Black Friday Special 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: clap70

1Y0-241 Deploy and Manage Citrix ADC with Traffic Management Questions and Answers

Questions 4

Scenario: A company acquires three smaller companies which adds more than 1,500 employees to the organization. The current Citrix ADC appliance does NOT support adding that many users.

A Citrix Administrator needs to use a multi-tenant solution, giving each newly acquired company its own Citrix ADC for VPN access load balancing, and a minimum of 20 Gbps of throughput.

How can the administrator meet the needs of these newly acquired companies?

Options:

A.

Purchase a Citrix ADC CPX for each

B.

Install XenServer and configure a Citrix ADC VPX 3000 for each

C.

Purchase a Citrix ADC MPX appliance for each

D.

Purchase a Citrix ADC SDX appliance, and configure a Citrix ADC instance for each

Buy Now
Questions 5

Which two statements are true regarding a typical global server load balancing (GSLB) setup? (Choose two.)

Options:

A.

Restrict the selection of a GSLB service from a subset of GSLB services bound to a GSLB vServer for the given domain.

B.

An administrator CANNOT define a backup for a backup vServer in an active standby GSLB setup for a given GSLB domain.

C.

Apply spillover policies on a subset of GSLB services, and ensure that the user CANNOT have a backup for a subset of GSLB services.

D.

Any given GSLB vServer can load balance only one fully qualified domain name (FQDN).

Buy Now
Questions 6

A Citrix Administrator configured global server load balancing (GSLB) for www.citrix.com, with two ADNS services named Citrix ADC 1 and Citrix ADC 2 in the setup.

Which record does the administrator need to add on the parent DNS server to delegate requests from www.citrix.com to Citrix ADC 1 and Citrix ADC 2?

Options:

A.

Canonical Name (CNAME)

B.

Address (A) record

C.

Name Server (NS) record

D.

Pointer Record (PTR)

Buy Now
Questions 7

Which Citrix ADC platform offers an out-of-the-box multi-tenant solution?

Options:

A.

VPX

B.

SDX

C.

MPX

D.

CPX

Buy Now
Questions 8

A Citrix Administrator needs to configure a rate-limiting policy setting DNS requests to a threshold of 1,000 per second.

Which command does the administrator need to run to correctly configure this policy?

Options:

A.

HTTP.REQ.LIMIT()

B.

SYS.CHECK.LIMIT()

C.

SYS.CHECK.LIMIT() || CONNECTION.IP.LIMIT()

D.

SYS.CHECK.LIMIT() || HTTP.REQ.LIMIT()

Buy Now
Questions 9

Users are experiencing resets from the intranet server website, which is load balanced through the Citrix ADC.

Which Citrix ADC tool can a Citrix Administrator use to troubleshoot the reset issue?

Options:

A.

View the newnslog from the command line interface (CLI) to look for packet resets from the Citrix ADC.

B.

Use the nslog to look for packet resets on the Citrix ADC.

C.

Take a packet trace with nstrace and analyze with Wireshark.

D.

Look in the event viewer for packet resets from the Citrix ADC

Buy Now
Questions 10

To protect an environment against Hash DoS attacks, which two configurations can a Citrix Administrator use to block all post requests that are larger than 10,000 bytes? (Choose two.)

Options:

A.

> add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(\”POST\”)&&

http.REQ.CONTENT_LENGTH.GT(10000)”

> add rewrite policy drop_rewrite expr_hashdos_prevention DROP

> bind rewrite global drop_rewrite 100 END –type REQ_OVERRIDE

B.

> add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(\”POST\”)&&

http.REQ.CONTENT_LENGTH.GT(10000)”

> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP

> bind responder global pol_resp_hashdos_prevention 70 END –type REQ_OVERRIDE

C.

> add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(\”POST\”) ||

http.REQ.CONTENT_LENGTH.GT(10000)”

> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP

> bind responder global pol_resp_hashdos_prevention 70 END –type REQ_OVERRIDE

D.

> add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(\”POST\”) ||

http.REQ.CONTENT_LENGTH.GT(10000)”

> add rewrite policy drop_rewrite expr_hashdos_prevention DROP

> bind rewrite global drop_rewrite 70 END –type REQ_OVERRIDE

E.

> add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(\”POST\”) ||

http.REQ.CONTENT_LENGTH.GT(10000)”

> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP

> bind responder global pol_resp_hashdos_prevention 100 END –type REQ_OVERRIDE

F.

> add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(\”POST\”) ||

http.REQ.CONTENT_LENGTH.GT(10000)”

> add rewrite policy drop_rewrite expr_hashdos_prevention DROP

> bind rewrite global drop_rewrite 100 END –type REQ_OVERRIDE

Buy Now
Questions 11

Scenario: A Citrix Administrator configured a global server load balancing (GSLB) setup for internal and external users using the same host name. For internal users, cvad.citrite.net should go to the Citrix StoreFront site; for external users, it should connect to the Citrix ADC Gateway VPN site.

