[Jan 18, 2022] 1Y0-241 certification guide Q&A from Training Expert Exam4Free
1Y0-241 Certification Overview Latest 1Y0-241 PDF Dumps
NEW QUESTION 11
Scenario: After deploying a Citrix ADC in production, a Citrix Administrator notices that client requests are NOT being evenly distributed among backend resources. The administrator wants to change from the default load-balancing method to one that will help distribute the load more evenly.
Which load-balancing method would ensure that the server with the least amount of network utilization is receiving new connections?
- A. Least packets
- B. Least bandwidth
- C. Least connection
- D. Least response time
Answer: C
Explanation:
Explanation/Reference: https://docs.citrix.com/en-us/citrix-adc/current-release/getting-started-with-citrix-adc/load- balancing.html
NEW QUESTION 12
To protect an environment against Hash DoS attacks, which two configurations can a Citrix Administrator use to block all post requests that are larger than 10,000 bytes? (Choose two.)
- A. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\") ||
http.REQ.CONTENT_LENGTH.GT(10000)"
> add rewrite policy drop_rewrite expr_hashdos_prevention DROP
> bind rewrite global drop_rewrite 70 END -type REQ_OVERRIDE - B. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\")&&
http.REQ.CONTENT_LENGTH.GT(10000)"
> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP
> bind responder global pol_resp_hashdos_prevention 70 END -type REQ_OVERRIDE - C. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\") ||
http.REQ.CONTENT_LENGTH.GT(10000)"
> add rewrite policy drop_rewrite expr_hashdos_prevention DROP
> bind rewrite global drop_rewrite 100 END -type REQ_OVERRIDE - D. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\")&&
http.REQ.CONTENT_LENGTH.GT(10000)"
> add rewrite policy drop_rewrite expr_hashdos_prevention DROP
> bind rewrite global drop_rewrite 100 END -type REQ_OVERRIDE - E. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\") ||
http.REQ.CONTENT_LENGTH.GT(10000)"
> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP
> bind responder global pol_resp_hashdos_prevention 70 END -type REQ_OVERRIDE - F. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\") ||
http.REQ.CONTENT_LENGTH.GT(10000)"
> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP
> bind responder global pol_resp_hashdos_prevention 100 END -type REQ_OVERRIDE
Answer: B,F
Explanation:
Explanation/Reference: https://support.citrix.com/article/CTX131868
NEW QUESTION 13
Which Citrix ADC monitor can a Citrix Administrator use to check the authentication service of the Active Directory (AD) domain controller?
- A. An LDAP monitor with the LDAP Script Name, Configured Base DN, Bind DN, Filter, Attribute and Password parameters in the basic parameters.
- B. A MYSQL-ECV monitor with the Base DN, Bind DN, Filter, Attribute, and Password parameters configured in the basic parameters
- C. A TCP monitor with the LDAP Base DN configured in the basic parameters.
- D. A ping monitor with the IP address of the AD domain controller in the special parameters
Answer: A
NEW QUESTION 14
Scenario: While using the GUI, a Citrix ADC MPX appliance becomes unresponsive. A Citrix Administrator needs to restart the appliance and force a core dump for analysis.
What can the administrator do to accomplish this?
- A. Connect to a USB port to issue a restart command.
- B. Use the NMI button on the back of the appliance.
- C. Turn off the appliance using the power button.
- D. Use the reset button on the front of the appliance.
Answer: B
NEW QUESTION 15
Scenario: A Citrix Administrator needs to configure a Responder policy, so that the string "/mytraining" is added to every URL path received.
The administrator should use these commands to accomplish this:
>add responder action Redirect_Act redirect "HTTP.REQ.URL.PATH_AND_QUERY+\"mytraining\"" - responseStatusCode 302
>add responder policy Redirect_Pol___________Redirect_Act
>bind lb vServer lb_vsrv_www -policyName Redirect_Pol -priority 100 -gotoPriorityExpression END - type_______ (Choose the correct option to complete the set of commands.)
