citrix.testking.1y0-240.v2017-11-07.by.kimi · 2017. 11. 7. · question 11 scenario: a citrix...

https://www.gratisexam.com/

1Y0-240.exam

Number: 1Y0-240Passing Score: 800Time Limit: 120 minFile Version: 1.0


Citrix

1Y0-240

Citrix NetScaler Essentials and Traffic Management

Version 1.0


Exam A

QUESTION 1A Citrix Administrator needs to block all the DNS requests from subnet 10.107.149.0/24.

Which expressions can the administrator use to match the required traffic?

A. CLIENT.IP.SRC.IN_SUBNET(10.107.149.0/24) && client.UDP.DSTPORT.EQ(53) || client.TCP.DSTPORT.EQ(53)

B. CLIENT.IP.SRC.IN_SUBNET(10.107.149.0/24) && (client.UDP.DSTPORT.EQ(53) || client.TCP.DSTPORT.EQ(53))

C. CLIENT.IP.SRC(10.107.149.0) && (client.UDP.DSTPORT.EQ(53) || client.TCP.DSTPORT.EQ(53))

D. CLIENT.IP.SRC(10.107.149.0) && client.UDP.DSTPORT.EQ(53) || client.TCP.DSTPORT.EQ(53)

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 2Scenario: User authentication is failing through the NetScaler. A Citrix Administrator checked the Authentication, Authorization and Auditing (AAA) policy, actionand virtual server and verified that the correct configuration was in place. The administrator bypassed the NetScaler and the authentication worked.

Which NetScaler utility can the administrator use to troubleshoot the access issue?


A. aaad.debug

B. Dashboard

C. nscon message

D. nslog file

Correct Answer: ASection: (none)


Explanation


QUESTION 3Scenario: A Citrix Administrator manages an environment that has three SSL websites, all serving the same content.

www.company.comwww.company.netwww.company.org

The administrator would like to consolidate the website into a single, load-balanced SSL virtual server.

Which action can the administrator take to use a single SSL virtual server?

A. Bind the certificate of each website to a single SSL virtual server.

B. Bind a multiple Subject Alternative Name (SAN) certificate to a single SSL virtual server.

C. Bind a Wildcard certificate to a single SSL virtual server.

D. Bind a Wildcard certificate to a Content Switching virtual server.

Correct Answer: DSection: (none)Explanation


QUESTION 4In the Global Server Load Balancing (GSLB) configuration when dynamic proximity is implemented, the round trip time (RTT) between the _____________ and_____________ is measured to make the load decision. (Choose the correct option to complete the sentence.)

A. IP address of the client; each of the GSLB sites.

B. Local DNS of the client; each of the GSLB sites.

C. Local DNS of the client; each of the GSLB services.

D. IP address of the client; each of the GSLB services.




QUESTION 5Scenario: A Load Balancing virtual server (lb_vsrv_www) is configured to load balance service_1 and service_2. A Citrix Administrator needs to bind a content filterpolicy to the virtual server, such that if the user tries to access http://xenapp.citrix.com, then the request should go to service_1.

Which policy can the administrator use in this scenario?

A. add filter action Redirect_Service_1_Act redirect Service_1add filter policy Redirect_Service_1_Pol -rule “REQ.HTTP.HEADER HOSTANME CONTAINS xenapp.citrix.com” reqAction Redirect_Service_1_Act

B. add filter action Redirect_Service_1_Act forward Service_1add filter policy Redirect_Service_1_Pol -rule “REQ.HTTP.HEADER HOSTANME CONTAINS xenapp.citrix.com” reqAction Redirect_Service_1_Act

C. add filter action Redirect_Service_1_Act forward Service_1add filter policy Redirect_Service_1_Pol -rule “REQ.HTTP.HEADER HOSTANME CONTAINS xenapp.citrix.com”

D. add filter action Redirect_Service_1_Act respond Service_1add filter policy Redirect_Service_1_Pol -rule “REQ.HTTP.HEADER HOSTANME CONTAINS xenapp.citrix.com”

Correct Answer: ASection: (none)Explanation


QUESTION 6Scenario: A Citrix Administrator is concerned about the amount of health checks the NetScaler is sending to the backend resources. The administrator would liketo find a way to remove health checks from specific bound services.