Which feature should the administrator configure to accomplish this?

Options:

A.

DNS Preferred Location

B.

DNS Record

C.

DNS View

D.

DNS Proxy

Buy Now
Questions 12

Scenario: A Citrix Administrator observes that when the client gets redirected to www.citrix.com/owa/search?q=username, an HTTP 503 response is received from the content switching vServer.

The relevant configuration is as follows:

> add cs action CS_Act_1 -targetLBVserver SERVER_1

> add cs action CS_Act_2 -targetLBVserver SERVER_2

> add cs action CS_Act_3 -targetLBVserver SERVER_3

> add cs action CS_Act_4 -targetLBVserver SERVER_4

> add cs policy CS_Pol_1 -rule "http.REQ.URL path_and_queryCONTAINS(\"connect\")" -action CS_Act_1

> add cs policy CS_Pol_2 -rule "http.REQ.URL path_and_query EQ(\"owa\")" -action CS_Act_2

> add cs policy CS_Pol_3 -rule "http REQ.URL path_and_query CONTAINS(\"owa\")" -action CS_Act_3

> add cs policy CS_Pol_4 -rule "http.REQ.IS_VALID" -action CS_Act_4

> bind cs vServer CS_vserver1 -policyName CS_Pol_1 -priority 110

> bind cs vServer CS_vserver1 -policyName CS_Pol_4 -priority 120

How can the administrator correct the issue?

Options:

A.

Unbind CS_Pol_1.

B.

Bind Policy CS_Pol_3 with priority 100.

C.

Bind Policy CS_Pol_2 with priority 100.

D.

Unbind CS Pol 4.

Buy Now
Questions 13

Scenario: A Citrix Administrator manages an environment that has three SSL websites, all serving the same content.

www.company.com

www.company.net

www.company.org

The administrator would like to consolidate the websites into a single, load-balanced SSL vServer.

What can the administrator bind to use a single SSL vServer?

Options:

A.

A wildcard certificate to a single SSL vServer

B.

A wildcard certificate to a content-switching vServer

C.

The certificate of each website to a single SSL vServer

D.

A multiple SAN certificate to a single SSL vServer

Buy Now
Questions 14

A Citrix Administrator needs to bind a URL transformation policy.

Which three bind points could the administrator use? (Choose three.)

Options:

A.

Authentication, authorization, and auditing (AAA) group

B.

Content switching vServer

C.

Default global

D.

Policy label

E.

AAA user

Buy Now
Questions 15

Which feature can a Citrix Administrator use to create a consistent set of front-end SSL parameters across multiple SSL vServers?

Options:

A.

SSL profile

B.

SSL multiplexing

C.

SSL bridge

D.

SSL policy

E.

SSL policy

Buy Now
Questions 16

Which two protocols would provide end-to-end data encryption, while allowing a Citrix ADC to optimize the responses? (Choose two.)

Options:

A.

HTTP protocol for the services

B.

SSL bridge protocol for the vServer

C.

SSL bridge protocol for the services

D.

SSL protocol for the services

E.

HTTP protocol for the vServer

F.

SSL protocol for the vServer

Buy Now
Questions 17

Which mode on a Citrix ADC can a Citrix Administrator utilize to avoid asymmetrical packet flows and multiple route/ARP lookups?

Options:

A.

MAC-based forwarding (MBF)

B.

Use Subnet IP (USNIP)

C.

Layer 3

D.

Layer 2

Buy Now
Questions 18

Scenario: The Citrix Administrator of a Linux environment needs to load balance the web servers. Due to budget constraints, the administrator is NOT able to implement a full-scale solution.

What can the administrator purchase and install to load balance the webservers?

Options:

A.

Citrix ADC MPX

B.

Citrix ADC VPX

C.

Citrix ADC SDX

D.

Citrix ADC CPX

Buy Now
Questions 19

Scenario: A Citrix Administrator is managing a Citrix ADC SDX running eight Citrix ADC instances. The administrator needs to upgrade the firmware on the instances. However, the administrator is concerned that it needs to be done simultaneously.

What upgrading flexibility does SDX provide in this scenario?

Options:

A.

The Citrix ADC instances must be upgraded simultaneously.

B.

The Citrix ADC instances can be upgraded from the lights out management (LOM) port and Citrix Cloud services to different firmware versions.

C.

The Citrix ADC instances can be upgraded on an individual basis, allowing all instances to run independent firmware versions.

D.

The Citrix ADC instances can be upgraded at the SDX management level, allowing all instances to be upgraded simultaneously.

