Citrix Citrix Certification 1Y0-440 Questions & Answers

• Question 31:

  Which parameter indicates the number of current users logged on to the NetScaler gateway?

  A. ICA connections

  B. Total Connected Users

  C. Active user session

  D. Maximum User session

  Correct Answer: C

• Question 32:

  Scenario: A Citrix Architect needs to deploy three VPX instances on NetScaler SDX 11500 device to meet the following design requirements:

  1.

  Three (3) VPX instances must be provisioned on the SDX device.

  2.

  Instance 1 must be utilized for deploying NetScaler Gateway virtual server.

  3.

  Instance 2 must be utilized for deploying load balancing virtual servers for XML, Director, StoreFront, and Active Directory servers.

  4.

  Separate IP address must be utilized for the communication with XenApp environment and LDAP communication.

  5.

  Instance 3 must be used for deploying the test environment.

  6.

  In the test environment, NetScaler Gateway virtual server, load balancing virtual servers for XML, Director, StoreFront and Active Directory servers must be configured.

  How many IP addresses will be required to meet these design requirements?

  A. 14

  B. 20

  C. 16

  D. 18

  Correct Answer: D

• Question 33:

  Which three methods can a Citrix Architect use to assess the capabilities of a network infrastructure? (Choose three.)

  A. Review existing monitoring solutions for periods of latency, lost packets, and insufficient bandwidth.

  B. Map the location of the users against the existing network topology.

  C. Alter firewall rules of existing network to fit into the new NetScaler Deployment.

  D. Examine the topology for single points of failure and potential bottlenecks.

  E. Ensure that users and computers are in the correct organizational units (OUs).

  Correct Answer: ABD

• Question 34:

  Which request can a Citrix Architect utilize to create a NITRO API command to add a NetScaler appliance with NSIP address 10.102.29.60 to the cluster?

  

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

  Reference: https://developer-docs.citrix.com/projects/netscaler-nitro-api/en/12.0/usecases/

• Question 35:

  Scenario: A Citrix Architect needs to assess an existing NetScaler gateway deployment. During the assessment, the architect collected key requirements for VPN users, as well as the current session profile settings that are applied to those users.

  Click the Exhibit button to view the information collected by the architect.

  

  Which configuration should the architect change to meet all the stated requirements?

  A. Item 5

  B. Item 1

  C. Item 2

  D. Item 3

  E. Item 4

  Correct Answer: A

• Question 36:

  Scenario: A Citrix Architect needs to deploy a load balancing for an application server on the NetScaler. The authentication must be performed on the NetScaler. After the authentication, the Single Sign-on with the application servers must be performed using Kerberos impersonation.

  Which three authentication methods can the Architect utilize to gather the credentials from the user in this scenario? (Choose three.)

  A. SAML

  B. OTP

  C. TACACS

  D. WEBAUTH

  E. LDAP

  Correct Answer: ADE

• Question 37:

  Scenario: A Citrix Architect needs to design a new multi-datacenter NetScaler deployment. The customer wants NetScaler to provide access to various backend resources by using Global Server Load Balancing

  (GSLB) in an Active-Active deployment.

  Click the Exhibit button to view additional requirements identified by the architect.

  

  Which GSLB algorithm or method should the architect use for the deployment, based on the stated requirements?

  A. Dynamic round trip time (RTT)

  B. Least response time

  C. Static proximity

  D. least connection

  E. Least packets

  F. Source IP hash

  Correct Answer: B

  Reference: https://docs.citrix.com/en-us/netscaler/12/global-server-load-balancing/methods/configuringalgorithm-based-methods.html

• Question 38:

  Which parameter must a Citrix Architect configure to ensure that HDX Proxy Connection terminates upon AAA Session TimeOut?

  A. ICA session timeout in VPN parameters

  B. Session timeout(mins) in NetScaler gateway Session Profile.

  C. Session timeout(mins) in VPN Parameters

  D. ICA session timeout in netScaler Gateway Session Profile.

  Correct Answer: D

  Reference: https://www.citrix.com/content/dam/citrix/en_us/citrix-developer/documents/Netscaler/how-do-iica-session-timeout-with-aaa.pdf

• Question 39:

  Scenario: A Citrix Architect has met with a team of Workspacelab members for a design discussion. They have captured the following requirements for NetScaler design project:

  1.

  The authentication must be deployed for the users from the workspacelab.com and vendorlab.com domains.

  2.

  The workspacelab users connecting from the internal (workspacelab) network should be authenticated using LDAP.

  3.

  The workspacelab users connecting from the external network should be authenticated using LDAP and RADIUS.

  4.

  The vendorlab users should be authenticated using Active Directory Federation Service.

  5.

  The user credentials must NOT be shared between workspacelab and vendorlab.

  6.

  Single Sign-on must be performed between StoreFront and NetScaler Gateway.

  7.

  A domain drop down list must be provided if the used connects to the NetScaler gateway virtual server externally.

  Which method must the architect utilize for user management between the two domains?

  A. Create shadow accounts for the users of the Workspacelab domain in the Vendorlab domain.

  B. Create a global catalog containing the objects of Vendorlab and Workspacelab domains.

  C. Create shadow accounts for the Vendorlab domain in the Workspacelab domain.

  D. Create a two-way trust between the Vendorlab and Workspacelab domains.

  Correct Answer: B

• Question 40:

  Scenario: A Citrix Architect needs to assess an existing on-premises NetScaler deployment which includes Advanced Endpoint Analysis scans. During a previous security audit, the team discovered that certain endpoint devices were able to perform unauthorized actions despite NOT meeting pre-established criteria.

  The issue was isolated to several endpoint analysis (EPA) scan settings.

  Click the Exhibit button to view the endpoint security requirements and configured EPA policy settings.

  

  Which setting is preventing the security requirements of the organization from being met?

  A. Item 1

  B. Item 4

  C. Item 2

  D. Item 3

  Correct Answer: D