How can the administrator accomplish this?

A. Use the No-Monitor option.

B. Use Service Groups to minimize health checks.

C. Unbind the current monitor.

D. Use reverse condition monitoring.




QUESTION 7Which scenario will cause automatic high availability (HA) synchronization to fail?

A. Different build versions

B. Manually forced synchronization

C. A force failover

D. A configuration change to the primary NetScaler



QUESTION 8Scenario: A Citrix Administrator has configured the rewrite action as follows:

add rewrite action sync_date replace http.res.date sys.time

What is the correct way to interpret this rewrite action?


A. The rewrite action replaces the Date header in the http response with the GMT time stamp.

B. The rewrite action replaces the Date header in the http response with the NetScaler system time in a conventional date format.

C. The rewrite action is invalid, as system time CANNOT be referenced in the system policy.

D. The rewrite action replaces the NetScaler system time with the Date header in a conventional date format.

Correct Answer: C


Section: (none)Explanation


QUESTION 9Users are experiencing resets from the Intranet server website, which is load-balanced through the NetScaler.

Which NetScaler tool can a Citrix Administrator use to troubleshoot the reset issue?

A. Take a packet trace with nstrace and analyze with WireShark.

B. View the new nslog from the command-line interface (CLI) to look for packet resets from the NetScaler.

C. Look in the Event Viewer for packet resets from the NetScaler.

D. Use the nslog to look for packet resets on the NetScaler.



QUESTION 10Which policy will allow a Citrix Administrator to modify all the URLs in the response body from “http://” to “https://” in an SSL offload deployment?

A. add rewrite action Act1 replace_all “HTTP.RES.BODY(200000)” “\”http://\”" –pattern “https://”add rewrite policy Pol1 true Act1 NOREWRITE

B. add rewrite action Act1 replace_all “HTTP.RES.BODY(200000)” “\”http:\”" –pattern “https://\”add rewrite policy Pol1 true Act1 NOREWRITE

C. add rewrite action Act1 replace_all “HTTP.RES.BODY(200000)” “\”https://\”" –pattern “http://”add rewrite policy Pol1 true Act1 NOREWRITE

D. add rewrite action Act1 replace_all “HTTP.RES.BODY(200000)” “\”https:\”" –pattern “http://”add rewrite policy Pol1 true Act1 NOREWRITE




QUESTION 11Scenario: A Citrix Administrator notices user sessions are disconnecting and reconnecting more often this week than last week, signaling a problem.

The administrator troubleshoots this issue and prepares to resolve it using persistence. However, the following consideration apply in the environment:It is a multi-proxy environment behind the NetScaler.Use Source IP (USIP) mode is enabled and applied to the services.The session timeout is very short.All users connect from the same location.

The administrator can use persistence based on the ______________ setting to resolve this issue. (Choose the correct option to complete the sentence.)

A. Subnet IP

B. HTTP Cookies

C. Proximity

D. SSL Session IDs



QUESTION 12Scenario: A user is attempting to access a web server which is load balanced by the NetScaler using HTTPS. The user received the following message:

SSL/TLS error: You have not chosen to trust “Certificate Authority” the issuer of the server’s security certificate.

What can a Citrix Administrator do to prevent users from viewing this message?

A. Ensure that the intermediate Certificate is linked to the Root Certificate.

B. Ensure that the user has the Server Certificate installed.

C. Ensure that the user has the Certificate’s Public key.

D. Ensure that the intermediate Certificate is linked to the Server Certificate.




QUESTION 13View the Exhibit.

A Citrix Administrator has configured the commands using the command-line interface.

Click on the ‘Exhibit’ button to view the screenshots of the command-line interface.

What will be the effect of the rewrite policy, based on the exhibit?