Buy Now
Questions 20

Scenario: A Citrix Administrator configures an Access Control List (ACL) to block traffic from the IP address 10.102.29.5:

add simpleacl rule1 DENY -srcIP 10.102 29.5

A week later the administrator discovers that the ACL is no longer present on the Citrix ADC.

What could be the reason for this?

Options:

A.

The administrator did NOT run the apply ACL command.

B.

The simple ACLs remain active for only 600 seconds.

C.

The simple ACLs remain active for only 60 seconds.

D.

The Citrix ADC has been restarted without saving the configurations.

Buy Now
Questions 21

Scenario: The primary content switching vServer has gone down. To troubleshoot, a Citrix Administrator has issued the following command:

> show csvserver CSV

CSV (10.1.100.100:443) – HTTPS Type: CONTENT

State: UP

Last state change was at Mon Jun 29 15:20:43 2020

Time since last state change: 1 day, 06:47:58 610

Client Idle Timeout: 180 sec

Down state flush: ENABLED

Disable Primary vServer On Down: DISABLED

Appflow logging: ENABLED

Port Rewrite: DISABLED

State Update: DISABLED

Default: Content Precedence: URL

vServer IP and Port insertion: OFF

Persistence: NONE redirect: http://www.site1.com/mysite1/maintenance

Backup: vServer–LB–2

Listen Policy: NONE

IcmpResponse: PASSIVE

RHIstate: PASSIVE

Traffic Domain: 0

Based on this output, where will the subsequent request be redirected?

Options:

A.

http://www.site1.com/mysite1/maintenance

B.

vServer–LB-2

C.

Backup content switching vServer

D.

10.1.100.100:443

Buy Now
Questions 22

Scenario: A Citrix Administrator configured the rewrite policies below:

bind lb vServer VIP1_http -policyName POL_14 -priority 120 -gotoPriorityExpression END -type REQUEST

bind lb vServer VIP1_http -policyName POL_12 -priority 90 -gotoPriorityExpression NEXT -type REQUEST

bind lb vServer VIP1_http -policyName POL_15 -priority 100 -gotoPriorityExpression END -type REQUEST

bind lb vServer VIP1_http -policyName POL_13 -priority 101 -gotoPriorityExpression NEXT -type REQUEST

Which policy will be evaluated last considering POL_12 is hit first?

Options:

A.

POL_12

B.

POL_13

C.

POL_14

D.

POL_15

Buy Now
Questions 23

Scenario: A Citrix Administrator installed the compression feature on the web servers. To offload the compression on the Citrix ADC, the administrator configured the Citrix ADC appliance to remove the ‘Accept Encoding’ header from all HTTP client requests. However, the administrator observes that data is NOT being compressed by the Citrix ADC, even though the ‘Accept Encoding’ header is being removed from all requests.

What could be the cause of this issue?

Options:

A.

The rewrite policy is bound at an incorrect bind point

B.

The servers are automatically compressing all responses

C.

The compression policy needs to be reconfigured

D.

Servercmp is disabled on the Citrix ADC

Buy Now
Questions 24

What can a Citrix Administrator use to restrict access to the Citrix ADC management IP (NSIP) address?

Options:

A.

Command policy

B.

Access Control List (ACL)

C.

Authentication policy

D.

Authorization policy

Buy Now
Questions 25

Which mode does a Citrix Administrator need to configure to allow a Citrix ADC to control the packetforwarding function based on the route table lookups?

Options:

A.

MBF

B.

USIP

C.

Layer 2

D.

Layer 3

Buy Now
Questions 26

In a global server load balancing (GSLB) active-active environment, the connection proxy is used as the site persistence method.

What is used to source the traffic when the connection is proxied?

Options:

A.

Subnet IP (SNIP)

B.

LDNS IP Address

C.

Client source IP

D.

Virtual IP (VIP)

Buy Now
Questions 27

A Citrix Administrator needs to block all DNS requests from subnet 10.107.149.0/24.

Which expressions can the administrator use to match the required traffic?

Options:

A.

CLIENT.IP.SRC(10.107.149.0) && (client.UDP.DSTPORT.EQ(53) || client TCP DSTPORT.EQ(53))

B.

CLIENT.IP.SRC IN_SUBNET(10 107.149.0/24) && client.UDP.DSTPORT.EQ(53) || client.TCP.DSTPORT.EQ(53)

C.

CLIENT.IP.SRC(10.107.149.0) && client UDP.DSTPORT.EQ(53) || client.TCP.DSTPORT.EQ(53)

D.

CLIENT.IP.SRC IN_SUBNET(10.107.149.0/24) && (client.UDP.DSTPORT.EQ(53) || client.TCP.DSTPORT.EQ(53))

Buy Now
Questions 28

Scenario: After deploying a Citrix ADC in production, a Citrix Administrator notices that client requests are NOT being evenly distributed among backend resources. The administrator wants to change from the default loadbalancing method to one that will help distribute the load more evenly.

