Winter Special Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: netbudy65

Note! Citrix has retired the 1Y0-240 Exam Contact us through Live Chat or email us for more information.

1Y0-240 Citrix NetScaler Essentials and Traffic Management Questions and Answers

Questions 4

A Citrix Administrator needs to block all the DNS requests from subnet 10.107.149.0/24.

Which expressions can the administrator use to match the required traffic?

Options:

A.

CLIENT.IP.SRC.IN_SUBNET(10.107.149.0/24) && client.UDP.DSTPORT.EQ(53) || client.TCP.DSTPORT.EQ(53)

B.

CLIENT.IP.SRC.IN_SUBNET(10.107.149.0/24) && (client.UDP.DSTPORT.EQ(53) || client.TCP.DSTPORT.EQ(53))

C.

CLIENT.IP.SRC(10.107.149.0) && (client.UDP.DSTPORT.EQ(53) || client.TCP.DSTPORT.EQ(53))

D.

CLIENT.IP.SRC(10.107.149.0) && client.UDP.DSTPORT.EQ(53) || client.TCP.DSTPORT.EQ(53)

Buy Now
Questions 5

In a Global Server Load Balancing (GSLB) Active/Active environment, the connection proxy is used as the site persistence method.

What is used to source the traffic when connection is proxied?

Options:

A.

LDNS IP Address

B.

Client source IP

C.

Virtual IP

D.

Subnet IP (SNIP)

Buy Now
Questions 6

A Citrix Administrator needs to confirm that all the client certificates presented to the authentication virtual server are valid until year 2020.

Which expression can the administrator use to meet this requirement?

Options:

A.

CLIENT.SSL.CLIENT_CERT.VALID_NOT_BEFORE.EQ(GMT2020)

B.

CLIENT.SSL.CLIENT_CERT.VALID_NOT_AFTER.EQ(GMT2020)

C.

CLIENT.SSL.ORIGIN_SERVER_CERT.VALID_NOT_AFTER.EQ(GMT2020)

D.

CLIENT.SSL.CLIENT_CERT.DAYS_TO_EXPIRE.EQ(2020)

Buy Now
Questions 7

Scenario: User authentication is failing through the NetScaler. A Citrix Administrator checked the Authentication, Authorization and Auditing (AAA) policy, action and virtual server and verified that the correct configuration was in place. The administrator bypassed the NetScaler and the authentication worked.

Which NetScaler utility can the administrator use to troubleshoot the access issue?

Options:

A.

aaad.debug

B.

Dashboard

C.

nscon message

D.

nslog file

Buy Now
Questions 8

Scenario: A Citrix Administrator created an SSL virtual server using only the following commands:

add lb vserver sslvserver SSL 10.102.29.133 444

add service sslsvc1 192.168.0.14 SSL 443

add service sslsvc2 192.168.0.15 SSL 443

bind lb vserver sslvserver sslsvc1

bind lb vserver sslvserver sslsvc2

set ssl vserver sslvserver –ssl3 disabled

The SSL virtual server is currently in a DOWN state.

What could be the reason the SSL virtual server is in a down state?

Options:

A.

SSLv3 is disabled.

B.

The SSL Certificate is NOT bound to the virtual server.

C.

The SSL services are NOT on the 10.102.29.X network

D.

The virtual server SSL port is NOT set to port 443.

Buy Now
Questions 9

A Citrix Administrator has configured the NetScaler as a DNS Proxy Server. The administrator executed the following commands on the NetScaler using command-line interface:

add rewrite action Act_1 replace_dns_header_field “dns.res.header.flags.set(aa)”

add rewrite policy Pol_1 true Act_1

bind rewrite global Pol_1 100 –type dns_res_override

What will be the effect of executing the above commands?

Options:

A.

Set the AA bit of DNS Response

B.

Unset the AA bit of DNS Response

C.

Unset the AA bit of DNS Request

D.

Set the AA bit of DNS Request

Buy Now
Questions 10

What is the effect of the set csv server vserver-CS-1 –redirectURL http://www.newdomain.com/mysite/ command?

Options:

A.

If the status of vserver-CS-1 is DOWN, then users will be redirected to http://www.newdomain.com/mysite/ .

B.

All the requests without url path /mysite/ will be redirected to http://www.newdomain.com/mysite/.

C.

If the vserver-CS-1 encounters high connection rate, then users will be redirected to http://www.newdomain.com/mysite/.

D.

All the requests to vserver-CS-1will be redirected to http://www.newdomain.com/mysite/.

Buy Now
Questions 11

Scenario: A Citrix Administrator has received user complaints about issues connecting to the domain through the NetScaler using AAA. The administrator investigated the issue and found that the domain session cookie that was used during authentication is failing due to resolution issues.

What can the administrator do to fix the issue?

Options:

A.

Configure DNS to assign authentication and traffic management virtual servers to FQDNs in the domain.

B.

Configure FQDNs for the Session Cookies in the domain.