A. HTTP Header “SSL_parameter: [email protected]” will be inserted in every RESPONSE.

B. HTTP Header “SSL_parameter: [email protected]” will be inserted in every REQUEST.


C. HTTP Header “SSL_parameter: C=IN, ST=KA, O=Mylab, [email protected]” will be inserted in every RESPONSE.

D. HTTP Header “SSL_parameter: C=IN, ST=KA, O=Mylab, [email protected]” will be inserted in every REQUEST.



QUESTION 14Which command should a Citrix Administrator use to configure a Content Switching virtual server for implementing the Secure Web Gateway in the transparentproxy mode?

A. add cs vserver swgVS PROXY 192.168.10.1 80 –Authn401 on –authnVsName explicit-auth-vs

B. add cs vserver swgVS PROXY ** –Authn401 on –authnVsName explicit-auth-vs

C. add cs vserver swgVS PROXY 192.168.10.1 –Authn401 on –authnVsName transparent-auth-vs

D. add cs vserver swgVS PROXY * 21 –Authn401 on –authnVsName transparent-auth-vs

Correct Answer: CSection: (none)Explanation


QUESTION 15Scenario: A Citrix Administrator has configured a Responder policy as follows:

add responder action Redirect_Act respond with “DIAMETER.NEW_REDIRECT(\”aaa://host.example.com\”)”add responder policy Redirect_Pol “diameter.req.avp(264).value.eq(\”host1.example.net\”)” Redirect_Actbind lb vserver vs1 –policyName Redirect_Pol –priority 10 –type REQUEST

What will be the effect of this configuration?

A. Response originated from “host.example.net” will be redirected to “host1.example.com”.

B. Request originated from “host.example.net” will be redirected to “host1.example.com”.

C. Response originated from “host1.example.net” will be redirected to “host.example.com”.

D. Request originated from “host1.example.net” will be redirected to “host.example.com”.




QUESTION 16Scenario: A Citrix Administrator of a Linux environment needs to load-balance the web servers in an environment. However, due to budget constraints, theadministrator is NOT able to implement a full-scale solution.

What can the administrator do to load-balance the web servers in this scenario?

A. Purchase a NetScaler SDX.

B. Install a NetScaler CPX.

C. Purchase a NetScaler MPX.

D. Install NetScaler VPX.



QUESTION 17POLICY 1:add rewrite action ACT_1 corrupt_http_header Accept-Encodingadd rewrite policy POL_1 HTTP.REQ.IS_VALID ACT_1

POLICY 2:add rewrite action ACT_2 insert_http_header Accept-Encoding “\”identity\””add rewrite policy POL_2 “HTTP.REQ.IS_VALID” ACT_2 How can a Citrix Administrator bind the rewrite policies to the LB vserver lb_vsrv such that POL_2 is evaluated after POL_1 is evaluated successfully?

A. bind lb vserver lb_vsrv –policyName POL_1 –priority 110 –gotoPriorityExpression NEXT –type REQUESTbind lb vserver lb_vsrv –policyName POL_2 –priority 100 –gotoPriorityExpression END –type REQUEST

B. bind lb vserver lb_vsrv –policyName POL_1 –priority 90 –type REQUEST


bind lb vserver lb_vsrv –policyName POL_2 –priority 100 –type REQUEST

C. bind lb vserver lb_vsrv –policyName POL_1 –priority 90 –gotoPriorityExpression NEXT –type REQUESTbind lb vserver lb_vsrv –policyName POL_2 –priority 100 –gotoPriorityExpression END –type REQUEST

D. bind lb vserver lb_vsrv –policyName POL_1 –priority 90 –gotoPriorityExpression END –type REQUEST bind lb vserver lb_vsrv –policyName POL_2 –priority 80 –gotoPriorityExpression NEXT –type REQUEST



QUESTION 18Which VLAN(S) will be bound to an interface, if VLAN 20 is bound to the interface as tagged in an environment where NetScaler is configured with the defaultsettings?