Which load-balancing method would ensure that the server with the least amount of network utilization is receiving new connections?

Options:

A.

Least connection

B.

Least bandwidth

C.

Least response time

D.

Least packets

Buy Now
Questions 29

Scenario: A Citrix Administrator configured a load-balancing vServer. The URL for this vServer is vpn.citrix.com. The backend server has the host name configured as server1.citrix.com.

The administrator needs to implement the policy to change the host name from vpn.citrix.com to server1.citrix.com, and vice versa.

Which does the administrator need to configure to meet this requirement?

Options:

A.

set transform action “host change” –priority 10 –reqUrlFrom “https://vpn.citrix.com/*” –reqUrlInto “https://

server1.citrix.com/*” –resUrlFrom “https://server1.citrix.com/*” –resUrlInto “https://vpn.citrix.com/*”

B.

set transform action “host change” –priority 10 –reqUrlFrom “https://server1.citrix.com/*” –reqUrlInto “https://

vpn.citrix.com/*” –resUrlFrom “https://server1.citrix.com/*” –resUrlInto “https://vpn.citrix.com/*”

C.

set transform action “host change” –priority 10 –reqUrlFrom “https://server1.citrix.com/*” –reqUrlInto “https://

vpn.citrix.com/*” –resUrlFrom “https://vpn.citrix.com/*” –resUrlInto “https://server1.citrix.com/*”

D.

set transform action “host change” –priority 10 –reqUrlFrom “https://vpn.citrix.com/*” –reqUrlInto “https://

server1.citrix.com/*” –resUrlFrom “https://vpn.citrix.com/*” –resUrlInto “https://server1.citrix.com/*”

Buy Now
Questions 30

Scenario: A Citrix Administrator is configuring a Citrix ADC high availability (HA) pair. The administrator needs to ensure that one Citrix ADC is UP and primary at all times to guarantee that business websites are always available.

In the event that both nodes become unavailable or fail a health check, what does the administrator need to do to ensure that the Citrix ADCs still handle web traffic?

Options:

A.

Configure HA fail-safe mode on the primary Citrix ADC only.

B.

Disable HA fail-safe mode on each Citrix ADC independently.

C.

Configure HA fail-safe mode on each Citrix ADC independently.

D.

Disable HA fail-safe mode on the primary Citrix ADC only.

Buy Now
Questions 31

Scenario: Users are trying to access https://cs.mycompany.com, but are receiving the error below:

HTTP 503 Service Unavailable

What can a Citrix Administrator change in the Citrix ADC configuration to fix this?

Options:

A.

Enable the content switching feature.

B.

Disable the spillover redirect URL.

C.

Bind a certificate.

D.

Bind the default load-balancing vServer.

Buy Now
Questions 32

If VLAN 20 is bound to the interface as tagged in an environment where Citrix ADC is configured with the default settings, which VLANs will be bound to an interface?

Options:

A.

VLAN 1 tagged and VLAN 20 tagged

B.

VLAN 20 tagged only

C.

VLAN 1 untagged and VLAN 20 tagged

D.

VLAN 20 untagged only

Buy Now
Questions 33

Scenario: A Citrix Administrator needs to configure a Responder policy, so that the string “/mytraining” is added

to every URL path received.

The administrator should use these commands to accomplish this:

>add responder action Redirect_Act redirect “HTTP.REQ.URL.PATH_AND_QUERY+\”mytraining\”” –

responseStatusCode 302

>add responder policy Redirect_Pol___________Redirect_Act

>bind lb vServer lb_vsrv_www –policyName Redirect_Pol –priority 100 –gotoPriorityExpression END –

type_______

(Choose the correct option to complete the set of commands.)

Options:

A.

“(HTTP.REQ.URL.STARTSWITH(\”mytraining\”))”

REQUEST

B.

“(HTTP.REQ.URL.STARTSWITH(\”mytraining\”))”

RESPONSE

C.

“!(HTTP.REQ.URL.ENDSWITH(\”mytraining\”))”

REQUEST

D.

“!(HTTP.REQ.URL.ENDSWITH(\”mytraining\”))”

RESPONSE

Buy Now
Exam Code: 1Y0-241
Exam Name: Deploy and Manage Citrix ADC with Traffic Management
Last Update: Dec 2, 2024
Questions: 111
1Y0-241 pdf

1Y0-241 PDF

$25.5  $84.99
1Y0-241 Engine

1Y0-241 Testing Engine

$30  $99.99
1Y0-241 PDF + Engine

1Y0-241 PDF + Testing Engine

$40.5  $134.99