1Y0-440 Practice Online

Question 1

Scenario: A Citrix Architect needs to configure a Content Switching virtual server to provide access to www.workspacelab.com. However, the architect observes that whenever the user tries to access www.worksapcelab.com/CITRIX/WEB, the user receives a "503 - Service Unavailable" response. The configuration snippet is as follows:

What should the architect modify to resolve this issue?

A : add cs policy Pol3 -rule "http.REQ.URL.containsC'WEB")" -action Act3

B : add cs policy Pol3 -rule "http.REQ.URLcontainsf'citrix")" -action Act3

C : set cs vserver Vserver -caseSensitive ON

D : add cs policy Pol3 -rule "http.REQ.URLPATH_AND_QUERY.con

Answer: D

Question 2

Scenario: A Citrix Architect holds a design discussion with a team of Workspacelab members, and they

capture the following requirements for the NetScaler design project.

A pair of NetScaler MPX appliances will be deployed in the DMZ network and another pair in the

internal network.

High availability will be accessible between the pair of NetScaler MPX appliances in the DMZ network.

Multi-factor authentication must be configured for the NetScaler Gateway virtual server.

The NetScaler Gateway virtual server is integrated with the StoreFront server.

Load balancing must be deployed for users from the workspacelab.com domain.

The workspacelab users should be authenticated using Cert Policy and LDAP.

All the client certificates must be SHA 256-signed, 2048 bits, and have UserPrincipalName as the

subject.

Single Sign-on must be performed between StoreFront and NetScaler Gateway.

After deployment, the architect observes that LDAP authentication is failing.

Click the Exhibit button to review the output of aaad debug and the configuration of the authentication policy.

Exhibit 1

Exhibit 2

What is causing this issue?

A : UserNamefield is set as subjection

B : Password used is incorrect

C : User does NOT exist in database

D : IdapLoginName is set as sAMAccountName

Answer: A

Question 3

Scenario: A Citrix Architect has set up Citrix ADC MPX devices in high availability mode with version

12.0.53.13 nc. These are placed behind a Cisco ASA 5505 firewall. The Cisco ASA firewall is configured to

block traffic using access control lists. The network address translation (NAT) is also performed on the

firewall.

The following requirements were captured by the architect during the discussion held as part of the Citrix

ADC security implementation project with the customers security team:

The Citrix ADC MPX device:

should monitor the rate of traffic either on a specific virtual entity or on the device It should be able to

mitigate the attacks from a hostile client sending a flood of requests. The Citrix ADC device should be

able to stop the HTTP TCP. and DNS based requests

needs to protect backend servers from overloading

needs to queue all the incoming requests on the virtual server level instead of the service level

should provide access to resources on the basis of priority

should provide protection against well-known Windows exploits virus-infected personal computers,

centrally managed automated botnets, compromised webservers, known spammers/hackers, and

phishing proxies

should provide flexibility to enforce the desired level of security check inspections for the requests

originating from a specific geolocation database.

should block the traffic based on a pre-determined header length. URL length and cookie length. The

device should ensure that characters such as a single straight quote ('): backslash (\); and semicolon (;)

are either blocked, transformed, or dropped while being sent to the backend server.

Which security feature should the architect configure to meet these requirements?

A : Configure Application Firewall with HTML cross-site scripting to block unwanted traffic

B : Configure pattern sets using regular expressions to block attacks

C : Configure Signatures manually and apply them to the Application Firewall profile

D : Configure signatures to auto-update and apply them to the Application Firewall profile

E : Configure IP address reputation and use IPREP and webroot to block the traffic

Answer: A

Question 4

Which session parameter does the default authorization setting control when authentication, authorization, and auditing profiles are configured?

A : Determines the default logging level

B : Determines whether the Citrix ADC appliance will allow or deny access to content for which there is no specific authorization policy

C : Determines the default period after which the user is automatically disconnected and must authenticate again to access the intranet

D : Determines whether the Citrix ADC appliance will log users onto all web applications automatically after they authenticate or will pass users to the web application logon page to authenticate for each application.

E : Controls are amount of time the users can be idle before they are automatically disconnected

F : Determines whether the Citrix ADC appliance will use primary or the secondary authentication for SSO

Answer: B

Question 5

For which three reasons should a Citrix Architect perform a capabilities assessment when designing and deploying a new NetScaler in an existing environment? (Choose three.)

A : Understand the skill set of the company.

B : Assess and identify potential risks for the design and build phase.

C : Establish and prioritize the key drivers behind a project.

D : Determine operating systems and application usage.

E : Identify other planned projects and initiatives that must be integrated with the design and build phase.

Answer: A,B

Name:	Architecting a Citrix Networking Solution
Exam Code:	1Y0-440
Certification:	Citrix Certified Associate - Networking (CCA-N) (Level I)
Vendor:	Citrix
Total Questions:	154
Last Updated:	May 06, 2024

Download Demo 1Y0-440 Dumps

Create Account

Password Recovery

1Y0-440 Practice Online

Download Demo 1Y0-440 Dumps

Member Login

Create Account

Password Recovery

1Y0-440 Practice Online