Citrix CCA-AppDS 1Y0-241 Questions & Answers

• Question 1:

  Scenario: A Citrix Administrator entered the configuration below:

  > add rewrite policy pol_external_to_internal 'http.req.hostname.server.eq("host_name_of_external_Web_server")' act_external_to_internal

  Which two possible rewrite actions can the administrator choose when a rewrite policy evaluates to TRUE? (Choose two.)

  A. Deny

  B. Bypass

  C. Reset

  D. Drop

  Correct Answer: AC

• Question 2:

  Scenario: Client connections to certain vServers are abnormally high. A Citrix Administrator needs to be alerted whenever the connections pass a certain threshold.

  How can the administrator use Citrix Application Delivery Management (ADM) to accomplish this?

  A. Configure network reporting on the Citrix ADM by setting the threshold and email address.

  B. Configure SMTP reporting on the Citrix ADM by adding the threshold and email address.

  C. Configure TCP Insight on the Citrix ADM.

  D. Configure specific alerts for vServers using Citrix ADM.

  Correct Answer: A

  https://docs.citrix.com/en-us/citrix-application-delivery-management-service/networks/network-reporting.html

• Question 3:

  Scenario: A Citrix Administrator gives permissions to team members to access their own admin partition. This will allow them to add resources for different departments and manage them without making changes to the default Citrix ADC partition and configuration.

  One team member typing to use the command line interface (CLI) to troubleshoot an authentication issue could NOT use aaad.debug. However, the team member has full permissions on the admin partition.

  What can be the cause of this issue?

  A. The team member is NOT using the CLI correctly.

  B. The team member needs to troubleshoot the issue from the GUI.

  C. The team member does NOT have permission to use the CLI.

  D. The team member does NOT have shell access by design.

  Correct Answer: D

  https://docs.citrix.com/en-us/citrix-adc/current-release/admin-partition.html

• Question 4:

  Scenario: A Citrix Administrator is running an e-commerce web service that uses backend SQL and RADIUS servers. The e-commerce platform runs on a web server using port 80, and a website status page on port 99 reports the status of all servers.

  Which monitor should the administrator choose to confirm the availability of the e- commerce solution?

  A. HTTP on port 99

  B. HTTP-ECV on port 80

  C. HTTP on port 80

  D. HTTP_ECV on port 99

  Correct Answer: D

  destPort TCP or UDP port to which to send the probe. If the parameter is set to 0, the port number of the service to which the monitor is bound is considered the destination port. For a monitor of type USER, however, the destination port is the port number that is included in the HTTP request sent to the dispatcher. Does not apply to monitors of type PING.

  Reference: https://support.citrix.com/article/CTX209292

• Question 5:

  A Citrix Administrator needs to configure a rate-limiting policy setting DNS requests to a threshold of 1,000 per second.

  Which set of commands does the administrator need to run to correctly configure and enable this policy?

  A. > add stream selector DNSSelector1 client.udp.dns.domain > add ns limitIdentifier DNSLimitIdentifier1 -threshold 5 -timeSlice 1000 -selectorName DNSSelector1 > add dns policy DNSLimitPolicy1 " sys.check_limit(\"DNSLimitIdentifier1\")" - preferredLocation "North America.US.TX.Dallas.. " > bind dns global DNSLimitPolicy1 5

  B. > add stream selector DNSSelector1 client.udp.dns.domain > add ns limitIdentifier DNSLimitIdentifier1 -threshold 1000 -timeSlice 1000 -selectorName DNSSelector1 > add dns policy DNSLimitPolicy1 " sys check_limit(\"DNSLimitIdentifier1\")" - preferredLocation "North America.US.TX.Dallas.. " > bind dns global DNSLimitPolicy1 5

  C. > add stream selector DNSSelector1 client.udp.dns.domain > add ns limitIdentifier DNSLimitIdentifier1 -threshold 5 -timeSlice 1000 -selectorName DNSSelector1 > add dns policy DNSLimitPolicy1 " sys.check_limit(\"DNSLimitIdentifier1\")" - preferredLocation "North America.US.TX.Dallas.. "

  D. > add stream selector DNSSelector1 client.udp.dns.domain > add ns limitIdentifier DNSLimitIdentifier1 -threshold 1000 -timeSlice 1000 -selectorName DNSSelector1 > add dns policy DNSLimitPolicy1 " sys check_limit(\"DNSLimitIdentifier1\")" - preferredLocation "North America.US.TX.Dallas.. "

  Correct Answer: B

• Question 6:

  The Citrix ADC SDX architecture allows instances to share ___________ and __________. (Choose the two correct options to complete the sentence.)

  A. memory

  B. a CPU

  C. a physical interface

  D. the kernel

  Correct Answer: BC

  On Citrix ADC SDX, instances get dedicated and shared resources: The memory resources are dedicated to an instance. The CPU resources can be dedicated, or shared, depending on the requirements Allocation of the network devices is flexible in Citrix ADC SDX. The devices can be shared or dedicated based on the security or compliance requirements. Each instance gets its own kernel.

• Question 7:

  A Citrix Administrator needs to match the host name `www.example.com' in all HTTP requests.

  Which expression, when used, meets this requirement?

  A. HTTP.REQ.HOSTNAME.EQ("www.example.com")

  B. HTTP.RES.HOSTNAME.EQ("www.example.com")

  C. HTTP.REQ.HOSTNAME("example.com")

  D. HTTP.RES.HOSTNAME.CONTAINS("www.example.com")

  Correct Answer: A

• Question 8:

  How can a Citrix Administrator configure a rewrite policy to change the version of HTTP from 1.1 to 1.0 in every request?

  A. >add rewrite action RW_ACT replace http.res.version "\"HTTPS/1.0\"" > add rewrite policy RW_POL true RW_ACT

  B. >add rewrite action RW_ACT replace http.req.version "\"HTTPS/1.1\"" > add rewrite policy RW_POL true RW_ACT

  C. >add rewrite action RW_ACT replace http.res.version "\"HTTPS/1.1\"" > add rewrite policy RW_POL true RW_ACT

  D. >add rewrite action RW_ACT replace http.req.version "\"HTTPS/1.0\"" > add rewrite policy RW_POL true RW_ACT

  Correct Answer: D

• Question 9:

  Scenario: A Citrix Administrator configured an authentication, authorization, and auditing (AAA) policy to allow users access through the Citrix ADC. The administrator bound the policy to a specific vServer. Which policy expression will allow all users access through the vServer?

  A. true

  B. false

  C. ns_true

  D. ns_false

  Correct Answer: C

  Tricky one, this is for 13.1 and classic still is mandatory for AAA until 2023 (with exceptions on Traffic policy)

  https://docs.citrix.com/en-us/citrix-adc/current-release/appexpert/policies-and-expressions/introduction-to-policies-and-exp/advanced-policy-infrastructure.html https://docs.citrix.com/en-us/citrix-adc/current-release/aaa-tm/entities-of-authenticationauthorization-auditing/authentication-policies.html

• Question 10:

  Scenario: A Citrix Administrator configured a rewrite action as follows: > add rewrite action sync_date replace http.res.date.sys.time What is the correct way to interpret this rewrite action?

  A. It replaces the date header in the HTTP response with the Citrix ADC system time in a conventional date format.

  B. It replaces the date header in the HTTP response with the Greenwich Mean Time (GMT) time stamp.

  C. It replaces the Citrix ADC system time with the date header in a conventional date format.

  D. It is invalid, as system time CANNOT be referenced in the system policy.

  Correct Answer: B