A. VLAN 20 untagged only

B. VLAN 1 tagged, VLAN 20 tagged

C. VLAN 1 untagged, VLAN 20 tagged

D. VLAN 20 tagged only



QUESTION 19Which two options should a Citrix Administrator consider when adding a secondary device in a high availability (HA) pair? (Choose two.)


A. Configure the HA status of the Primary Node as STAYPRIMARY.

B. HA Monitoring should be disabled on all the unused interfaces.

C. Both the devices should have different SNIP addresses.

D. The nsroot password should be the same on both nodes.

E. The Independent Network Configuration (INC) mode should be enabled.

Correct Answer: AESection: (none)Explanation


QUESTION 20Scenario: External users are currently experiencing delays while accessing XenApp and XenDesktop through the NetScaler. A Citrix Administrator needs tomonitor the ICA connections to gather the performance information from the NetScaler Management and Analytics System (MAS).

Which two tools can the administrator use to gather information about WAN Latency, DC Latency and Host Delay? (Choose two.)

A. HDX Insight

B. Gateway Insight

C. Web Insight

D. TCP Insight

Correct Answer: ACSection: (none)Explanation


QUESTION 21Scenario: A Citrix Administrator has configured the following Access Control List (ACL) to block traffic from the IP address 10.102.29.5.

add simpleacl rule1 DENY –srcIP 10.102.29.5

A week later, the administrator found that the ACL is no longer present on the NetScaler.

What could be the reason for this?


A. The administrator did NOT run the apply ACL command.

B. The NetScaler has been restarted without saving the configurations.

C. The Simple ACLs remain active for only 600 seconds.

D. The Simple ACLs remain active for only 60 seconds.



QUESTION 22Scenario: A Citrix Administrator has configured an Authentication, Authorization, and Auditing (AAA) action policy to allow users access through the NetScaler. Theadministrator bound the policy to a specific virtual server.

Which policy expression will allow all users access through the virtual server?

A. ns_disallow

B. ns_false

C. ns_allow

D. ns_true



QUESTION 23View the Exhibit.


A Citrix Administrator has executed the commands in the screenshot on the NetScaler using the command-line interface.

Click on the ‘Exhibit’ button to view the screenshot of the command-line interface.

Which two replacements will be the outcome of executing these commands? (Choose two.)

A. http:// will be replaced by https:// in the HTTP RESPONSE

B. https:// will be replaced by http:// in the HTTP RESPONSE

C. http:// will be replaced by https:// in the HTTP REQUEST

D. https:// will be replaced by http:// in the HTTP REQUEST

Correct Answer: BDSection: (none)Explanation


QUESTION 24Scenario: A Citrix Administrator needs to add 10 new web servers to an existing server farm. The new servers are configured to serve the same applications andconnections and are twice the capacity of the existing servers. The administrator wants to ensure that they are being fully utilized. Currently in the environment, thedefault load-balancing method is being used.

To ensure that only the 10 new servers are receiving twice the connections of the old servers without changing the load balancing to the rest of the environment, theadministrator needs to add a weight of ______________ to the services attached to the ______________ servers. (Choose the correct option to complete the


sentence.)

A. 50; new

B. 50; old

C. 2; new

D. 2; old



QUESTION 25Scenario: A Citrix Administrator is executing the following commands on the NetScaler:

add policy dataset Admin_group ipv4bind policy dataset Admin_group 192.168.149.10 –index 11bind policy dataset Admin_group 192.168.149.39 –index 12bind policy dataset Admin_group 192.168.149.49 –index 13add responder policy POL_1 “!(CLIENT.IP.SRC.TYPECAST_TEXT_T.CONTAINS_ANY(\”Admin_group\”))” RESETbind lb vserver ln_vsrv_www –policyName POL_1 –priority 100 –gotoPriorityExpression END –type REQUEST

What will be the effect of these commands?

A. All the traffic from users with a source IP address of 192.168.149.10, 192.168.149.39, or 192.168.149.49 will be blocked through the NetScaler.

