Scenario: A Citrix Administrator configured a Citrix ADC active-passive, high availability (HA) pair. The HA pair failed over and customers were unable to access hosted websites. The administrator troubleshoots and discovers that the upstream router is NOT updating its ARP table.What can the administrator configure to resolve this issue?

Independent Network Configuration (INC) mode

Scenario: A Citrix Administrator is managing a Citrix ADC SDX running eight Citrix ADC instances. The administrator needs to upgrade the firmware on the instances. However, the administrator is concerned that it needs to be done simultaneously.What upgrading flexibility does SDX provide in this scenario?

The Citrix ADC instances can be upgraded at the SDX management level, allowing all instances to be upgraded simultaneously.

The Citrix ADC instances must be upgraded simultaneously.

The Citrix ADC instances can be upgraded from the lights out management (LOM) port and Citrix Cloud services to different firmware versions.

The Citrix ADC instances can be upgraded on an individual basis, allowing all instances to run independent firmware versions.

The Citrix ADC instances can be upgraded at the SDX management level, allowing all instances to be upgraded simultaneously.

Scenario: A Citrix Administrator currently manages a Citrix ADC environment for a growing retail company that may soon double its business volume. A Citrix ADC MPX 5901 is currently handling web and SSL transactions, but is close to full capacity. Due to the forecasted growth, the administrator needs to find a cost-effective solution.What cost-effective recommendation can the administrator provide to management to handle the growth?

A hardware upgrade to a Citrix ADC MPX 8905

The addition of another MPX 5901 appliance

A hardware upgrade to a Citrix ADC MPX 8905

A license upgrade to a Citrix ADC MPX 5905

A hardware upgrade to a Citrix ADC SDX 15020

Scenario: While performing a disaster recovery test, a Citrix Administrator decides to failover the Citrix ADC high availability (HA) pair appliances. The administrator notices that the failover is NOT working as expected, and the secondary Citrix ADC is NOT taking over as primary. The administrator suspects that networking issues may be causing the failure.What could be the cause of this issue?

HA monitoring is enabled on a disabled interface of the primary node.

HA monitoring is enabled on an interface of the secondary node that shows as ENABLED, DOWN.

The Independent Network Configuration (INC) mode is enabled on the primary node.

HA monitoring is enabled on a disabled interface of the primary node.

HA heartbeats are only seen on some enabled interfaces of the secondary node.

Scenario: A Citrix Administrator is configuring load balancing on a Citrix ADC appliance for company web servers. The administrator needs to create a custom monitor that will look for a specific keyword response from the website, which will be used to keep services in an UP state.Which monitor can the administrator create to meet this requirement?

An HTTP-ECV monitor with the keyword in the Basic Parameters - Send String field

An HTTP-ECV monitor with the keyword in the Special Parameters - Receive String field

An HTTP-ECV monitor with the keyword in the Basic Parameters - Receive String field

An HTTP-ECV monitor with the keyword in the Special Parameters - Receive String field, and theReverse option enabled

An HTTP-ECV monitor with the keyword in the Basic Parameters - Send String field

Scenario: A company acquires three smaller companies which adds more than 1.500 employees to the organization. The current Citrix ADC appliance does NOT support adding that many users.A Citrix Administrator needs to use a multi-tenant solution, giving each newly acquired company its own Citrix ADC for VPN access load balancing, and a minimum of 20 Gbps of throughput.How can the administrator meet the needs of these newly acquired companies?

Purchase a Citrix ADC SDX appliance, and configure a Citrix ADC instance for each

Purchase a Citrix ADC CPX for each

Install XenServer and configure a Citrix ADC VPX 3000 for each

Purchase a Citrix ADC MPX appliance for each

Purchase a Citrix ADC SDX appliance, and configure a Citrix ADC instance for each

Which two statements are true regarding a typical global server load balancing (GSLB) setup?(Choose two.)

Restrict the selection of a GSLB service from a subset of GSLB services bound to a GSLB vServer for the given domain.

Any given GSLB vServer can load balance only one fully qualified domain name (FQDN).

Restrict the selection of a GSLB service from a subset of GSLB services bound to a GSLB vServer for the given domain.

An administrator CANNOT define a backup for a backup vServer in an active standby GSLB setup for a given GSLB domain.

Apply spillover policies on a subset of GSLB services, and ensure that the user CANNOT have a backup for a subset of GSLB services.

Any given GSLB vServer can load balance only one fully qualified domain name (FQDN).

If VLAN 20 is bound to the interface as tagged in an environment where Citrix ADC is configured with the default settings, which VLANs will be bound to an interface?

