Citrix ADC 12 Essentials and Traffic Management - 1Y0-240 Exam Practice Test
Scenario: A network engineer has configured a load balancing virtual server for an HTTP application. Due to the application architecture, it is imperative that a user's session remains on a single server during the session. The session has an idle timeout of 60 minutes. Some devices are getting inconsistent application access while most are working fine. The problematic devices all have tighter security controls in place. Which step should the engineer take to resolve this issue?
Correct Answer: C
Scenario: A Citrix Administrator suspects an attack on a load balancing virtual server.
The administrator needs to restrict the access to the load balancing virtual server (192.168.100.25) for 10 minutes.
Which Access Control List (ACL) will help to accomplish this requirement?
The administrator needs to restrict the access to the load balancing virtual server (192.168.100.25) for 10 minutes.
Which Access Control List (ACL) will help to accomplish this requirement?
Correct Answer: C
Scenario: A network engineer has configured GSLB for a multisite environment. All GSLB services show as UP with an UP MEP status. The engineer has observed that DNS queries are directed to the SNIP of the Citrix ADC; however, no DNS response is being received. How can the engineer resolve this issue?
Correct Answer: C
Which command should a Citrix Administrator use to configure a Content Switching virtual server for implementing the Secure Web Gateway in the transparent proxy mode?
Correct Answer: A
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
Scenario: The Director of network security in a financial organization wants to protect the enterprise network from any external malware threats. To do this, the director needs to gain visibility into otherwise- bypassed traffic and control access to malicious web sites. The director is required to do the following:
Intercept and examine all the traffic, including SSL/TLS (encrypted traffic), coming in, and going out of the enterprise network.
Block access to URLs identified as serving harmful or insecure content. Identify users (employees) in the enterprise who are accessing malicious websites.
Which Citrix ADC deployment mode should a Citrix Administrator use to achieve this requirement?
Intercept and examine all the traffic, including SSL/TLS (encrypted traffic), coming in, and going out of the enterprise network.
Block access to URLs identified as serving harmful or insecure content. Identify users (employees) in the enterprise who are accessing malicious websites.
Which Citrix ADC deployment mode should a Citrix Administrator use to achieve this requirement?
Correct Answer: B
Scenario: A Citrix ADC engineer is adding a new SSL certificate to a Citrix ADC device. During the process the engineer receives an error message:
"Certificate with key size greater than RSA512 or DSA512 bits not supported." The same process has been followed previously on the same model of Citrix ADC successfully.
What is the likely cause of this error?
"Certificate with key size greater than RSA512 or DSA512 bits not supported." The same process has been followed previously on the same model of Citrix ADC successfully.
What is the likely cause of this error?
Correct Answer: B
Scenario: A network engineer needs to configure Citrix Citrix ADC to provide Access Gateway services to VLAN 2 using interface 1/1 only, while also using interface 1/2 to provide load balancing services to VLAN 3. How could this result be achieved?
Correct Answer: D
Scenario: A network engineer has created an SSL offload virtual server. The virtual server shows as a DOWN state. Which two scenarios could cause the virtual server showing as DOWN?
(Choose two.)
(Choose two.)
Correct Answer: D,E
Scenario: A network engineer is going to roll out an upgrade from a 9.x version on a standalone Citrix ADC appliance using the command-line interface. Which two items does the engineer need to download before proceeding with the upgrade? (Choose two.)
Correct Answer: B,D
An engineer is checking that ports are configured correctly between the Citrix ADC system and a back-end web server. Which command should the engineer use to test that the web server is responding on port 80?
Correct Answer: B
Scenario: A Citrix Administrator needs to add 10 new web servers to an existing server farm. The new servers are configured to serve the same applications and connections and are twice the capacity of the existing servers. The administrator wants to ensure that they are being fully utilized. Currently in the environment, the default load-balancing method is being used.
To ensure that only the 10 new servers are receiving twice the connections of the old servers without changing the load balancing to the rest of the environment, the administrator needs to add a weight of __________to the services attached to the__________servers. (Choose the correct option to complete the sentence.)
To ensure that only the 10 new servers are receiving twice the connections of the old servers without changing the load balancing to the rest of the environment, the administrator needs to add a weight of __________to the services attached to the__________servers. (Choose the correct option to complete the sentence.)
Correct Answer: C
Scenario: A Citrix Administrator is configuring SNMP management on the Citrix ADC to receive alerts when something fails. The administrator was confident that the Manager, Alarms and SNMP Traps were configured correctly. The following week, there was a Citrix ADC-related outage and the administrator did NOT get any alerts.
What could be the reason for the SNMP alert failure?
What could be the reason for the SNMP alert failure?
Correct Answer: B
Company policy states that all passwords should travel the network in encrypted packets except SNMP. Which command should the network engineer execute to comply with this policy?
Correct Answer: C