Citrix Citrix Certifications 1Y0-253 Questions & Answers

• Question 121:

  A company uses various pre-approved user devices in the environment, including mobile devices running

  iOS and Android operating systems.

  Which two types of policies could an administrator use on the NetScaler Gateway virtual server to allow

  access to these mobile devices? (Choose two.)

  A. Rewrite policies, including endpoint analysis scans

  B. Session policies, excluding the endpoint analysis scans

  C. Authorization policies, including the endpoint analysis scans

  D. Pre-authentication policies, excluding the endpoint analysis scans

  Correct Answer: BD

• Question 122:

  Scenario: An administrator is planning to implement NetScaler Gateway. The administrator must ensure

  that users are able to change their passwords when the passwords have expired.

  To meet the needs of the scenario, the administrator must ensure that is included in the

  plan.

  A. LDAP authentication

  B. RADIUS authentication

  C. nested groups (enabled)

  D. the nsroot username added to Active Directory

  Correct Answer: A

• Question 123:

  Which two methods could an administrator use to ensure that all HTTP traffic will be redirected to the NetScaler Gateway virtual server after configuring a NetScaler Gateway virtual server? (Choose two.)

  A. Configure a URL transformation policy, then bind it globally.

  B. Configure a rewrite policy to change all the HTTP requests, then bind it to the NetScaler Gateway virtual server.

  C. Configure a responder policy based on the FQDN pointing to the NetScaler Gateway virtual server, then bind it globally.

  D. Configure an HTTP virtual server with the same NetScaler Gateway virtual server IP address, then configure a redirect URL on it.

  Correct Answer: CD

• Question 124:

  Scenario: An administrator notices that each time the secondary node of a high availability (HA) pair is restarted, the primary node shifts to a non-working state. The administrator runs a command and collects the information displayed below: 1) Node ID. 0 IP: 172.31.250.10 Node StatE. NOT UP Master StatE. Secondary INCStatE.DISABLED Sync StatE. DISABLED Propagation: ENABLED Enabled Interfaces : 1j5 1j1 1j2 1j4 0j1 Disabled Interfaces : 1j3 HA MON ON Interfaces : 1j4 1j1 0j1 Interfaces on which heartbeats are not seen : 1j4 1j1 1j2 1j5 0j1 Interfaces causing Partial FailurE. 1j4 SSL Card Status: UP Hello Interval: 200 msecs DeadInterval:3secs Node in this Master State for: 0:0:0:35 (days:hrs:min:sec) 2) Node ID. 1 IP: 172.31.250.20 Node StatE. UNKNOWNjDOWN Master StatE. UNKNOWN INC StatE. UNKNOWN Sync StatE. UNKNOWN Propagation: UNKNOWN Enabled Interfaces : UNKNOWN Disabled Interfaces : UNKNOWN HA MON ON Interfaces : UNKNOWN SSL Card Status: UNKNOWN

  What could be the cause of this issue?

  A. Synchronization is disabled.

  B. The Hello Interval is set too high.

  C. One of the interfaces is disabled.

  D. One of the HA Monitoring interfaces is failing.

  Correct Answer: D

• Question 125:

  An administrator is setting up two-factor authentication, using Active Directory and RSA SecurID. Which actions could the administrator take to protect the environment from a brute force attack?

  A. Bind Active Directory as Primary authentication priority 100. Bind RSA SecurID as Primary authentication priority 110.

  B. Bind Active Directory as Primary authentication priority 110. Bind RSA SecurID as Primary authentication priority 100.

  C. Bind Active Directory as Secondary authentication priority 100. Bind RSA SecurID as Primary authentication priority 100.

  D. Bind Active Directory as Primary authentication priority 100. Bind RSA SecurID as Secondary authentication priority 100.

  Correct Answer: C

• Question 126:

  Scenario: An administrator plans to publish 2010 Outlook Web Access through Citrix NetScaler AAA and allow users to authenticate using domain credentials and their RSA tokens. Users must also have the ability to change the password when it has expired. The administrator should configure for user authentication and for RSA token authentication. (Choose the correct set of options to complete the sentence.)

  A. LDAP; LDAPS

  B. SAML; RADIUS

  C. LDAPS; RADIUS

  D. RADIUS;RADIUS

  Correct Answer: C

• Question 127:

  Scenario: An administrator needs to deliver production applications to users. Encryption must be

  maintained between the users' managed devices.

  Which two certificates could the administrator use to meet this requirement? (Choose two.)

  A. Public

  B. Private

  C. Trusted

  D. Intermediate

  Correct Answer: AB

• Question 128:

  Scenario:An administratorhas configuredLDAPS authentication, butusersare unable tolog onto theNetScaler Gateway virtual server. The same users are able to log on to other systems. Which action could the administrator take to troubleshoot this issue?

  A. Run telnet ldapsrv.example.com 389 from a PC.

  B. Run telnet from a LDAPS server to the NSIP address.

  C. Run telnet ldapsrv.example.com 636 from the NetScaler shell.

  D. Run telnet ldapsrv.example.com:636 from the NetScaler command-line interface.

  Correct Answer: C

• Question 129:

  An administrator is reviewing the following output:

  vIP(141.128.58.149:80:UP:WEIGHTEDRR): Hits(38200495, 18jsec) Mbps(1.02) Pers(OFF) Err(0) Pkt (186jsec, 610 bytes) actSvc(4) DefPol(NONE) override(0)

  Conn: Clt(253, 1jsec, OE[252/]) Svr(3) S(141.128.49.40:80:UP) Hits(9443063, 4jsec, P[2602342, 0jsec])

  ATr(5) Mbps(0.23)BWlmt(100 kbits) RspTime(112.58 ms)

  Other: Pkt(36jsec, 712 bytes) Wt(10000) RHits(31555)

  Conn: CSvr(42, 0jsec)MCSvr(20)OE(16)RP(11)SQ(0)

  How much traffic is being passed through the public IP address based on the output displayed above?

  A. 100 kbits

  B. 1.02 Mbps

  C. 0.23 Mbps

  D. 112.58 ms

  Correct Answer: B

• Question 130:

  Which action could an administrator take to configure auditing of logon events for all the employees who connected through the NetScaler Gateway for the current day?

  A. Run Idf -hI from the NetScaler command-line interface.

  B. Configure a Syslog policy to send events to a remote server.

  C. Run Icat aaa.debugI from the NetScaler command-line interface.

  D. Review logon events through Reporting > Access Gateway > AAA > AAA Sessions.

  Correct Answer: B