VLAN 1 untagged and VLAN 20 tagged

VLAN 1 tagged and VLAN 20 tagged

VLAN 1 untagged and VLAN 20 tagged

Scenario: A Citrix Administrator configured a responder policy as follows:> add responder action Picture10Action redirect "\"http://\" + http.req.hostname + http.req.url +\"/picture10.html\"" -bypassSafetyCheck YES> add responder policy Picture10Policy "http.req.url.eq(\"/mywebsite\")" Picture10Action> bind responder global Picture10Policy 1 END -type OVERRIDE What will be the effect of this configuration?

Clients accessing http://www.mywebsite.com/ will have /picture10 html appended to the URL.

The URL http://www.mywebsite.com will be overwritten with /picture10.html.

Clients accessing http://www.mywebsite.com/ will have /picture10 html appended to the URL.

Clients accessing http://www.mywebsite.com/picture10.html will be overwritten withhttp://www.mywebsite com/.

The file Picture10 will be downloaded to a local drive when directly accessing http://www.mywebsite.com/picture10.html.

A Citrix Administrator wants to configure independent and isolated access on a single appliance to allow three different departments to manage and isolate their own applications.What can the administrator configure to isolate department-level administration?

Admin partitions that use dedicated VLANs

A SNIP in each partition, and bind a VLAN for the department

Policy-based routes for each department in the nsroot partition

Dedicated routes in the admin partitions for each department

Users are experiencing resets from the intranet server website, which is load balanced through the Citrix ADC.Which Citrix ADC tool can a Citrix Administrator use to troubleshoot the reset issue?

Take a packet trace with nstrace and analyze with Wireshark.

View the newnslog from the command line interface (CLI) to look for packet resets from the Citrix ADC.

Use the nslog to look for packet resets on the Citrix ADC.

Take a packet trace with nstrace and analyze with Wireshark.

Look in the event viewer for packet resets from the Citrix ADC

Scenario: A Citrix Administrator is concerned about the number of health checks the Citrix ADC is sending to backend resources. The administrator wants to find a way to remove health checks from specific bound services.How can the administrator accomplish this?

Use service groups to minimize health checks.

Use reverse-condition monitoring.

Scenario: A Citrix Administrator manages an environment that has an externally accessible website.The administrator would like to provide end-to-end encryption and use features such as caching and compression on the Citrix ADC.Which setting should the administrator configure to meet this requirement?

SSL_TCP front-end, SSL_TCP backend

A Citrix Administrator needs to configure a rate-limiting policy setting DNS requests to a threshold of 1,000 per second.Which set of commands does the administrator need to run to correctly configure and enable this policy?

> add stream selector DNSSelector1 client.udp.dns.domain> add ns limitIdentifier DNSLimitIdentifier1 -threshold 1000 -timeSlice 1000 -selectorName DNSSelector1> add dns policy DNSLimitPolicy1 " sys check_limit(\"DNSLimitIdentifier1\")" -preferredLocation "North America.US.TX.Dallas.. "> bind dns global DNSLimitPolicy1 5

> add stream selector DNSSelector1 client.udp.dns.domain> add ns limitIdentifier DNSLimitIdentifier1 -threshold 5 -timeSlice 1000 -selectorName DNSSelector1> add dns policy DNSLimitPolicy1 " sys.check_limit(\"DNSLimitIdentifier1\")" -preferredLocation "North America.US.TX.Dallas.. "> bind dns global DNSLimitPolicy1 5

> add stream selector DNSSelector1 client.udp.dns.domain> add ns limitIdentifier DNSLimitIdentifier1 -threshold 1000 -timeSlice 1000 -selectorName DNSSelector1> add dns policy DNSLimitPolicy1 " sys check_limit(\"DNSLimitIdentifier1\")" -preferredLocation "North America.US.TX.Dallas.. "> bind dns global DNSLimitPolicy1 5

> add stream selector DNSSelector1 client.udp.dns.domain> add ns limitIdentifier DNSLimitIdentifier1 -threshold 5 -timeSlice 1000 -selectorName DNSSelector1> add dns policy DNSLimitPolicy1 " sys.check_limit(\"DNSLimitIdentifier1\")" -preferredLocation "North America.US.TX.Dallas.. "

> add stream selector DNSSelector1 client.udp.dns.domain> add ns limitIdentifier DNSLimitIdentifier1 -threshold 1000 -timeSlice 1000 -selectorName DNSSelector1> add dns policy DNSLimitPolicy1 " sys check_limit(\"DNSLimitIdentifier1\")" -preferredLocation "North America.US.TX.Dallas.. "

Scenario: A Citrix Administrator manages a Citrix SDX appliance with several instances configured.The administrator needs to enable Layer 2 mode on two instances.When using a shared network interface, what must the administrator do to ensure that traffic flows correctly?

