_URL_DNS 100 END -type DNS_REQ_OVERRIDE

> add responder policy BAD_URL_DNS "DNS.REQ.QUESTION.DOMAIN.CONTAINS(\"BAD_URL\")" DROP> bind responder global BAD_URL_DNS 100 END -type DNS_REQ_OVERRIDE

> add responder policy BAD_URL_DNS"DNS.REQ.QUESTION.DOMAIN.CONTAINS_ANY(\"BAD_URL\")" RESET> bind responder global BAD_URL_DNS 100 END -type DNS_REQ_OVERRIDE

> add responder policy BAD_URL_DNS "DNS.REQ.QUESTION.DOMAIN.CONTAINS(\"BAD_URL\" RESET> bind responder global BAD_URL_DNS 100 END -type DNS_REQ

> add responder policy BAD_URL_DNS "DNS.REQ.QUESTION.DOMAIN.CONTAINS(\"BAD_URL\" RESET> bind responder global BAD_URL_DNS 100 END -type DNS_REQ_OVERRIDE

Scenario: A Citrix Administrator created and bound multiple content switching policies. During testing, attempts to access https://cs.mycompany.com resulted in the error message below:HTTP 503 Service UnavailableIn a Citrix ADC configuration, what can the administrator do to fix the error?

Check the priorities of the existing policies

Disable the spillover redirect URL.

Enable the content switching feature

Check the priorities of the existing policies

In an SSL offload deployment, which policy will allow a Citrix Administrator to modify all URLs in the response body from "http://" to "https://"?

> add rewrite action Act1 replace_all "HTTP.RES.BODY(200000)" "\"https:\"" -pattern "http://"> add rewrite policy Pol1 trueAct1 NOREWRITE

> add rewrite action Act1 replace_all "HTTP.RES.BODY(200000)" "\"http://\"" -pattern "https://"> add rewrite policy Pol1 trueAct1 NOREWRITE

> add rewrite action Act1 replace_all "HTTP.RES.BODY(200000)" "\"http:\"" -pattern "\https://\"> add rewrite policy Pol1 trueAct1 NOREWRITE

> add rewrite action Act1 replace_all "HTTP.RES.BODY(200000)" "\"https //\"" -pattern "http://"> add rewrite policy Pol1 trueAct1 NOREWRITE

> add rewrite action Act1 replace_all "HTTP.RES.BODY(200000)" "\"https:\"" -pattern "http://"> add rewrite policy Pol1 trueAct1 NOREWRITE

Scenario: A Citrix Administrator installed the compression feature on the web servers. To offload the compression on the Citrix ADC, the administrator configured the Citrix ADC appliance to remove the ‘Accept Encoding’ header from all HTTP client requests. However, the administrator observes that data is NOT being compressed by the Citrix ADC, even though the ‘Accept Encoding’ header is being removed from all requests.What could be the cause of this issue?

The compression policy needs to be reconfigured

The rewrite policy is bound at an incorrect bind point

The servers are automatically compressing all responses

The compression policy needs to be reconfigured

Servercmp is disabled on the Citrix ADC

A Citrix Administrator needs to bind a URL transformation policy.Which three bind points could the administrator use? (Choose three.)

Authentication, authorization, and auditing (AAA) group

Scenario: A Citrix Administrator configured a rewrite action as follows:> add rewrite action sync_date replace http.res.date.sys.timeWhat is the correct way to interpret this rewrite action?

It replaces the date header in the HTTP response with the Greenwich Mean Time (GMT) timestamp.

It replaces the date header in the HTTP response with the Citrix ADC system time in a conventionaldate format.

It replaces the date header in the HTTP response with the Greenwich Mean Time (GMT) timestamp.

It replaces the Citrix ADC system time with the date header in a conventional date format.

It is invalid, as system time CANNOT be referenced in the system policy.

Citrix 1Y0-241 Practice Test 2 - Free Online Exam Questions 41-80

Scenario: A Citrix Administrator configured a responder policy as follows:

> add responder action Redirect_Act respondwith

“DIAMETER.NEW_REDIRECT(\”aaa://host.example.com\”)”

> add responder policy Redirect_Pol “diameter.req.avp(264).value.eq(\”host1.example.net\”)” Redirect_Act

> bind lb vServer vs1 –policyName Redirect_Pol –priority 10 –type REQUEST What will be the effect of this configuration?

Become a Premium Member for full access

Unlock Premium Member

Citrix 1Y0-241 Practice Test 2

Question

Citrix 1Y0-241 Practice Tests

Practice Tests