Home / Citrix / 1Y0-241

Citrix 1Y0-241 Practice Test - Questions Answers, Page 6

Question list

List of questions

Question 51

(0)

Scenario: A Citrix ADC is configured with Interface 1/1 and bound to VLAN 40. A Citrix Administrator executed the below command: > bind vlan 10 –ifnum 1/1 What is the result of executing this c

Question 52

(0)

Scenario: A Citrix Administrator needs to improve website loading speed. End users are reporting slow GIF image rendering speeds as they scroll down a website, which affects overall page load time.

Question 53

(0)

A Citrix Administrator needs to confirm that all client certificates presented to the authentication vServer are valid until the year 2023. Which expression can the administrator use to meet this r

Question 54

(0)

Scenario: A Citrix Administrator would like to grant access to a Junior Citrix Administrator on the Citrix ADC. The administrator would like to grant full access to everything except the following:

Question 55

(0)

Scenario: A Citrix Administrator configured SNMP to send traps to an external SNMP system. When reviewing the messages, the administrator notices several entity UP and entity DOWN messages. To what

Question 56

(0)

To protect an environment against Hash DoS attacks, which two configurations can a Citrix Administrator use to block all post requests that are larger than 10,000 bytes? (Choose two.)

Question 57

(0)

Scenario: A Citrix Administrator suspects an attack on a load-balancing vServer (IP address 192.168.100.25). The administrator needs to restrict access to this vServer for 10 minutes. Which Access

Question 58

(0)

Scenario: A Citrix Administrator manages an environment that has three SSL websites, all serving the same content. www.company.com www.company.net www.company.org The administrator would lik

Question 59

(0)

Scenario: The primary content switching vServer has gone down. To troubleshoot, a Citrix Administrator has issued the following command: > show csvserver CSV CSV (10.1.100.100:443) – HTTPS Type

Question 60

(0)

A Citrix Administrator needs to use a client’s IP address as the source IP address for Citrix ADC-toserver connections. Which Citrix ADC mode can the administrator use to meet this requirement?

Related questions

Scenario: The primary content switching vServer has gone down. To troubleshoot, a Citrix Administrator has issued the following command: > show csvserver CSV CSV (10.1.100.100:443) – HTTPS Type: CONTENT State: UP Last state change was at Mon Jun 29 15:20:43 2020 Time since last state change: 1 day, 06:47:58 610 Client Idle Timeout: 180 sec Down state flush: ENABLED Disable Primary vServer On Down: DISABLED Appflow logging: ENABLED Port Rewrite: DISABLED State Update: DISABLED Default: Content Precedence: URL vServer IP and Port insertion: OFF Persistence: NONE redirect: http://www.site1.com/mysite1/maintenance Backup: vServer–LB–2 Listen Policy: NONE IcmpResponse: PASSIVE RHIstate: PASSIVE Traffic Domain: 0 Based on this output, where will the subsequent request be redirected?

In a global server load balancing (GSLB) active-active environment, the connection proxy is used as the site persistence method. What is used to source the traffic when the connection is proxied?

Scenario: A load-balancing vServer is configured to utilize the least bandwidth load-balancing method. A service attached to this vServer is brought into the effective state during production hours. During the startup of a vServer, which load-balancing method is used by default?

Scenario: A Citrix Administrator is configuring a Citrix ADC high availability (HA) pair. The administrator needs to ensure that one Citrix ADC is UP and primary at all times to guarantee that business websites are always available. In the event that both nodes become unavailable or fail a health check, what does the administrator need to do to ensure that the Citrix ADCs still handle web traffic?

A Citrix Administrator needs to confirm that all client certificates presented to the authentication vServer are valid until the year 2023. Which expression can the administrator use to meet this requirement?

Scenario: A Citrix Administrator needs to configure persistence on a global server load balancing (GSLB) vServer to which a service is bound. Service must continue to handle requests from the client even after it is disabled manually – accepting new requests or connections only to honor persistence. After a configured period of time, no new requests or connections are directed to the service and all existing connections are closed. To achieve these requirements, which parameter can the administrator configure while disabling the service?

How can a Citrix Administrator configure a rewrite policy to change the version of HTTP from 1.1 to1.0 in every request?

Scenario: To receive data alerts for failures, a Citrix Administrator is configuring SNMP on the Citrix ADC. The administrator is confident that the manager, alarms and SNMP traps are configured correctly. The following week, there is a Citrix ADC-related outage and the administrator does NOT receive any alerts. What could be the reason for this alert failure?

Where do the monitor probes originate by default, after creating and correctly configuring a custom user monitor?

Question 51

Scenario: A Citrix ADC is configured with Interface 1/1 and bound to VLAN 40. A Citrix Administrator executed the below command:

> bind vlan 10 –ifnum 1/1

What is the result of executing this command on the Citrix ADC?

Interface 1/1 is bound to VLAN 20, and native VLAN is 20.

Interface 1/1 is bound to VLAN 20, and native VLAN is NOT changed.

