Citrix Citrix Certification 1Y0-440 Questions & Answers

• Question 21:

  Scenario: A Citrix Architect has deployed two MPX devices, 12.0.53.13 nc and MPX 11500 models, in high availability (HA) pair for the Workspace labs team. The deployment method is two-arm and the devices are installed behind a CISCO ASA 5585 Firewall. The architect enabled the following features on the NetScaler devices. Content Switching, SSL Offloading, Load Balancing, NetScaler Gateway, Application Firewall in hybrid security and Appflow. All are enabled to send monitoring information to NMAS 12.0.53.13 nc build. The architect is preparing to configure load balancing for Microsoft Exchange 2016 server.

  The following requirements were discussed during the implementation:

  1.

  All traffic needs to be segregated based on applications, and the fewest number of IP addresses should be utilized during the configuration

  2.

  All traffic should be secured and any traffic coming into HTTP should be redirected to HTTPS.

  3.

  Single Sign-on should be created for Microsoft Outlook web access (OWA).

  4.

  NetScaler should recognize Uniform Resource Identifier (URl) and close the session to NetScaler when users hit the Logoff button in Microsoft Outlook web access.

  5.

  Users should be able to authenticate using either user principal name (UPN) or sAMAccountName.

  6.

  The Layer 7 monitor should be configured to monitor the Microsoft Outlook web access servers and the monitor probes must be sent on SSL

  Which monitor will meet these requirements?

  A. add lb monitor mon_rpc HTTP-ECV -send “GET /rpc/healthcheck.htm” recv 200 -LRTM DISABLED

  B. add lb monitor mon_rpc HTTP-ECV -send “GET /rpc/healthcheck.htm” recv 200 -LRTM ENABLED

  C. add lb monitor mon_rpc HTTP -send “GET /rpc/healthcheck.htm” recv 200 -LRTM DISABLED -secure YES

  D. add lb monitor mon_rpc HTTP-ECV -send “GET/rpc/healthcheck.htm” recv 200 -LRTM DISABLED secure YES

  Correct Answer: A

• Question 22:

  Which two features are supported on LbaaSV1? (Choose two.)

  A. Cookie Insertion

  B. Layer 7 Load Balancing

  C. Certificate Bundle

  D. Layer 4 Load balancing

  E. Server name Indicator

  Correct Answer: DE

• Question 23:

  Which session parameter does the default authorization setting control when authentication, authorization, and auditing profiles are configured?

  A. Determines the default logging level

  B. Determines whether the NetScaler appliance will allow or deny access to content for which there is no specific authorization policy

  C. Determines the default period after which the user is automatically disconnected and must authenticate again to access the intranet

  D. Determines whether the NetScaler appliance will log users onto all web applications automatically after they authenticate or will pass users to the web application logon page to authenticate for each application.

  E. Controls are amount of time the users can be idle before they are automatically disconnected.

  Correct Answer: B

• Question 24:

  Scenario: A Citrix Architect needs to design a hybrid XenApp and XenDesktop environment which will include as well as resource locations in an on-premises datacenter and Microsoft Azure.

  Organizational details and requirements are as follows:

  1.

  Active XenApp and XenDesktop Service subscription

  2.

  No existing NetScaler deployment

  3.

  Minimization of additional costs

  4.

  All users should correct directly to the resource locations containing the servers which will host HDX sessions

  Click the Exhibit button to view the conceptual environment architecture.

  

  The architect should use___________ in Location A, and should use _______________ in Location B. (Choose the correct option to complete the sentence.)

  A. No NetScaler products; NetScaler ICA Proxy (cloud-licensed)

  B. NetScaler Gateway as a Service; NetScaler ICA Proxy (cloud-licensed)

  C. NetScaler Gateway as a Service; no NetScaler products

  D. No NetScaler products; NetScaler Gateway appliance

  E. NetScaler gateway as a Service; NetScaler ADC (BYO)

  Correct Answer: C

• Question 25:

  Scenario: More than 10,000 users will access a customer's environment. The current networking infrastructure is capable of supporting the entire workforce of users. However, the number of support staff is limited, and management needs to ensure that they are capable of supporting the full user base.

  Which business driver is prioritized, based on the customer's requirements?

  A. Simplify Management

  B. Increase Scalability

  C. Increase Flexibility

  D. Reduce Costs

  E. Enable Mobile Work Styles

  F. Increase Security

  Correct Answer: A

• Question 26:

  Scenario: A Citrix Architect needs to design a new NetScaler Gateway deployment to provide secure RDP access to backend Windows machines.

  Click the Exhibit button to view additional requirements collected by the architect during the design discussions.

  

  To meet the customer requirements, the architect should deploy the RDP proxy through ______ using a________ solution. (Choose the correct option to complete the sentence.)

  A. CVPN: single gateway

  B. CVPN, stateless gateway

  C. ICAProxy: single gateway

  D. ICAProxy; stateless gateway

  Correct Answer: C

• Question 27:

  A Citrix Architect needs to configure advanced features of NetScaler by using StyleBooks as a resource in the Heat service.

  What is the correct sequence of tasks to be completed for configuring NetScaler using the Heat stack?

  A. 1. Install NetScaler Bundle for OpenStack

  2.

  Deploy the Heat stack

  3.

  Register OpenStack with NMAS

  4.

  Add NetScaler instances (Optional)

  5.

  Prepare the HOT by using the NetScaler heat resources and NetScaler Network Resource

  6.

  Create service packages (Add OpenStack tenants)

  B. 1. Install NetScaler Bundle for OpenStack

  2.

  Register OpenStack with NMAS

  3.

  Add NetScaler instances (Optional)

  4.

