Citrix Citrix Certifications 1Y0-240 Questions & Answers

• Question 71:

  Scenario: The Director of network security in a financial organization wants to protect the enterprise network from any external malware threats. To do this, the director needs to gain visibility into otherwise-bypassed traffic and control access to malicious web sites. The director is required to do the following:

  Intercept and examine all the traffic, including SSL/TLS (encrypted traffic), coming in, and going out of the

  enterprise network.

  Block access to URLs identified as serving harmful or insecure content.

  Identify users (employees) in the enterprise who are accessing malicious websites.

  Which NetScaler deployment mode should a Citrix Administrator use to achieve this requirement?

  A. Unified Gateway

  B. Secure Web Gateway

  C. NetScaler Gateway

  D. Access Gateway

  Correct Answer: B

• Question 72:

  Which NetScaler Access Control List (ACL) command can a Citrix Administrator use to bridge traffic originating from 192.168.10.200?

  A. add ns acl

  B. add ns acl6

  C. add ns simpleacl

  D. add ns simpleacl6

  Correct Answer: A

• Question 73:

  Click the "Exhibit" button to view the screenshot.

  

  How will the HTTP request "http://xenapp.training.lab/url1" be redirected based on the screenshot?

  A. The request will be sent to LB_vserver1.

  B. The request will be sent to lb_vsrv_www.

  C. The request will be dropeed at the CS vServer.

  D. The request will be sent to LB_vserver2.

  Correct Answer: A

• Question 74:

  A Citrix Administrator is configuring a NetScaler high availability (HA) pair and needs to ensure that one Net Scaler is UP and primary at all times to ensure the business websites are always available.

  What does the administrator need to do to ensure that the NetScalers still handle web traffic in the event that both nodes become unavailable or fail a health check?

  A. Configure HA Fail-safe mode on the Primary NetScaler only.

  B. Disable HA Fail-safe mode on the Primary NetScaler only.

  C. Disable HA Fail-safe mode on the Secondary NetScaler.

  D. Configure HA Fail-safe mode on each NetScaler independently.

  Correct Answer: D

• Question 75:

  A Citrix Administrator is configuring Unified Gateway with authentication policies.

  Where should the administrator configure NetScaler Gateway authentication policies?

  A. Global level

  B. Unified Gateway level

  C. Content-Switching level

  D. NetScaler Gateway level

  Correct Answer: D

• Question 76:

  Scenario: An organization has a `bring your own device' (BYOD) policy, so it is NOT feasible to set up proxy settings on each device in the network.

  They need to implement NetScaler Secure Web Gateway to intercept all the traffic to block access to URLs serving harmful/insecure content or the URLs that are identified as social networking sites, career, and job search portals.

  Which proxy mode of the Secure Web Gateway should be used in this case?

  A. Transparent

  B. Explicit

  C. Advanced

  D. HTTP

  Correct Answer: A

• Question 77:

  A Citrix Administrator would like to configure the network in a way that will allow the traffic requests coming from the client to pass through the NetScaler, but the responses from the back-end resources will be sent directly to the client bypassing the NetScaler.

  Which feature can the administrator use for this configuration?

  A. Policy-based Routing

  B. Use Source IP (USIP) address

  C. Direct Server Return (DSR)

  D. SmartAccess

  Correct Answer: D

• Question 78:

  Scenario: A Citrix Administrator has configured an Authentication, Authorization, and Auditing (AAA) action policy to allow users access through the NetScaler. The administrator bound the policy to a specific virtual server.

  Which policy expression will allow all users access through the virtual server?

  A. ns_disallow

  B. ns_false

  C. ns_allow

  D. ns_true

  Correct Answer: C

• Question 79:

  Scenario: A NetScaler is configured with Interface 1/1 and bound to VLAN 40. A Citrix Administrator has executed the following command:

  bind vlan 20 -ifnum 1/1

  What is the result of executing the command on the NetScaler?

  A. Interface 1/1 is bound to VLAN 20, and native VLAN is 1.

  B. Interface 1/1 is bound to VLAN 20, and native VLAN is 20.

  C. Interface 1/1 is bound to VLAN 20, and native VLAN is NOT changed.

  D. Interface 1/1 is bound to VLAN 20, and native VLAN is 40.

  Correct Answer: D

• Question 80:

  How can a Citrix Administrator configure a rewrite policy to change the version of HTTP from HTTP 1.1 to HTTP 1.0 in every request?

  A. add rewrite action RW_ACT replace http.res.version "\"HTTP/1.1\""add rewrite policy RW_POL true RW_ACT

  B. add rewrite action RW_ACT replace http.req.version "\"HTTP/1.1\""add rewrite policy RW_POL true RW_ACT

  C. add rewrite action RW_ACT replace http.res.version "\"HTTP/1.0\""add rewrite policy RW_POL true RW_ACT

  D. add rewrite action RW_ACT replace http.req.version "\"HTTP/1.0\""add rewrite policy RW_POL true RW_ACT

  Correct Answer: B