Citrix CCA-N 1Y0-231 Questions & Answers

• Question 1:

  After being audited, a Citrix Administrator learns that additional security enhancements should be made to one of the virtual servers.

  Which two actions can the administrator perform to accomplish this? (Choose two.)

  A. Enable the TLSv1.2.

  B. Enable the RC4 cipher suite.

  C. Create a SHA1 key.

  D. Disable the SSLv3.

  Correct Answer: AC

• Question 2:

  A Citrix Administrator needs to configure a Citrix Gateway virtual server to meet an organization's security requirements.

  Which two types of devices can the administrator control with Endpoint Analysis (EPA) scans? (Choose two.)

  A. iOS

  B. Mac

  C. Microsoft Windows

  D. Chromebook

  E. Android

  Correct Answer: BC

  Reference: https://shop.adn.de/out/media/citrix_netscaler_gw.pdfs

• Question 3:

  Scenario: A Citrix Administrator would like to grant access to a Junior Citrix Administrator on the Citrix ADC. The administrator would like to grant full access to everything except:

  Shell User configuration Partition configuration

  Which preexisting command policy would meet the needs of this scenario?

  A. Network

  B. Operator

  C. Sysadmin

  D. Superuser

  Correct Answer: C

  Reference: https://docs.citrix.com/en-us/citrix-adc/current-release/system/authentication-and-authorizationfor-system-user/user-usergroups-command-policies.html

• Question 4:

  Scenario: A Citrix Administrator suspects an attack on a load-balancing virtual server (IP address 192.168.100.25). The administrator needs to restrict access to this virtual server for 10 minutes.

  Which access control list (ACL) will accomplish this?

  A. add ns acl rule1 DENY -destIP 192.168.100.25 -TTL 600000

  B. add simpleacl rule1 DENY -srcIP 192.168.100.25 -TTL 600000

  C. add ns acl rule1 DENY -destIP 192.168.100.25 -TTL 600

  D. add simpleacl rule1 DENY -srcIP 192.168.100.25 -TTL 600

  Correct Answer: D

• Question 5:

  A Citrix Administrator needs to integrate an existing certification-based authentication policy into an existing Citrix Gateway virtual server.

  Which three steps can the administrator take to accomplish this? (Choose three.)

  A. Bind the existing CERT authentication policy to the Citrix Gateway virtual server.

  B. Enable the two-factor option on the existing CERT authentication profile.

  C. Enable client authentication on the SSL parameters of the virtual server.

  D. Change the client certificate to mandatory on the SSL parameters of the virtual server.

  E. Create a CERT authentication policy and bind it to the Citrix Gateway virtual server.

  Correct Answer: CDE

  Reference: https://docs.citrix.com/en-us/citrix-gateway/current-release/authentication-authorization/ configure-client-cert-authentication/ng-client-cert-vserver-and-bind-tsk.html

• Question 6:

  A Citrix Administrator configured a Citrix Gateway virtual server for authentication, but there is no authentication policy bound to the virtual server.

  Which authentication binding point will the Citrix ADC evaluate next?

  A. Override global

  B. Group

  C. Default global

  D. User

  Correct Answer: D

• Question 7:

  A Citrix Administrator needs to block all local printer access from users in the Marketing department who are connecting remotely, but who should still have access when connecting inside the corporate network using the same Citrix Gateway.

  What can the administrator configure to accomplish this?

  A. SmartControl

  B. Extended access control list (ACL)

  C. Simple access control list (ACL)

  D. AppFlow

  Correct Answer: A

  Reference: https://docs.citrix.com/en-us/citrix-gateway/current-release/integrate-web-interface-apps/smartcontrol.html

• Question 8:

  A Citrix Administrator wants to customize the look of the landing page presented to users during the authentication process on Citrix ADC.

  Which nFactor component should the administrator modify in this scenario?

  A. Logon Schema

  B. Pass-through factor

  C. Next factor

  D. NoAuth Policy

  Correct Answer: A

  Reference: https://docs.citrix.com/en-us/citrix-adc/current-release/aaa-tm/authentication-methods/multifactor-nfactor-authentication/nfactor-authentication-configuring.html

• Question 9:

  Scenario: A Citrix Administrator is configuring a new authentication, authorization, and auditing (AAA) virtual server, and the status is DOWN. The administrator makes the below configurations:

  add lb vserver lb_vsrv_www HTTP 10.107.149.229 80 -persistenceType NONE -cltTimeout 180 -authn401 ON -authnVsName SAML_SP bind lb vserver lb_vsrv_www_ssl Red_srv bind lb vserver Ib_vsrv_www_ssl Blue_srv add authentication vserver SAML_SP SSL 10.107.149.230 443 -AuthenticationDomain citrix.lab

  What should the administrator bind to the virtual server SAML_SP to complete the installation and change the status to UP?

  A. An SSL certificate

  B. A service

  C. An AAA policy

  D. An LDAP policy

  Correct Answer: D

• Question 10:

  Which feature can a Citrix Administrator use to create a consistent set of front-end SSL parameters across multiple SSL virtual servers?

  A. SSL bridge

  B. SSL multiplexing

  C. SSL policy

  D. SSL profile

  Correct Answer: D

  Reference: https://docs.citrix.com/en-us/citrix-adc/current-release/ssl/ssl-profiles.html