Citrix NetScaler 1Y0-230 Questions & Answers

• Question 1:

  Scenario: A Citrix ADC receives packets that are destined for a MAC address owned by the Citrix ADC. The destination IP address of the packets does not belong to the Citrix ADC. Layer 3 Mode is enabled by default on the Citrix ADC.

  What will the Citrix ADC do with the packets in this scenario?

  A. Drop the packets

  B. Process the packets

  C. Bridge the packets.

  D. Route the packets.

  Correct Answer: D

  Reference: https://docs.citrix.com/en-us/netscaler/12/getting-started-with-netscaler/where-netscaler-innetwork.html

• Question 2:

  How does the NetScaler communicate that IP-to-MAC address bindings have changed to the switches and routers on the network, when a NetScaler high availability (HA) pair failover occurs?

  A. The NetScaler uses Reverse ARP (RARP) to update the devices on the network

  B. The NetScaler uses Proxy ARP to update the devices on the network

  C. The NetScaler uses Gratuitous ARPs (GARPs) to update the devices on the network

  D. The NetScaler uses MAC-based Forwarding to update the routers

  Correct Answer: C

• Question 3:

  Which type of Citrix ADC Service Monitor can a Citrix Administrator use to test a three-way handshake between the Citrix ADC and the back-end server?

  A. UDP

  B. PING

  C. TCP

  D. LDAP

  Correct Answer: C

• Question 4:

  A Citrix Administrator needs to customize the user experience for users connecting with the Citrix Gateway

  plug-in.

  Which three options can the administrator configure in this customization, using session and traffic

  policies? (Choose three.)

  A. The level of user access to the applications

  B. Single sign-on

  C. Split tunneling

  D. The domains to which users are allowed access

  E. Authentication methods

  Correct Answer: CDE

• Question 5:

  Which type of policy should a Citrix Administrator configure to ensure that only users who have data antivirus protection can connect to the environment?

  A. Traffic

  B. Pre-Authentication Scan

  C. Smart Control

  D. SmartAccess

  Correct Answer: B

• Question 6:

  Scenario: A Junior Citrix Administrator needs to create a Content Switching virtual server on a NetScaler high availability (HA) pair. The NSIP addresses are 192.168.20.10 and 192168.20.11. The junior administrator connects to NSIP address 192.168.20.10 and saves the changes. The following day, a Senior Citrix Administrator tries to test the new Content Switching virtual server, but it is NOT working. The senior administrator connects to the HA pair and everything the junior administrator configured is gone. Why did the NetScalers lose the newly added configurations?

  A. The NetScaler appliances are NOT at the same firmware version

  B. The junior administrator connected to the NSIP of the secondary NetScaler in the HA pair

  C. Both NetScalers in the HA pair restarted overnight, losing the configuration

  D. The junior administrator made the changes and did NOT force a failover to save the configuration

  Correct Answer: C

• Question 7:

  Scenario: User authentication is failing through the NetScaler. A Citrix Administrator checked the Authentication, Authorization and Auditing (AAA) policy, action and virtual server and verified that the correct configuration was in place. The administrator bypassed the NetScaler and the authentication worked. Which NetScaler utility can the administrator use to troubleshoot the access issue?

  A. nslog file

  B. aaad.debug

  C. nscon message

  D. Dashboard

  Correct Answer: B

• Question 8:

  Which two options should a Citrix Administrator configure to stop the First-Time wizard from automatically popping up? (Choose two.)

  A. Host Name is NOT configured on the appliance

  B. The appliance is configured with the default IP address (192.168.100.1)

  C. the default Admin Password has NOT been changed

  D. Licenses are NOT present on the appliance

  Correct Answer: BD

  Reference: https://docs.citrix.com/ja-jp/netscaler/11/netscaler-hardware-installation/netscaler-initialconfiguration.html

• Question 9:

  A Citrix Administrator needs to configure a policy where users will be downgraded to `ICA Proxy Only' from

  `Full VPN' in the event a user fails to meet Endpoint Analysis requirements.

  Which configuration is required to satisfy this requirement?

  A. Quarantine Group with nFactor authentication

  B. Quarantine Group with two-factor authentication, using LDAP as primary authentication

  C. Quarantine Group with no Active Directory membership

  D. Quarantine Group with regular Active Directory membership

  Correct Answer: A

• Question 10:

  Which two policy types can a Citrix Administrator apply to a NetScaler Gateway virtual server so that only users accessing with corporate laptops that belong to the network domain are allowed? (Choose two.)

  A. Pre-Authentication

  B. Responder

  C. Authorization

  D. Traffic

  E. Session

  Correct Answer: AB