B. Only the users with a source IP address of 192.168.149.10, 192.168.149.39, or 192.168.149.49 will be allowed to connect to vserver lb_vsrv_www.

C. Only the users with a source IP address of 192.168.149.10, 192.168.149.39, or 192.168.149.49 will be blocked when attempting to connect to vserverlb_vsrv_www.

D. Only the users with a source IP address of 192.168.149.10 or 192.168.149.39 will be allowed to connect to the virtual server.



QUESTION 26


Which three statements are true when comparing a Simple Access Control List (ACL) to an Extended ACL? (Choose three.)

A. Simple ACLs can be modified.

B. Extended ACLs have priorities.

C. Simple ACLs apply first.

D. Extended ACLs apply first.

E. Simple ACLs are based on the Source IP address only.

F. Simple ACLs can bridge traffic.

G. Simple ACLs can be based on the Source and Destination IP address.

Correct Answer: BCESection: (none)Explanation


QUESTION 27Scenario: A Citrix Administrator manages an environment that has a NetScaler high availability (HA) pair running on two MPX appliances. The administratornotices that the state of the Secondary NetScaler is ‘Unknown’ and moves the Secondary NetScaler to a new switch as a result. Also, the administrator captured apacket trace on both NetScalers. Both sent traffic on secure port 3009 and were routing back and forth to each other.

What is causing the Secondary state to be ‘Unknown’?


A. The firewall is blocking communication between the switches.

B. The administrator made both NetScalers Primary.

C. The Secondary NetScaler CANNOT communicate in HA when moved to a new switch.

D. The remote procedure call (RPC) nodes are NOT configured correctly.

Correct Answer: ASection: (none)


Explanation


QUESTION 28Which three authentication types can a Citrix Administrator use for NetScaler AAA dual-factor authentication? (Choose three.)

A. TACACS+

B. RADIUS

C. ADFS

D. LINUX

E. LDAP

Correct Answer: ABESection: (none)Explanation


QUESTION 29Scenario: A Citrix Administrator has configured an HTTP load-balancing virtual server with Least Response Time as the load-balancing algorithm.

The administrator notice that requests to the virtual server appear to be using the Round Robin load-balancing algorithm.

What could be causing the virtual server to use Round Robin load-balancing algorithm?

A. The services that are bound to the HTTP virtual server are using the PING monitor.

B. The virtual server is in startup round robin mode.

C. Least Response Time CANNOT be used as a load-balancing algorithm on an HTTP virtual server.

D. The NetScaler configuration has NOT been saved yet.




QUESTION 30Scenario: A NetScaler is configured with the following modes:

MBFUSIPUSNIPLayer 3 mode

A Citrix Administrator configured a new router and now requires some of the incoming and outgoing traffic to take different paths through the new router. However,the administrator notices that this is failing and takes a network trace. After a short monitoring period, the administrator notices that the packets are still NOT gettingto the new router from the NetScaler.

Which mode should the administrator disable on the NetScaler to facilitate the addition of the new router and successfully route the packets?

A. Layer 3 mode

B. USIP

C. MAC-based Forwarding

D. USNIP



QUESTION 31A Citrix Administrator notices that the NetScaler is sending the IP addresses of all the active services in the DNS response.

The administrator can use the set gslb vserver<name> ________________ parameter to avoid this behavior. (Choose the correct option to complete the sentence.)

A. EDR DISABLED

B. EDR ENABLED

C. MIR ENABLED

D. MIR DISABLED




QUESTION 32A Citrix Administrator needs to configure a rate limiting policy for the DNS requests to a threshold of 1000 DNS requests per second.

Which set of commands does the administrator need to run to correctly configure the rate limiting policy?

A. add stream selector DNSSelector1 client.udp.dns.domainadd ns limitIdentifier DNSLimitIdentifier1 –threshold 5 –timeSlice 1000 –selectorName DNSSelector1add dns policy DNSLimitPolicy1 “sys.check_limit(\”DNSLimitIdentifier1\”)” –preferredLocation “North America.US.TX.Dallas..”bind dns global DNSLimitPolicy1 5

B. add stream selector DNSSelector1 client.udp.dns.domainadd ns limitIdentifier DNSLimitIdentifier1 –threshold 5 –timeSlice 1000 –selectorName DNSSelector1add dns policy DNSLimitPolicy1 “sys.check_limit(\”DNSLimitIdentifier1\”)” –preferredLocation “North America.US.TX.Dallas..”

