Citrix CCA-AppDS 1Y0-241 Questions & Answers

• Question 11:

  set gslb parameter - GSLBSvcStateDelayTime 10

  When metrics exchange protocol (MEP) is enabled what is the effect of the above command on the global server load balancing (GSLB) environment?

  A. The GSLB services will be marked as DOWN if the MEP connection has been DOWN for 10 seconds.

  B. The MEP will be marked as DOWN if the GSLB service has been DOWN for 10 seconds.

  C. The MEP will be marked as DOWN if the GSLB vServer has been DOWN for 10 seconds.

  D. The GSLB services will be marked as DOWN if the LB server has been DOWN for 10 seconds.

  Correct Answer: B

• Question 12:

  Which two protocols would provide end-to-end data encryption, while allowing a Citrix ADC to optimize the responses? (Choose two.)

  A. HTTP protocol for the services

  B. SSL bridge protocol for the vServer

  C. SSL bridge protocol for the services

  D. SSL protocol for the services

  E. HTTP protocol for the vServer

  F. SSL protocol for the vServer

  Correct Answer: DF

  https://docs.citrix.com/en-us/citrix-adc/current-release/ssl/how-to-articles/end-to-end-encrypt.html

• Question 13:

  Scenario: A Citrix Administrator would like to grant access to a Junior Citrix Administrator on the Citrix ADC.

  The administrator would like to grant full access to everything except the following:

  Shell User configuration

  Partition configuration

  Which preexisting command policy would meet the needs of this scenario?

  A. Sysadmin

  B. Operator

  C. Network

  D. Superuser

  Correct Answer: A

  A sysadmin is lower than a superuser is terms of access allowed on the appliance. A sysadmin user can perform all Citrix ADC operations with the following exceptions: no access to the Citrix ADC shell, cannot perform user configurations, cannot perform partition configurations, and some other configurations as stated in the sysadmin command policy

  https://docs.citrix.com/en-us/citrix-adc/current-release/system/authentication-and-authorization-for-system-user/user-usergroups-command-policies.html

• Question 14:

  Which step can a Citrix Administrator take to use default compression policies?

  A. Select the compression algorithm (gzip/deflate/identity).

  B. Disable the Citrix ADC compression feature at a global level.

  C. Enable compression on the associated bound services.

  D. Bind the default compression policies to the vServer.

  Correct Answer: C

  To put a compression policy into effect, you must bind it either globally, so that it applies to all traffic that flows through the Citrix ADC, or to a specific virtual server, so that the policy applies only to requests whose destination is the VIP

  address of that virtual server.

  By default, compression is disabled on the Citrix ADC. You must enable the feature before configuring it. You can enable it globally so that it applies to all HTTP and SSL services, or you can enable it just for specific services.

  https://docs.citrix.com/en-us/citrix-adc/current-release/load-balancing/load-balancing-advanced-settings/enable-compression-on-service.htm

• Question 15:

  In a global server load balancing (GSLB) active-active environment, the connection proxy is used as the site persistence method. What is used to source the traffic when the connection is proxied?

  A. Subnet IP (SNIP)

  B. LDNS IP Address

  C. Client source IP

  D. Virtual IP (VIP)

  Correct Answer: C

• Question 16:

  Scenario: A Citrix ADC receives packets destined for a MAC address owned by the Citrix ADC. The destination IP address of the packets does NOT belong to the Citrix ADC. Layer 3 mode is enabled by default on the Citrix ADC. The Citrix ADC will __________ the packets in this scenario. (Choose the correct option to complete the sentence.)

  A. route

  B. process

  C. bridge

  D. drop

  Correct Answer: A

  https://docs.citrix.com/en-us/citrix-adc/current-release/getting-started-with-citrix-adc/configure-system-settings/configure-modes-packet-forwarding.html

• Question 17:

  Scenario: A Citrix Administrator suspects an attack on a load-balancing vServer (IP address 192.168.100.25).

  The administrator needs to restrict access to this vServer for 10 minutes.

  Which Access Control List (ACL) will accomplish this?

  A. add simpleacl rule1 DENY -srcIP 192.168.100.25 -TTL 600000

  B. add simpleacl rule1 DENY -srcIP 192.168.100.25 -TTL 600

  C. add ns acl rule1 DENY -destIP 192.168.100.25 -TTL 600000

  D. add ns acl rule1 DENY -destIP 192.168.100.25 -TTL 600

  Correct Answer: D

  https://docs.citrix.com/en-us/citrix-adc/current-release/networking/access-control-lists-acls/extended-acls-and-extended-acl6s.html

  By binding a multiple SAN certificate, we only need to adapt the DNS entries of the websites to point to the same IP (1 IP with 3 DNS) and we will be able to forward the requests to any backend server since all of them are serving the same content.

• Question 18:

  If VLAN 20 is bound to the interface as tagged in an environment where Citrix ADC is configured with the default settings, which VLANs will be bound to an interface?

  A. VLAN 1 tagged and VLAN 20 tagged

  B. VLAN 20 tagged only

  C. VLAN 1 untagged and VLAN 20 tagged

  D. VLAN 20 untagged only

  Correct Answer: C

• Question 19:

  Scenario: A company has three departments with proprietary applications that need to be load balanced on a Citrix ADC. The three department managers would like to use the same IP address to access their individual applications. This would mean configuring three load- balanced vServers, all using the same IP address.

  What can the Citrix Administrator configure for this scenario?

  A. Three SNIPs with the same IP address on a Citrix ADC

  B. Three different Citrix ADCs that use the same IP address

  C. Three different admin partitions that allow use of the same IP address for each load- balanced vServer on a Citrix ADC

  D. Three different load-balanced vServers with three different IP addresses on a Citrix ADC

  Correct Answer: C

• Question 20:

  Scenario: While attempting to access web server that is load balanced by a Citrix ADC using HTTPS, a user receives the message below.

  SSL/TLS error: You have not chosen to trust "Certificate Authority" the issuer of the server's security certificate.

  What can a Citrix Administrator do to prevent users from viewing this message?

  A. Ensure that users have the certificate's private key.

  B. Ensure that users have the certificate's public key.

  C. Ensure that the server certificate is linked to its respective intermediate and root certificates.

  D. Ensure that users have the server certificate installed.

  Correct Answer: C

  https://support.citrix.com/article/CTX101990