Enable MAC-based forwarding (MBF) mode.

Ensure Layer 3 and Layer 2 modes are enabled.

Enable tagging on all interfaces.

Enable MAC-based forwarding (MBF) mode.

Disable Layer 2 mode on a Citrix ADC instance.

Which two items must be true for a client to connect to an SSL offload vServer without any SSL errors? (Choose two.)

The root certificate is installed on the Citrix ADC.

The root certificate is installed on the client s device.

The server certificate is from a private certificate authority (CA).

The server certificate is bound to the load-balancing vServer.

The root certificate is installed on the Citrix ADC.

The root certificate is installed on the client s device.

A Citrix Administrator needs to block all DNS requests from subnet 10.107.149.0/24.Which expressions can the administrator use to match the required traffic?

CLIENT.IP.SRC IN_SUBNET(10.107.149.0/24) && (client.UDP.DSTPORT.EQ(53) || client.TCP.DSTPORT.EQ(53))

CLIENT.IP.SRC(10.107.149.0) && (client.UDP.DSTPORT.EQ(53) || client TCP DSTPORT.EQ(53))

CLIENT.IP.SRC IN_SUBNET(10 107.149.0/24) && client.UDP.DSTPORT.EQ(53) || client.TCP.DSTPORT.EQ(53)

CLIENT.IP.SRC(10.107.149.0) && client UDP.DSTPORT.EQ(53) || client.TCP.DSTPORT.EQ(53)

CLIENT.IP.SRC IN_SUBNET(10.107.149.0/24) && (client.UDP.DSTPORT.EQ(53) || client.TCP.DSTPORT.EQ(53))

The MEP will be marked as DOWN if the GSLB service has been DOWN for 10 seconds.

The GSLB services will be marked as DOWN if the MEP connection has been DOWN for 10 seconds.

The MEP will be marked as DOWN if the GSLB service has been DOWN for 10 seconds.

The MEP will be marked as DOWN if the GSLB vServer has been DOWN for 10 seconds.

The GSLB services will be marked as DOWN if the LB server has been DOWN for 10 seconds.

Scenario: A Citrix Administrator configures an Access Control List (ACL) to block traffic from the IP address 10.102.29.5: add simpleacl rule1 DENY -srcIP 10.102 29.5 A week later the administrator discovers that the ACL is no longer present on the Citrix ADC.What could be the reason for this?

The Citrix ADC has been restarted without saving the configurations.

The administrator did NOT run the apply ACL command.

The simple ACLs remain active for only 600 seconds.

The simple ACLs remain active for only 60 seconds.

The Citrix ADC has been restarted without saving the configurations.

Scenario: To receive data alerts for failures, a Citrix Administrator is configuring SNMP on the Citrix ADC. The administrator is confident that the manager, alarms and SNMP traps are configured correctly. The following week, there is a Citrix ADC-related outage and the administrator does NOT receive any alerts.What could be the reason for this alert failure?

The community name was NOT configured in the Citrix ADC SNMP trap destination settings.

The Citrix Web App Firewall is blocking the alerts from going out.

The community name was NOT configured in the Citrix ADC SNMP trap destination settings.

The Citrix ADC only has standard licensing.

The Citrix ADC is configured for SNMP version 1.

Scenario: A Citrix Administrator is configuring a Citrix ADC high availability (HA) pair with an existing primary Citrix ADC with all resources configured. The administrator adds the secondary Citrix ADC in HA and discovers that the configuration on the existing primary was removed and is now the secondary Citrix ADC in the HA pair.Which two configurations could the administrator have used to prevent this from happening?(Choose two.)

Set the secondary Citrix ADC to stay secondary in the Configure HA Node settings.

Enable HA monitoring on all secondary device interfaces.

Set the primary Citrix ADC to stay primary in the Configure HA Node settings.

Set the secondary Citrix ADC to stay secondary in the Configure HA Node settings.

Enable HA monitoring on all secondary device interfaces.

Enable HA monitoring on all primary device interfaces.

Citrix 1Y0-241 Practice Test 3 - Free Online Exam Questions 81-112

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

Citrix 1Y0-241 Practice Test 3

Question

Citrix 1Y0-241 Practice Tests

Practice Tests