C. add stream selector DNSSelector1 client.udp.dns.domainadd ns limitIdentifier DNSLimitIdentifier1 –threshold 1000 –timeSlice 1000 –selectorName DNSSelector1add dns policy DNSLimitPolicy1 “sys.check_limit(\”DNSLimitIdentifier1\”)” –preferredLocation “North America.US.TX.Dallas..”

D. add stream selector DNSSelector1 client.udp.dns.domainadd ns limitIdentifier DNSLimitIdentifier1 –threshold 1000 –timeSlice 1000 –selectorName DNSSelector1add dns policy DNSLimitPolicy1 “sys.check_limit(\”DNSLimitIdentifier1\”)” –preferredLocation “North America.US.TX.Dallas..”bind dns global DNSLimitPolicy1 5



QUESTION 33Scenario: An organization has a ‘bring your own device’ (BYOD) policy, so it is NOT feasible to set up proxy settings on each device in the network.

They need to implement NetScaler Secure Web Gateway to intercept all the traffic to block access to URLs serving harmful/insecure content or the URLs that areidentified as social networking sites, career, and job search portals.

Which proxy mode of the Secure Web Gateway should be used in this case?

A. Transparent

B. Explicit


C. Advanced

D. HTTP



QUESTION 34What is the effect of the set cmp parameter –cmpBypassPct 70 command if compression is enabled on the NetScaler?

A. Compression will be bypassed if the NetScaler bandwidth consumption is more than 70%.

B. Compression will be bypassed if the NetScaler CPU load is 70%.

C. Compression will be bypassed if the NetScaler bandwidth consumption is less than 70%.

D. Compression will be bypassed if the NetScaler Memory utilization is 70%.



QUESTION 35Scenario: A Citrix Administrator is managing a NetScaler SDX running eight NetScaler instances. The administrator first needs to upgrade the firmware on theinstances. However, the administrator is concerned that it needs to be done all at once.

What upgrading flexibility does SDX provide in this scenario?

A. The NetScaler instance can be upgraded at the SDX management level, allowing all instances to be upgraded at once.

B. It is NOT possible to upgrade the NetScaler instances to different firmware versions.

C. The NetScaler instance can be upgraded on an individual basis, allowing all instances to run different firmware versions.

D. The NetScaler instances have to be upgraded at the same time.




QUESTION 36How does the NetScaler communicate that IP-to-MAC address bindings have changed to the switches and routers on the network, when a NetScaler highavailability (HA) pair failover occurs?

A. The NetScaler uses Gratuitous ARPs (GARPs) to update the devices on the network.

B. The NetScaler uses MAC-based Forwarding to update the routers.

C. The NetScaler uses Proxy ARP to update the devices on the network.

D. The NetScaler uses Reverse ARP (RARP) to update the devices on the network.



QUESTION 37What is the effect of the set gslb parameter – IdnsprobeOrder DNS PING TCP command in an Active/Active Global Server Load Balancing (GSLB) setup?

A. The order to calculate the Empty Domain Service (EDS) for Dynamic proximity will be the DNS UDP query followed by the PING and then TCP.

B. The order to calculate the Round-trip time (RTT) for Dynamic proximity will be the DNS UDP query followed by the PING and then TCP.

C. The order to calculate the Time to live (TTL) proximity will be the DNS UDP query followed by the PING and then TCP.

D. The order to calculate the Multiple IP responses (MIR) for Dynamic proximity will be the DNS UDP query followed by the PING and then TCP.



citrix.testking.1y0-240.v2017-11-07.by.kimi · 2017. 11. 7. · question 11 scenario: a citrix...

Documents