Citrix 1Y0-440 Online Practice Questions and Exam Preparation

Citrix 1Y0-440 Online Questions & Answers

• Question 31:

  Which parameter must a Citrix Architect configure to ensure that HDX Proxy Connection terminates upon AAA Session TimeOut?

  A. ICA session timeout in VPN parameters
  B. Session timeout(mins) in NetScaler gateway Session Profile.
  C. Session timeout(mins) in VPN Parameters
  D. ICA session timeout in netScaler Gateway Session Profile.
  D. ICA session timeout in netScaler Gateway Session Profile.

  ---

  Reference: https://www.citrix.com/content/dam/citrix/en_us/citrix-developer/documents/Netscaler/how-do-i-ica-session-timeout-with-aaa.pdf

• Question 32:

  Scenario: The following NetScaler environment requirements were discussed during a design meeting between a Citrix Architect and the Workspacelab team:

  1.

  All traffic should be secured, and any traffic coming into HTTP should be redirected to HTTPS.

  2.

  Single Sign-on should be created for Microsoft Outlook web access (OWA).

  3.

  NetScaler should recognize Uniform Resource Identifier (URI) and close the session to NetScaler when users hit the Logoff button in Microsoft Outlook web access.

  4.

  Users should be able to authenticate using user principal name (UPN).

  5.

  The Layer 7 monitor should be configured to monitor the Microsoft Outlook web access servers and the monitor probes must be sent on SSL.

  Which method can the architect use to redirect the user accessing https://mail.citrix.com to https://mail.citrix.com?

  A. add responder action act redirect “https://mail.citrix.com” -responseStatusCode 302 add responder policy pol HTTP.REQ.IS_VALID act
  B. add lb server test SSL 10.107.149.243.80 -persistenceType NONE -cltTimeout 180 -redirectFromPort 80 -httpsRedirectUrl https://mail.citrix.com
  C. add lb server test SSL 10.107.149.243.443 -persistenceType NONE -cltTimeout 180 -redirectFromPort 80 -httpsRedirectUrl https://mail.citrix.com
  D. add responder action act redirect “\https://\ + HTTP REQ.HOSTNAME.HTTP_URL_SAFE + HTTP.REQ.URL_PATH_AND_QUERY.HTTP_URL_SAFE\n\n” -responseStatusCode 302 add responder policy pol HTTP.REQ.IS_VALID act
  C. add lb server test SSL 10.107.149.243.443 -persistenceType NONE -cltTimeout 180 -redirectFromPort 80 -httpsRedirectUrl https://mail.citrix.com

• Question 33:

  Scenario: A Citrix Architect has met with a team of Workspacelab members for a design discussion. They have captured the following requirements for NetScaler design project:

  1.

  The authentication must be deployed for the users from the workspacelab.com and vendorlab.com domains.

  2.

  The workspacelab users connecting from the internal (workspacelab) network should be authenticated using LDAP.

  3.

  The workspacelab users connecting from the external network should be authenticated using LDAP and RADIUS.

  4.

  The vendorlab users should be authenticated using Active Directory Federation Service.

  5.

  The user credentials must NOT be shared between workspacelab and vendorlab.

  6.

  Single Sign-on must be performed between StoreFront and NetScaler Gateway.

  7.

  A domain drop down list must be provided if the used connects to the NetScaler gateway virtual server externally.

  Which method must the architect utilize for user management between the two domains?

  A. Create shadow accounts for the users of the Workspacelab domain in the Vendorlab domain.
  B. Create a global catalog containing the objects of Vendorlab and Workspacelab domains.
  C. Create shadow accounts for the Vendorlab domain in the Workspacelab domain.
  D. Create a two-way trust between the Vendorlab and Workspacelab domains.
  B. Create a global catalog containing the objects of Vendorlab and Workspacelab domains.

• Question 34:

  Scenario: A Citrix Architect needs to assess an existing NetScaler gateway deployment. During the assessment, the architect collects key requirements for different user groups, as well as the current session profile settings that are applied to those users.

  Click the Exhibit button to view the information collected by the architect.

  

  Which configuration should the architect make to meet these requirements?

  A. Change the Clientless Access settings in an existing session profile.
  B. Change the remote Access settings in StoreFront.
  C. Change ICA proxy settings in an existing session profile.
  D. Change the policy expression in an existing session policy.
  E. Create a new session profile and policy.
  D. Change the policy expression in an existing session policy.

• Question 35:

  Scenario: A Citrix Architect needs to assess an existing NetScaler configuration. The customer recently found that certain user groups were receiving access to an internal web server with an authorization configuration that does NOT align with the designed security requirements.

  Click the Exhibit button view the configured authorization settings for the web server.

  

  Which item should the architect change or remove to align the authorization configuration with the security requirements of the organization?

  A. Item 1
  B. Item 3
  C. Item 4
  D. Item 5
  E. Item 2
  E. Item 2

• Question 36:

  Scenario: A Citrix Architect and a team of Workspacelab members met to discuss a NetScaler design project. They captured the following requirements from this design discussion:

  1.

  A pair of NetScaler MPX appliances will be deployed in the DMZ network.

  2.

  High Availability will be accessible in the NetScaler MPX in the DMZ Network.

  3.

  Load balancing should be performed for the internal network services like Microsoft Exchange Client Access Services and Microsoft App-V.

  4.

  The load balancing should be performed for StoreFront.

  5.

  The NetScaler Gateway virtual server will be utilizing the StoreFront load-balancing virtual server.