- A. "(HTTP.REQ.URL.STARTSWITH(\"mytraining\"))"
RESPONSE - B. "!(HTTP.REQ.URL.ENDSWITH(\"mytraining\"))"
REQUEST - C. "(HTTP.REQ.URL.STARTSWITH(\"mytraining\"))"
REQUEST - D. "!(HTTP.REQ.URL.ENDSWITH(\"mytraining\"))"
RESPONSE
Answer: A
NEW QUESTION 16
A Citrix Administrator needs to protect the HTTP backend server type without actually removing the header.
Which rewrite action type can the administrator apply to the Citrix ADC configuration to accomplish this?
- A. REPLACE_HTTP_REQ
- B. REPLACE
- C. REPLACE_ALL
- D. CORRUPT_HTTP_HEADER
Answer: B
NEW QUESTION 17
Scenario: Users are trying to access https://cs.mycompany.com, but are receiving the error below:
HTTP 503 Service Unavailable
What can a Citrix Administrator change in the Citrix ADC configuration to fix this?
- A. Bind a certificate.
- B. Bind the default load-balancing vServer.
- C. Disable the spillover redirect URL.
- D. Enable the content switching feature.
Answer: B
NEW QUESTION 18
Which two policies can a Citrix Administrator configure using only the advanced policy expression? (Choose two.)
- A. SSL
- B. DNS
- C. System
- D. Integrated caching
Answer: B,D
Explanation:
Explanation/Reference: https://docs.citrix.com/en-us/citrix-adc/current-release/appexpert/policies-and-expressions/ introduction-to-policies-and-exp/classic-and-advanced-policy.html
NEW QUESTION 19
Which mode does a Citrix Administrator need to configure to allow a Citrix ADC to control the packetforwarding function based on the route table lookups?
- A. Layer 3
- B. USIP
- C. Layer 2
- D. MBF
Answer: A
NEW QUESTION 20
Scenario: A Citrix Administrator manages an environment that has three SSL websites, all serving the same content.
www.company.com
www.company.net
www.company.org
The administrator would like to consolidate the websites into a single, load-balanced SSL vServer.
What can the administrator bind to use a single SSL vServer?
- A. A wildcard certificate to a content-switching vServer
- B. A multiple SAN certificate to a single SSL vServer
- C. A wildcard certificate to a single SSL vServer
- D. The certificate of each website to a single SSL vServer
Answer: D
NEW QUESTION 21
Scenario: A Citrix Administrator configured a responder policy as follows:
> add responder action Redirect_Act respondwith "DIAMETER.NEW_REDIRECT(\"aaa://host.example.com\")"
> add responder policy Redirect_Pol "diameter.req.avp(264).value.eq(\"host1.example.net\")" Redirect_Act
> bind lb vServer vs1 -policyName Redirect_Pol -priority 10 -type REQUEST What will be the effect of this configuration?
- A. Response originated from "host1.example.net" will be redirected to "host.example.com".
- B. Request originated from "host1.example.net" will be redirected to "host.example.com".
- C. Response originated from "host.example.net" will be redirected to "host1.example.com".
- D. Request originated from "host.example.net" will be redirected to "host1.example.com".
Answer: B
Explanation:
Explanation/Reference:
NEW QUESTION 22
What is the first thing a Citrix Administrator should develop when creating a server certificate for Citrix ADC to secure traffic?
- A. A certificate signing request (CSR)
- B. A certificate revocation list (CRL)
- C. A certificate key-pair
- D. A private key
Answer: D
NEW QUESTION 23
Scenario: While attempting to access web server that is load balanced by a Citrix ADC using HTTPS, a user receives the message below.
SSL/TLS error: You have not chosen to trust "Certificate Authority" the issuer of the server's security certificate.
What can a Citrix Administrator do to prevent users from viewing this message?
- A. Ensure that users have the certificate's private key.
- B. Ensure that users have the server certificate installed.
- C. Ensure that the server certificate is linked to its respective intermediate and root certificates.
- D. Ensure that users have the certificate's public key.