Interface 1/1 is bound to VLAN 20, and native VLAN is 40.

Interface 1/1 is bound to VLAN 20, and native VLAN is 1.

Show Answer Comment (0)

Question 52

Scenario: A Citrix Administrator needs to improve website loading speed. End users are reporting slow GIF image rendering speeds as they scroll down a website, which affects overall page load time.

Which Citrix ADC feature can the administrator enable to improve website performance?

Domain sharding

Image lazy loading

Image optimization

Image shrink-to attributes

Show Answer Comment (0)

Question 53

A Citrix Administrator needs to confirm that all client certificates presented to the authentication vServer are valid until the year 2023.

Which expression can the administrator use to meet this requirement?

CLIENT.SSL.CLIENT_CERT.VALID_NOT_AFTER.EQ(GMT2023)

CLIENT.SSL.CLIENT_CERT.VALID_NOT_BEFORE.EQ(GMT2023)

CLIENT.SSL.ORIGIN_SERVER_CERT.VALID_NOT_AFTER.EQ(GMT2023)

CLIENT.SSL.CLIENT_CERT.DAYS_TO_EXPIRE.EQ(2023)

Show Answer Comment (0)

Question 54

Scenario: A Citrix Administrator would like to grant access to a Junior Citrix Administrator on the Citrix ADC.

The administrator would like to grant full access to everything except the following:

Shell User configuration

Partition configuration

Which preexisting command policy would meet the needs of this scenario?

Sysadmin

Operator

Network

Superuser

Show Answer Comment (0)

Question 55

Scenario: A Citrix Administrator configured SNMP to send traps to an external SNMP system. When reviewing the messages, the administrator notices several entity UP and entity DOWN messages.

To what are these messages related?

Load-balancing vServers

Network interface

High availability nodes

SSL profile

Show Answer Comment (0)

Question 56

To protect an environment against Hash DoS attacks, which two configurations can a Citrix Administrator use to block all post requests that are larger than 10,000 bytes? (Choose two.)

> add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(\”POST\”)&&http.REQ.CONTENT_LENGTH.GT(10000)”> add rewrite policy drop_rewrite expr_hashdos_prevention DROP> bind rewrite global drop_rewrite 100 END –type REQ_OVERRIDE

> add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(\”POST\”)&&http.REQ.CONTENT_LENGTH.GT(10000)”> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP> bind responder global pol_resp_hashdos_prevention 70 END –type REQ_OVERRIDE

> add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(\”POST\”) ||http.REQ.CONTENT_LENGTH.GT(10000)”> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP> bind responder global pol_resp_hashdos_prevention 70 END –type REQ_OVERRIDE

> add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(\”POST\”) ||http.REQ.CONTENT_LENGTH.GT(10000)”> add rewrite policy drop_rewrite expr_hashdos_prevention DROP> bind rewrite global drop_rewrite 70 END –type REQ_OVERRIDE

Show Answer Comment (0)

Question 57

Scenario: A Citrix Administrator suspects an attack on a load-balancing vServer (IP address 192.168.100.25).

The administrator needs to restrict access to this vServer for 10 minutes.

Which Access Control List (ACL) will accomplish this?

add simpleacl rule1 DENY –srcIP 192.168.100.25 –TTL 600000

add simpleacl rule1 DENY –srcIP 192.168.100.25 –TTL 600

add ns acl rule1 DENY –destIP 192.168.100.25 –TTL 600000

add ns acl rule1 DENY –destIP 192.168.100.25 –TTL 600

Show Answer Comment (0)

Question 58

Scenario: A Citrix Administrator manages an environment that has three SSL websites, all serving the same content. www.company.com www.company.net www.company.org The administrator would like to consolidate the websites into a single, load-balanced SSL vServer.

What can the administrator bind to use a single SSL vServer?

A wildcard certificate to a single SSL vServer

A wildcard certificate to a content-switching vServer

The certificate of each website to a single SSL vServer

A multiple SAN certificate to a single SSL vServer

Show Answer Comment (0)

Question 59

Scenario: The primary content switching vServer has gone down. To troubleshoot, a Citrix Administrator has issued the following command:

> show csvserver CSV

CSV (10.1.100.100:443) – HTTPS Type: CONTENT

State: UP

Last state change was at Mon Jun 29 15:20:43 2020

Time since last state change: 1 day, 06:47:58 610

Client Idle Timeout: 180 sec

Down state flush: ENABLED

Disable Primary vServer On Down: DISABLED

Appflow logging: ENABLED

Port Rewrite: DISABLED

State Update: DISABLED

Default: Content Precedence: URL vServer IP and Port insertion: OFF Persistence: NONE redirect: http://www.site1.com/mysite1/maintenance Backup: vServer–LB–2 Listen Policy: NONE IcmpResponse: PASSIVE RHIstate: PASSIVE Traffic Domain: 0 Based on this output, where will the subsequent request be redirected?

http://www.site1.com/mysite1/maintenance

vServer–LB-2

Backup content switching vServer

10.1.100.100:443

Show Answer Comment (0)