Citrix NetScaler 1Y0-240 Questions & Answers

• Question 111:

  View the Exhibit.

  

  A Citrix Administrator has implemented the HTTP Callout.

  Click on the `Exhibit' button to view the screenshot of the command-line interface.

  Which part of the configuration is responsible for triggering the call to HTTP Callout server?

  A. –parameters cip(CLIENT.IP.SRC)

  B. sys.http_callout(myCallout1)

  C. –urlStemExpr "\"/cgi-bin/check_clnt_from_database.pl\"

  D. –headers Request("Callout Request")

  Correct Answer: D

• Question 112:

  Which step can a Citrix Administrator take in order to use the default compression policies?

  A. Bind the default compression policies to the virtual server.

  B. Disable the NetScaler Compression feature at a global level.

  C. Select the compression algorithm (gzip/deflate/identity).

  D. Enable compression on the associated bound services.

  Correct Answer: A

• Question 113:

  Scenario: A Citrix Administrator has configured the following Access Control List (ACL) to block traffic from

  the IP address 10.102.29.5.

  add simpleacl rule1 DENY -srcIP 10.102.29.5

  A week later, the administrator found that the ACL is no longer present on the NetScaler.

  What could be the reason for this?

  A. The administrator did NOT run the apply ACL command.

  B. The NetScaler has been restarted without saving the configurations.

  C. The Simple ACLs remain active for only 600 seconds.

  D. The Simple ACLs remain active for only 60 seconds.

  Correct Answer: A

• Question 114:

  Scenario: A Citrix Administrator has configured a Responder policy as follows:

  add responder action Redirect_Act respond with

  "DIAMETER.NEW_REDIRECT(\"aaa://host.example.com\")"

  add responder policy Redirect_Pol "diameter.req.avp(264).value.eq(\"host1.example.net\")" Redirect_Act

  bind lb vserver vs1 -policyName Redirect_Pol -priority 10 -type REQUEST

  What will be the effect of this configuration?

  A. Response originated from "host.example.net" will be redirected to "host1.example.com".

  B. Request originated from "host.example.net" will be redirected to "host1.example.com".

  C. Response originated from "host1.example.net" will be redirected to "host.example.com".

  D. Request originated from "host1.example.net" will be redirected to "host.example.com".

  Correct Answer: D

• Question 115:

  Which tool can a Citrix Administrator utilize to verify that a policy is bound and showing the number of hits?

  A. nscollect

  B. nstrace.sh

  C. nstcpdump.sh

  D. nsconmsg

  Correct Answer: D

• Question 116:

  Scenario: A Citrix Administrator manages an environment that has multiple websites running through a NetScaler MPX 5550. The NetScaler meets the needs of the environment throughout the year, except in December, when the capacity doubles. The administrator needs to handle this increased web traffic with a temporary, cost-effective solution.

  Which action should the administrator recommend in order to handle the increased web traffic?

  A. Purchase a license to upgrade the MPX 5550 to a MPX 5650.

  B. Purchase a BurstPack License.

  C. Purchase Universal License.

  D. Purchase NetScaler Gateway Platform License.

  Correct Answer: B

• Question 117:

  Which policy will allow a Citrix Administrator to modify all the URLs in the response body from "http://" to "https://" in an SSL offload deployment?

  A. add rewrite action Act1 replace_all "HTTP.RES.BODY(200000)" "\"http://\" " –pattern "https://"add rewrite policy Pol1 true Act1 NOREWRITE

  B. add rewrite action Act1 replace_all "HTTP.RES.BODY(200000)" "\"http:\"" –pattern "https://\"add rewrite policy Pol1 true Act1 NOREWRITE

  C. add rewrite action Act1 replace_all "HTTP.RES.BODY(200000)" "\"https://\"" –pattern "http://"add rewrite policy Pol1 true Act1 NOREWRITE

  D. add rewrite action Act1 replace_all "HTTP.RES.BODY(200000)" "\"https:\"" –pattern "http://"add rewrite policy Pol1 true Act1 NOREWRITE

  Correct Answer: A

• Question 118:

  A Citrix Administrator needs to block all the DNS requests from subnet 10.107.149.0/24.

  Which expressions can the administrator use to match the required traffic?

  A. CLIENT.IP.SRC.IN_SUBNET(10.107.149.0/24) andand client.UDP.DSTPORT.EQ(53) || client.TCP.DSTPORT.EQ(53)

  B. CLIENT.IP.SRC.IN_SUBNET(10.107.149.0/24) andand (client.UDP.DSTPORT.EQ(53) || client.TCP.DSTPORT.EQ(53))

  C. CLIENT.IP.SRC(10.107.149.0) andand (client.UDP.DSTPORT.EQ(53) || client.TCP.DSTPORT.EQ(53))

  D. CLIENT.IP.SRC(10.107.149.0) andand client.UDP.DSTPORT.EQ(53) || client.TCP.DSTPORT.EQ(53)

  Correct Answer: B

• Question 119:

  Which command should a Citrix Administrator use to configure a Content Switching virtual server for implementing the Secure Web Gateway in the transparent proxy mode?

  A. add cs vserver swgVS PROXY 192.168.10.1 80 –Authn401 on –authnVsName explicit-auth-vs

  B. add cs vserver swgVS PROXY ** –Authn401 on –authnVsName explicit-auth-vs

  C. add cs vserver swgVS PROXY 192.168.10.1 –Authn401 on –authnVsName transparent-auth-vs

  D. add cs vserver swgVS PROXY * 21 –Authn401 on –authnVsName transparent-auth-vs

  Correct Answer: C

• Question 120:

  Scenario: A Citrix Administrator configured the HTTP_Callout feature on the NetScaler using the command-line interface.

  After configuring the commands, the device is facing the HTTP callout recursion issue.

  Click on the `Exhibit' button to view the screenshot of the command-line interface.

  

  How will the administrator rectify the issue?

  A. Change the expression of the Responder policy to "HTTP.REQ.HEADER(\ "Request\").EQ(\ "Callout Request\"). NOT andand SYS.HTTP_CALLOUT(myCAllout).CONTAINS(\ "IP Matched\")"

  B. In the HTTP Callout policy, change the -parameters to "cip(CLIENT.IP.DST) andandHTTP.REQ.HEADER(\ "Request\").EQ(\ "Callout Request\")"

  C. In the HTTP Callout policy, change the -parameters to "cip(CLIENT.IP.SRC) andandHTTP.REQ.HEADER(\ "Request\").EQ(\ "Callout Request\")"

  D. Change the expression of the Responder policy to "HTTP.REQ.HEADER(\ "Request\").EQ(\ "Callout Request\"). NOT andand SYS.HTTP_CALLOUT(myCAllout).CONTAINS(\ "IP Matched\").NOT"

  Correct Answer: D