Answer: D
NEW QUESTION 24
Which two policies can a Citrix Administrator configure using only the advanced policy expression? (Choose two.)
- A. SSL
- B. DNS
- C. System
- D. Integrated caching
Answer: B,D
NEW QUESTION 25
Scenario: A Junior Citrix Administrator needs to create a content switching vServer on a Citrix ADC high availability (HA) pair. The NSIP addresses are 192.168.20.10 and 192.168.20.11. The junior administrator connects to NSIP address 192.168.20.10 and saves the changes.
The following day, a Senior Citrix Administrator tests the new content switching vServer, but it is NOT working. The senior administrator connects to the HA pair and discovers that everything the junior administrator configured is NOT visible.
Why has the Citrix ADC lost the newly added configurations?
- A. The junior administrator made the changes and did NOT force a failover to save the configuration.
- B. Both Citrix ADCs in the HA pair restarted overnight.
- C. The Citrix ADC appliances have different firmware versions.
- D. The junior administrator connected to the NSIP of the secondary Citrix ADC in the HA pair.
Answer: B
NEW QUESTION 26
Scenario: A Citrix Administrator configured Citrix ADC load balancing to send requests to one of three identical backend servers. Each server handles multiple protocols, and load balancing is set up in round-robin mode.
The current load-balancing setup on the Citrix ADC is:
* One load-balancing vServer with one externally accessible VIP
* One service created for each protocol type
* One server entity for each backend resource
During business hours, the administrator wants to make changes to one backend server without affecting the other servers.
What is the most efficient way for the administrator to ensure that all traffic is routed away from the server without impeding responses from other resources?
- A. Disable the backend server entity targeted for change.
- B. Disable the backend service entity targeted for change.
- C. Unbind the correct server entity from the load-balancing vServer.
- D. Disable the load-balancing vServer.
Answer: D
NEW QUESTION 27
Scenario: Client connections to certain vServers are abnormally high. A Citrix Administrator needs to be alerted whenever the connections pass a certain threshold.
How can the administrator use Citrix Application Delivery Management (ADM) to accomplish this?
- A. Configure specific alerts for vServers using Citrix ADM.
- B. Configure network reporting on the Citrix ADM by setting the threshold and email address.
- C. Configure SMTP reporting on the Citrix ADM by adding the threshold and email address.
- D. Configure TCP Insight on the Citrix ADM.
Answer: B
NEW QUESTION 28
Scenario: A company has three departments with proprietary applications that need to be load balanced on a Citrix ADC. The three department managers would like to use the same IP address to access their individual applications. This would mean configuring three load-balanced vServers, all using the same IP address.
What can the Citrix Administrator configure for this scenario?
- A. Three different load-balanced vServers with three different IP addresses on a Citrix ADC
- B. Three SNIPs with the same IP address on a Citrix ADC
- C. Three different admin partitions that allow use of the same IP address for each load-balanced vServer on a Citrix ADC
- D. Three different Citrix ADCs that use the same IP address
Answer: B
NEW QUESTION 29
Which step can a Citrix Administrator take to use default compression policies?
- A. Disable the Citrix ADC compression feature at a global level.
- B. Select the compression algorithm (gzip/deflate/identity).
- C. Enable compression on the associated bound services.
- D. Bind the default compression policies to the vServer.
Answer: B
NEW QUESTION 30
Scenario: A Citrix Administrator configured a load-balancing vServer. The URL for this vServer is vpn.citrix.com. The backend server has the host name configured as server1.citrix.com.
The administrator needs to implement the policy to change the host name from vpn.citrix.com to server1.citrix.com, and vice versa.
Which does the administrator need to configure to meet this requirement?
