Citrix Citrix Certifications 1Y0-230 Questions & Answers

• Question 91:

  A Citrix Administrator needs to configure single sign-on to a StoreFront server using an external, secure single URL.

  Which type of virtual server can the administrator use to meet this requirement?

  A. Load Balancing

  B. Content Switching

  C. VPN

  D. Unified Gateway

  Correct Answer: D

• Question 92:

  Users are experiencing resets form the Intranet server website, which is load-balanced trough the NetScaler.

  Which NetScaler tool can a Citrix Administrator use to troubleshoot the reset issue?

  A. Take a packet trace with nstrace and analyze with WireShartk.

  B. Look in the Event Viewer for packet resets from the NetScaler.

  C. View the new nslog form the command-line interface to look for packet resets form the NetScaler.

  D. Use the nslog to look for packet resets on the NetScaler.

  Correct Answer: D

• Question 93:

  Scenario: A NetScaler Gateway provides ICA Proxy to an internal Citrix Virtual Desktop site in an environment. The security team wants the Citrix Administrator to configure the Citrix ADC to block client drives if the client device fails a security scan.

  Which Citrix ADC feature allows the administrator to satisfy the security team's requirements without making changes to the Citrix Virtual Desktop configuration?

  A. Traffic Policy

  B. Smart Access

  C. SmartControl

  D. Authorization Policy

  Correct Answer: D

• Question 94:

  Scenario: A user is attempting to access a web server, which is load-balanced by the NetScaler using HTTPS. The user received the following message:

  SSL/TLS error: You have not chosen to trust "Certificate Authority" the issuer of the server's security certificate.

  What can a Citrix Administrator do to prevent users from viewing this message?

  A. Ensure that the intermediate Certificate is linked to the Server Certificate.

  B. Ensure that the user has the Server Certificate installed.

  C. Ensure that the intermediate Certificate is linked to the Root Certificate.

  D. Ensure that the user has the Certificate's Public key.

  Correct Answer: A

  Reference: https://support.citrix.com/article/CTX108800

• Question 95:

  A Citrix Administrator needs to generate AppFlow data for internal ICA connections.

  Which two connection methods could the administrator use to route internal ICA connections through NetScaler without modifying the existing network routing? (Choose two.)

  A. Policy-based Routing

  B. ICA Proxy

  C. SOCKS proxy

  D. Transparent Mode

  Correct Answer: AD

• Question 96:

  Scenario: A Citrix Administrator notices user sessions are disconnecting and reconnecting more often this week than last week, signaling a problem.

  The administrator troubleshoots this issue and prepares to resolve it using persistence. However, the following considerations apply in the environment:

  -It is a multi-proxy environment behind the NetScaler.

  -USIP mode is enabled and applied to the services.

  -The session timeout is very short.

  -All users connect from the same location.

  The Administrator can use persistence based on the _____________setting to resolve this issue. (Choose the correct option to complete the sentence.)

  A. HTTP Cookies

  B. Proximity

  C. SSL Session IDs

  D. Subnet IP

  Correct Answer: A

• Question 97:

  Scenario: A Citrix Administrator suspects an attack on a load-balancing virtual server. The administrator needs to restrict access to the load-balancing virtual server (192.168.100.25) for 10 minutes.

  Which Access Control List (ACL) will help to accomplish this requirement?

  A. add ns acl rule1 DENY –destIP 192.168.100.25- TTL 600000

  B. add simpleacl rule1 DENY- srcIP 192.168.100.25- TTL 600

  C. add ns acl rule1 DENY –destIP 192.168.100.25- TTL 600

  D. add simpleacl rule1 DENY- srcIP 192.168.100.25- TTL 600000

  Correct Answer: C

  Reference: https://docs.citrix.com/ja-jp/netscaler/11/reference/netscaler-command-reference/ns/nsacl.html

• Question 98:

  A Citrix Administrator is configuring a Citrix ADC high availability (HA) pair and needs to ensure that one Citrix ADC is UP and primary at all times to ensure the business websites are always available.

  What does the administrator need to do ensure that the Citrix ADCs still handle web traffic in the event that both nodes become unavailable or fail a health check?

  A. Disable HA Fail-safe mode on the Secondary Citrix ADC.

  B. Configure HA Fail-safe mode on each Citrix ADC independently.

  C. Disable HA Fail-safe mode on the Primary Citrix ADC only.

  D. Configure HA Fail-safe mode on the Primary Citrix ADC only.

  Correct Answer: D

  Reference: http://www.citrixguru.com/2015/09/14/lab-part-6-configure-netscaler-11-high-availability-hapair/

• Question 99:

  Scenario: A Citrix Administrator has configured a Citrix ADC active-passive high availability (HA) pair. When the HA pair fails over, customers are unable to access the hosted websites. After some troubleshooting, the administrator found that the upstream router was NOT updating its ARP table.

  What can the administrator configure to resolve this issue?

  A. Independent Network Configuration (INC) mode

  B. Virtual MAC

  C. HA monitor D. Route Monitor

  Correct Answer: B

• Question 100:

  Scenario: A Citrix Administrator is managing a Citrix ADC SDX running eight Citrix ADC instances. The administrator first needs to upgrade the firmware on the instances. However, the administrator is concerned that it needs to be done all at once.

  What upgrading flexibility does SDX provide in this scenario?

  A. The Citrix ADC instance can be upgraded at the SDX management level, allowing all instances to be upgraded at once.

  B. The Citrix ADC instances have to be upgraded at the same time.

  C. The Citrix ADC instance can be upgraded on an individual basis, allowing all instances to run different firmware versions.

  D. It is NOT possible to upgrade the Citrix ADC instances to different firmware versions.

  Correct Answer: A