C.

Change the Session Cookie timeout in DNS.

D.

Configure DNS to assign an FQDN for the NetScaler in the domain.

Buy Now
Questions 12

POLICY 1:

add rewrite action ACT_1 corrupt_http_header Accept-Encoding

add rewrite policy POL_1 HTTP.REQ.IS_VALID ACT_1

POLICY 2:

add rewrite action ACT_2 insert_http_header Accept-Encoding “\”identity\””

add rewrite policy POL_2 “HTTP.REQ.IS_VALID” ACT_2

How can a Citrix Administrator bind the rewrite policies to the LB vserver lb_vsrv such that POL_2 is evaluated after POL_1 is evaluated successfully?

Options:

A.

bind lb vserver lb_vsrv –policyName POL_1 –priority 110 –gotoPriorityExpression NEXT –type REQUESTbind lb vserver lb_vsrv –policyName POL_2 –priority 100 –gotoPriorityExpression END –type REQUEST

B.

bind lb vserver lb_vsrv –policyName POL_1 –priority 90 –type REQUESTbind lb vserver lb_vsrv –policyName POL_2 –priority 100 –type REQUEST

C.

bind lb vserver lb_vsrv –policyName POL_1 –priority 90 –gotoPriorityExpression NEXT –type REQUESTbind lb vserver lb_vsrv –policyName POL_2 –priority 100 –gotoPriorityExpression END –type REQUEST

D.

bind lb vserver lb_vsrv –policyName POL_1 –priority 90 –gotoPriorityExpression END –type REQUESTbind lb vserver lb_vsrv –policyName POL_2 –priority 80 –gotoPriorityExpression NEXT –type REQUEST

Buy Now
Questions 13

A Citrix Administrator complains that between the two rewrite policies bound to the vserver, only one policy, whichever has lower priority, works. The other policy is never used.

Click the “Exhibit” button to view the screenshot of the relevant policy binding.

What is the cause of the issue?

Options:

A.

GotoExpression value for Policy RP_remove_srv_header is configured as ‘END’.

B.

The Invoke label is NOT configured.

C.

The Policy expression of the no_chunk_pol is ‘true’ and ‘NOT HTTP.REQ.IS_VALID’.

D.

The Priority of the no_chunk_pol is a higher numeric value than 100.

Buy Now
Questions 14

Which NetScaler mode is commonly referred to as ‘inline mode’?

Options:

A.

One-Arm Mode

B.

MAC-based Forwarding

C.

Two-Arm Mode

D.

Use Source IP (USIP)

Buy Now
Questions 15

A Citrix Administrator is configuring a NetScaler high availability (HA) pair and needs to ensure that one Net Scaler is UP and primary at all times to ensure the business websites are always available.

What does the administrator need to do to ensure that the NetScalers still handle web traffic in the event that both nodes become unavailable or fail a health check?

Options:

A.

Configure HA Fail-safe mode on the Primary NetScaler only.

B.

Disable HA Fail-safe mode on the Primary NetScaler only.

C.

Disable HA Fail-safe mode on the Secondary NetScaler.

D.

Configure HA Fail-safe mode on each NetScaler independently.

Buy Now
Questions 16

Which three statements are true when comparing a Simple Access Control List (ACL) to an Extended ACL? (Choose three.)

Options:

A.

Simple ACLs can be modified.

B.

Extended ACLs have priorities.

C.

Simple ACLs apply first.

D.

Extended ACLs apply first.

E.

Simple ACLs are based on the Source IP address only.

F.

Simple ACLs can bridge traffic.

G.

Simple ACLs can be based on the Source and Destination IP address.

Buy Now
Questions 17

Scenario: A Citrix Administrator used the commands in the screenshot to apply the user-agent check to all the virtual servers. However, the administrator observed that it is NOT being applied to the vServer lb_vsrv_www.

Click on the ‘Exhibit’ button to view the screenshot of the command-line interface.

What can be causing this issue?

Options:

A.

Pattern set is being used with global policies.

B.

Logging action is bound to the Responder policy.

C.

The bind type of the policy drop is Default Global.

D.

Two responder policies are bound to same vServer.

Buy Now
Questions 18

Which command should a Citrix Administrator use to configure a Content Switching virtual server for implementing the Secure Web Gateway in the transparent proxy mode?

Options:

A.

add cs vserver swgVS PROXY 192.168.10.1 80 –Authn401 on –authnVsName explicit-auth-vs

B.

add cs vserver swgVS PROXY ** –Authn401 on –authnVsName explicit-auth-vs

C.

add cs vserver swgVS PROXY 192.168.10.1 –Authn401 on –authnVsName transparent-auth-vs

D.

add cs vserver swgVS PROXY * 21 –Authn401 on –authnVsName transparent-auth-vs

Buy Now
Exam Code: 1Y0-240
Exam Name: Citrix NetScaler Essentials and Traffic Management
Last Update: Dec 4, 2024
Questions: 122