  6.

  The NetScaler Gateway virtual server and StoreFront.

  7.

  The NetScaler Gateway virtual service and StoreFront and load-balancing services are publicly accessible.

  8.

  The traffic for internal and external services must be isolated.

  Click the Exhibit button to review the logical network diagram.

  

  Which two design decisions are incorrect based on these requirements? (Choose two.)

  A. LB StoreFront bound to traffic Domain 0
  B. NetScaler Gateway VIP bound to Traffic Domain 1
  C. LB APP-V bound to Traffic Domain 1
  D. SNIP 192.168.20.2 bound to Traffic Domain 1
  A. LB StoreFront bound to traffic Domain 0
  B. NetScaler Gateway VIP bound to Traffic Domain 1

• Question 37:

  Scenario: A Citrix Architect has deployed two MPX devices, 12.0.53.13 nc and MPX 11500 models, in high availability (HA) pair for the Workspace labs team. The deployment method is two-arm and the devices are installed behind a CISCO ASA 5585 Firewall. The architect enabled the following features on the NetScaler devices. Content Switching, SSL Offloading, Load Balancing, NetScaler Gateway, Application Firewall in hybrid security and Appflow. All are enabled to send monitoring information to NMAS 12.0.53.13 nc build. The architect is preparing to configure load balancing for Microsoft Exchange 2016 server.

  The following requirements were discussed during the implementation:

  1.

  All traffic needs to be segregated based on applications, and the fewest number of IP addresses should be utilized during the configuration

  2.

  All traffic should be secured and any traffic coming into HTTP should be redirected to HTTPS.

  3.

  Single Sign-on should be created for Microsoft Outlook web access (OWA).

  4.

  NetScaler should recognize Uniform Resource Identifier (URl) and close the session to NetScaler when users hit the Logoff button in Microsoft Outlook web access.

  5.

  Users should be able to authenticate using either user principal name (UPN) or sAMAccountName.

  6.

  The Layer 7 monitor should be configured to monitor the Microsoft Outlook web access servers and the monitor probes must be sent on SSL

  Which monitor will meet these requirements?

  A. add lb monitor mon_rpc HTTP-ECV -send “GET /rpc/healthcheck.htm” recv 200 -LRTM DISABLED
  B. add lb monitor mon_rpc HTTP-ECV -send “GET /rpc/healthcheck.htm” recv 200 -LRTM ENABLED
  C. add lb monitor mon_rpc HTTP -send “GET /rpc/healthcheck.htm” recv 200 -LRTM DISABLED -secure YES
  D. add lb monitor mon_rpc HTTP-ECV -send “GET/rpc/healthcheck.htm” recv 200 -LRTM DISABLED -secure YES
  A. add lb monitor mon_rpc HTTP-ECV -send “GET /rpc/healthcheck.htm” recv 200 -LRTM DISABLED

• Question 38:

  Scenario: Based on a discussion between a Citrix Architect and a team of Workspacelab members, the MPX Logical layout for Workspacelab has been created across three (3) sites.

  They captured the following requirements during the design discussion held for a NetScaler design project:

  1.

  All three (3) Workspacelab sites (DC, NDR, and DR) will have similar NetScaler configurations and design.

  2.

  Both external and internal NetScaler MPX appliances will have Global Server Load Balancing (GSLB) configured and deployed in Active/Passive mode.

  3.

  GSLB should resolve both A and AAA DNS queries.

  4.

  In the GSLB deployment, the NDR site will act as backup for the DC site, whereas the DR site will act as backup for the NDR site.

  5.

  When the external NetScaler replies to DNS traffic coming in through Cisco Firepower IPS, the replies should be sent back through the same path.

  6.

  On the internal NetScaler, both the front-end VIP and backend SNIP will be part of the same subnet.

  7.

  The external NetScaler will act as default gateway for the backend servers.

  8.

  All three (3) sites, DC, NDR, and DR, will have two (2) links to the Internet from different service providers configured in Active/Standby mode.

  Which design decision must the architect make the design requirements above?

  A. MAC-based Forwarding must be enabled on the External NetScaler Pair.
  B. NSIP of the External NetScaler must be configured as the default gateway on the backend servers.
  C. The Internal NetScaler must be deployed in Transparent mode.
  D. The ADNS service must be configured with an IPv6 address.
  C. The Internal NetScaler must be deployed in Transparent mode.

• Question 39:

  Scenario: A Citrix Architect needs to design a new NetScaler Gateway deployment for a customer. During the design discussions, the architect learns that the customer would like to allow external RDP connections to internal Windows machines but does NOT want client drive redirection enabled on these connections.

  Where should the architect enable the options to allow the customer to complete their requirement?

  A. NetScaler Gateway global settings
  B. RDP bookmark
  C. Session policy
  D. RDP server profile
  E. Session profile
  F. RDP client profile
  D. RDP server profile

• Question 40:

  Which session parameter does the default authorization setting control when authentication, authorization, and auditing profiles are configured?

  A. Determines the default logging level
  B. Determines whether the NetScaler appliance will allow or deny access to content for which there is no specific authorization policy
  C. Determines the default period after which the user is automatically disconnected and must authenticate again to access the intranet
  D. Determines whether the NetScaler appliance will log users onto all web applications automatically after they authenticate or will pass users to the web application logon page to authenticate for each application.
  E. Controls are amount of time the users can be idle before they are automatically disconnected.
  B. Determines whether the NetScaler appliance will allow or deny access to content for which there is no specific authorization policy