Citrix Citrix Certifications 1Y0-230 Questions & Answers

• Question 51:

  Scenario: A NetScaler has two interfaces as 1/1 and 1/2 with MAC-based Forwarding enabled. Below are the specifications:

  -Interface 1/1 and IP 192.168.10.10 is bound to VLAN 10.

  -On Interface 1/2 VLAN 20 and VLAN 30 are tagged.

  -VLAN 20 is bound to IP 192.168.20.10 and VLAN 30 is bound to 192.168.30.10

  The NetScaler receives a packet for VIP 192.168.30.30 on interface 1/1.

  Which interface of NetScaler will send a reply back in this environment?

  A. Interface 1/1

  B. NetScaler will drop the packet received on interface 1/1

  C. Interface 1/2

  D. Netscaler will reply on interfaces 1/1 and 1/2

  Correct Answer: D

• Question 52:

  What does a Citrix Administrator need to do on Citrix Gateway to ensure that users accept the terms and conditions before they can log on using Citrix Gateway?

  A. Configure a Responder policy.

  B. Upload an HTML file to the Citrix ADC appliance.

  C. Create an end user license agreement (EULA).

  D. Configure a Rewrite policy.

  Correct Answer: C

• Question 53:

  Which scenario will cause automatic high availability (HA) synchronization to fail?

  A. Different build versions

  B. A configuration change to the primary Citrix ADC

  C. A force failover

  D. Manually forced synchronization

  Correct Answer: B

• Question 54:

  Scenario: Users belong to three Authentication, Authorization and Auditing (AAA) groups: Corporate, Finance and Software.

  Show aaa groups: >show aaa group 1) GroupName: Corporate 2) GroupName: Finance 3) GroupName: Software

  Done >show aaa group Corporate GroupName: Corporate Weight: 0 Authorization Policy: pol_1, Type: Classic, Priority: 0 > add authorization policy pol_1 ns_true ALLOW > bind aaa group Corporate -policy pol_1

  The user is being denied resources while aaad.debug shows: Group `corporate' being extracted for user User1

  Why is the user being denied access?

  A. The Authorization policy is NOT configured properly.

  B. The group attribute is NOT configured in the LDAP policy.

  C. AAA group names are NOT the same as those in Active Directory/

  D. LDAP Base DN is incorrect.

  Correct Answer: D

• Question 55:

  Scenario: A Citrix Administrator configured a new Citrix NetScaler Unified Gateway. The administrator would like to see what Endpoint Analysis and Single Sign-on failures have occurred since implementing the new Gateway.

  Which tool can the administrator use to see this data?

  A. Citrix ADC Dashboard

  B. Citrix Application Delivery Management Gateway Insight

  C. aaad.debug

  D. Citrix Application Delivery Management Security Insight

  Correct Answer: B

  Reference: https://docs.citrix.com/en-us/netscaler-mas/12/analytics/mas-gateway-insight.html

• Question 56:

  Scenario: A Citrix Administrator is configuring balancing on a NetScaler appliance for the company web servers. The administrator needs to create a custom monitor that will look for a specific keyword response from the website and will be used to keep the services in an UP state.

  Which type of monitor can the administrator create to accomplish this scenario?

  A. An HTTP-ECV monitor with the keyword in the Special Parameters- Receive String field.

  B. A customer TCP-ECV monitor with the keyword in the Special Parameters- Receive String field.

  C. An HTTP monitor with the keyword in the Special Parameters- Response Codes field.

  D. A TCP monitor with the keyword in the Special Parameters- Response Codes field.

  Correct Answer: C

• Question 57:

  Which three NetScaler features can a Citrix Administrator use for default syntax policies? (Choose three.)

  A. SSL

  B. Rewrite

  C. Integrated caching

  D. Protection

  E. Responder

  Correct Answer: ABE

  Reference https://docs.citrix.com/zh-cn/netscaler/11/appexpert/policies-and-expressions/ns-pi-intro-polexp-wrapper-con/ns-pi-adv-class-pol-con.html

• Question 58:

  Scenario: A Citrix Administrator was notified that all contractor user IDs will start with the prefix "con." Currently SmartControl is used to restrict access to peripherals.

  Which expression can the administrator use to accomplish this requirement?

  A. HTTP.REQ.USERNAME.CONTAINS("con").NOT

  B. HTTP.REQ.USER.IS_MEMBER_OF("con").NOT

  C. HTTP.REQ.USER. IS_MEMBER-OF ("con")

  D. HTTP.REQ.USERNAME.CONTAINS ("con")

  Correct Answer: C

  Reference https://support.citrix.com/article/CTX200261

• Question 59:

  Scenario: A Citrix Administrator entered the command-line interface commands below to prevent IP address 10.10.100 from accessing the NetScaler on port 80.

  add simpleacl rule1 DENY- srcIP 10.10.10.100 –TTL 600 add simpleacl rule2 DENY- srcIP 10.10.10.100 –destPort 80 add ns acl rule1 DENY- srcIP 10.10.10.100-priority 10 add ns acl rule2 DENY- srcIP 10.10.10.100-priority 100 apply ns acls

  Which Access Control List (ACL) will the NetScaler use to deny the IP address?

  A. add ns acl rule1 DENY-srcIP 10.10.10.100-priority 10

  B. add simpleacl rule1 DENY- srcIP 10.10.10.100 –TTL 600

  C. add simpleacl rule2 DENY- srcIP 10.10.10.100 –destPort 80

  D. add ns acl rule2 DENY- srcIP 10.10.10.100-priority 100

  Correct Answer: B

• Question 60:

  Scenario: A Citrix Administrator has given permissions to team members to access their own admin partition, so they can add resources for different departments and manage them without making changes to the default NetScaler partition and configuration.

  One team member was trying to use the command-line interface to trouble an authentication issue and could NOT use aaad.debug. However, the team member has full permissions on the admin partition.

  What can be the cause of this issue?

  A. The team member needs to troubleshoot the issue form the GUI.

  B. The team member does NOT have Shell access by design.

  C. The team member does NOT have permission to use the CLI.

  D. The team member is NOT using the CLI correctly.

  Correct Answer: C