  Create service packages (Add OpenStack tenants)

  5.

  Prepare the HOT by using the NetScaler heat resources and NetScaler Network Resource

  6.

  Deploy the Heat stack

  C. 1. Install NetScaler Bundle for OpenStack

  2.

  Add NetScaler instances (Optional)

  3.

  Create service packages (Add OpenStack tenants)

  4.

  Prepare the HOT by using the NetScaler heat resources and NetScaler Network Resource

  5.

  Register OpenStack with NMAS

  6.

  Deploy the Heat stack

  D. 1. Install NetScaler Bundle for OpenStack

  2.

  Prepare the HOT by using the NetScaler heat resources and NetScaler Network Resource

  3.

  Register OpenStack with NMAS

  4.

  Deploy the Heat stack

  5.

  Add NetScaler instances (Optional)

  6.

  Create service packages (Add OpenStack tenants)

  Correct Answer: D

  Reference: https://docs.citrix.com/en-us/netscaler-mas/12/integrating-netscaler-mas-with-openstackplatform/integrating_netscaler_mas_with_openstack_heat_services.html

• Question 28:

  Scenario: A Citrix Architect and a team of Workspacelab members have met for a design discussion about the NetScaler Design Project. They captured the following requirements:

  1.

  Two pairs of NetScaler MPX appliances will be deployed in the DMZ network and the internal network.

  2.

  High availability will be accessible between the pair of NetScaler MPX appliances in the DMZ network.

  3.

  Multi-factor authentication must be configured for the NetScaler Gateway virtual server.

  4.

  The NetScaler Gateway virtual server is integrated with XenApp/XenDesktop environment.

  5.

  Load balancing must be deployed for the users from the workspacelab.com and vendorlab.com

  domains.

  6.

  The logon page must show the workspacelab logo.

  7.

  Certificate verification must be performed to identify and extract the username.

  8.

  The client certificate must have UserPrincipalName as a subject.

  9.

  All the managed workstations for the workspace users must have a client identifications certificate

  installed on it.

  10.The workspacelab users connecting from a managed workstation with a client certificate on it should be

  authenticated using LDAP. 11.The workspacelab users connecting from a workstation without a client

  certificate should be authenticated using LDAP and RADIUS.

  12.The vendorlab users should be authenticated using Active Directory Federation Service.

  13.The user credentials must NOT be shared between workspacelab and vendorlab.

  14.Single Sign-on must be performed between StoreFront and NetScaler Gateway.

  15.A domain drop down list must be provided if the user connects to the NetScaler Gateway virtual server

  externally.

  16.The domain of the user connecting externally must be identified using the domain selected from the

  domain drop down list.

  On performing the deployment, the architect observes that users are always prompted with two-factor authentication when trying to assess externally from an unmanaged workstation.

  Click the exhibit button to view the configuration.

  

  What should the architect do to correct this configuration?

  A. Unbind LoginSchema Policy LDAP_RADIUS from the virtual server.

  B. Bind the Portal theme as Domaindropdown.

  C. Bind the LoginSchema Policy Domaindropdown to priority 90.

  D. Bind the Default LoginSchema Policy as Domaindropdown.

  Correct Answer: D

• Question 29:

  Scenario: The following NetScaler environment requirements were discussed during a design meeting between a Citrix Architect and the Workspacelab team:

  1.

  All traffic should be secured, and any traffic coming into HTTP should be redirected to HTTPS.

  2.

  Single Sign-on should be created for Microsoft Outlook web access (OWA).

  3.

  NetScaler should recognize Uniform Resource Identifier (URI) and close the session to NetScaler when users hit the Logoff button in Microsoft Outlook web access.

  4.

  Users should be able to authenticate using user principal name (UPN).

  5.

  The Layer 7 monitor should be configured to monitor the Microsoft Outlook web access servers and the

  monitor probes must be sent on SSL.

  Which method can the architect use to redirect the user accessing https://mail.citrix.com to https:// mail.citrix.com?

  A. add responder action act redirect “https://mail.citrix.com” -responseStatusCode 302 add responder policy pol HTTP.REQ.IS_VALID act

  B. add lb server test SSL 10.107.149.243.80 -persistenceType NONE -cltTimeout 180 -redirectFromPort 80 -httpsRedirectUrl https://mail.citrix.com

  C. add lb server test SSL 10.107.149.243.443 -persistenceType NONE -cltTimeout 180 -redirectFromPort 80 -httpsRedirectUrl https://mail.citrix.com

  D. add responder action act redirect “\https://\ + HTTP REQ.HOSTNAME.HTTP_URL_SAFE + HTTP.REQ.URL_PATH_AND_QUERY.HTTP_URL_SAFE\n\n” -responseStatusCode 302 add responder policy pol HTTP.REQ.IS_VALID act

  Correct Answer: C

• Question 30:

  Scenario: A Citrix Architect needs to assess an existing NetScaler multi-site deployment. The deployment is using Global Server Load Balancing (GSLB) configured in a parent-child configuration.

  Click the Exhibit button to view the diagram of the current GSLB configuration and parent-child relationships, as well as the status of the sites and the connectivity between them.

  

  Based on the displayed configuration and status, Chil_site1_______ a connection from _______. (Choose the correct option to complete the sentence.)

  A. rejects; SiteP2 and SiteP3; remains a child site of SiteP1

  B. rejects; SiteP3; remains a child site of SiteP1

  C. accepts; SiteP3; becomes its child site

  D. accepts; SiteP2; becomes its child site

  E. does NOT receive; SiteP2 and SiteP3; remains a child site of SiteP1

  F. rejects; SiteP2; remains a child site of SiteP1

  Correct Answer: E