- A. set transform action "host change" -priority 10 -reqUrlFrom "https://server1.citrix.com/*" -reqUrlInto
"https://vpn.citrix.com/*" -resUrlFrom "https://vpn.citrix.com/*" -resUrlInto "https://server1.citrix.com/*" - B. set transform action "host change" -priority 10 -reqUrlFrom "https://server1.citrix.com/*" -reqUrlInto
"https://vpn.citrix.com/*" -resUrlFrom "https://server1.citrix.com/*" -resUrlInto "https://vpn.citrix.com/*" - C. set transform action "host change" -priority 10 -reqUrlFrom "https://vpn.citrix.com/*" -reqUrlInto "https:// server1.citrix.com/*" -resUrlFrom "https://server1.citrix.com/*" -resUrlInto "https://vpn.citrix.com/*"
- D. set transform action "host change" -priority 10 -reqUrlFrom "https://vpn.citrix.com/*" -reqUrlInto "https:// server1.citrix.com/*" -resUrlFrom "https://vpn.citrix.com/*" -resUrlInto "https://server1.citrix.com/*"
Answer: D
NEW QUESTION 31
Scenario: A Citrix Administrator made changes to a Citrix ADC, deleting parts of the configuration and saving some new ones. The changes caused an outage that needs to be resolved as quickly as possible. There is no Citrix ADC backup.
What does the administrator need to do to recover the configuration quickly?
- A. Restore from the revision history.
- B. Restart the Citrix ADC.
- C. Run saved versus running configuration.
- D. Run highly availability (HA) file synchronization.
Answer: A
NEW QUESTION 32
Scenario: A Citrix Administrator suspects an attack on a load-balancing vServer (IP address 192.168.100.25).
The administrator needs to restrict access to this vServer for 10 minutes.
Which Access Control List (ACL) will accomplish this?
- A. add ns acl rule1 DENY -destIP 192.168.100.25 -TTL 600
- B. add ns acl rule1 DENY -destIP 192.168.100.25 -TTL 600000
- C. add simpleacl rule1 DENY -srcIP 192.168.100.25 -TTL 600
- D. add simpleacl rule1 DENY -srcIP 192.168.100.25 -TTL 600000
Answer: A
NEW QUESTION 33
Which two steps are necessary to configure global server load balancing (GSLB) service selection using content switching (CS)? (Choose two.)
- A. Configure a CS vServer of target type GSLB.
- B. Configure CS policies that designate a load-balancing vServer as the target vServer.
- C. Bind the GSLB domain to the GSLB vServer.
- D. Bind the domain to the CS vServer instead of the GSLB vServer.
Answer: A,B
NEW QUESTION 34
Which Citrix ADC Access Control List (ACL) command can a Citrix Administrator use to bridge traffic originating from the IP address 192.168.10.200?
- A. add ns acl6
- B. add ns simpleacl
- C. add ns acl
- D. add ns simpleacl6
Answer: C
NEW QUESTION 35
Scenario: The primary content switching vServer has gone down. To troubleshoot, a Citrix Administrator has issued the following command:
> show csvserver CSV
CSV (10.1.100.100:443) - HTTPS Type: CONTENT
State: UP
Last state change was at Mon Jun 29 15:20:43 2020
Time since last state change: 1 day, 06:47:58 610
Client Idle Timeout: 180 sec
Down state flush: ENABLED
Disable Primary vServer On Down: DISABLED
Appflow logging: ENABLED
Port Rewrite: DISABLED
State Update: DISABLED
Default: Content Precedence: URL
vServer IP and Port insertion: OFF
Persistence: NONE redirect: http://www.site1.com/mysite1/maintenance
Backup: vServer-LB-2
Listen Policy: NONE
IcmpResponse: PASSIVE
RHIstate: PASSIVE
Traffic Domain: 0
Based on this output, where will the subsequent request be redirected?
- A. vServer-LB-2
- B. Backup content switching vServer
- C. 10.1.100.100:443
- D. http://www.site1.com/mysite1/maintenance
Answer: D
NEW QUESTION 36
......
The Best Citrix 1Y0-241 Study Guides and Dumps of 2022: https://www.exam4free.com/1Y0-241-valid-dumps.html
Top Citrix 1Y0-241 Exam Audio Study Guide! Practice Questions Edition: https://drive.google.com/open?id=1sIFR5Ba-WBq8KMfITc7EfdwnyG-Vplec
