Deploy and Manage Citrix ADC with Traffic Management 1Y0-241 Practice Exam

These questions are part of the practice quiz. Start practicing

• Which binding is required to correctly associate a domain with a GSLB vServer for content switching?
• Which feature should the administrator configure to route internal users to the Citrix StoreFront site and external users to the Citrix ADC Gateway VPN site when using the same host name?
• In a DNS rate-limiting policy, what does the selectorName field specify?
• In a Citrix ADC content-switching configuration, which parameter in a CS action specifies the destination virtual server for matched requests?
• Which Citrix ADC feature enables reusing existing TCP connections across requests?
• After creating and correctly configuring a custom user monitor, where do monitor probes originate by default?
• In a URL-blocking setup using a patset, what is the role of the patset?
• Which statement best describes how you designate which node remains primary or secondary in an HA pair?
• Which of the following could explain why SNMP traps did not reach the destination?
• In a typical global server load balancing (GSLB) setup, how many FQDNs can a single GSLB vServer balance?
• Which operation enables HTTPS on a Citrix ADC site by associating identity with the vServer?
• During maintenance in a round-robin load-balanced environment, which action is most efficient to divert traffic away from a single backend server without affecting others?
• In URL policy expressions, which function checks if the URL path starts with a given string?
• In an HA deployment, which monitoring should be enabled on the primary device interfaces?
• In the ldnsprobeOrder configuration, which probe is performed first?
• What is the exact GSLB command to set the trigger monitor to MEPDOWN for a site called SiteB?
• In the responder redirect example, which HTTP status code is used for the redirect?
• In the given configuration, which statement describes the effect of the responder policy Redirect_Pol bound to vServer vs1 with type REQUEST?
• Which two conditions are described when a policy evaluation results in UNDEFINED?
• When enabling Layer 2 mode on two SDX instances sharing a network interface, what must be done to ensure traffic flows correctly?
• A responder policy bound to a vServer with type REQUEST will be evaluated on which traffic?
• Which profile can a Citrix Administrator create to configure a default profile that disables TLSv1?
• What does the administrator need to do to recover quickly when changes cause outage and there is no Citrix ADC backup?
• Scenario: A Citrix Administrator executes 'set gslb site SiteB -triggerMonitor MEPDOWN'. What is the effect on the default service monitoring at the remote site?
• How can a Citrix Administrator successfully bind the rewrite policies to the load-balancing vServer so that POL2 is evaluated after POL1?
• In a GSLB environment using a proxy for site persistence, which IP address is used as the source for outbound traffic?
• A responder policy that matches a specific AVP value will, by design, redirect the request. Which option reflects this behavior?
• An external syslog server shows no detailed TCP information; what is the likely cause?
• Which HTTP status code is commonly used to indicate a permanent redirect?
• To block all DNS requests from subnet 10.107.149.0/24, which expression correctly matches the traffic?
• Which exact command demonstrates the proper host-change transform to switch from vpn.citrix.com to server1.citrix.com for both requests and responses?
• What is the purpose of the MIR option in GSLB?
• Which scenario could explain why an ACL disappears after a restart if changes were not saved?
• Which function is used in a DNS-based responder policy to match any domain containing a substring 'BAD_URL'?
• Which policy is used to modify data in HTTP requests and responses?
• Which monitoring configuration would meet the requirement of checking for a keyword in a website's response using an HTTP-ECV monitor?
• What is the likely reason the newly added content switching vServer configurations were not visible the next day?
• In the rewrite policy example, the request version is rewritten to which value?
• In an HA pair, which outcome occurs when neither node is configured to stay primary or stay secondary and a failover happens?
• To disable TLSv1 by default on an SSL vServer, which profile should be configured?
• Which line in the csvserver show output indicates whether AppFlow logging is enabled?
• Which Citrix ADC platform offers an out-of-the-box multi-tenant solution?
• Which action enables compression by default for traffic on bound services?
• Which DNS record is used for reverse DNS lookups to map an IP address back to a hostname?
• Which feature is used for manipulating data on HTTP requests and responses?
• What does 'Persistence: NONE' indicate for a vServer in the diagnostic output?
• Which configuration correctly rewrites the HTTP request version to 1.0 in every request using a rewrite policy?
• What technology enables multiple ADC instances to run for separate tenants on a single hardware?
• If the active node fails health checks and there is no stay-primary configuration preventing it, what happens?
• In an active-passive Citrix ADC HA pair, if the upstream router is not updating its ARP table, which configuration resolves the issue?
• What will be the effect of binding a policy dataset named Admin_group to the vServer lb_vsrv_www with specific IP addresses 192.168.149.10, 192.168.149.39, and 192.168.149.49?
• Which configuration would verify a web service health by matching a keyword in the response, using an HTTP-ECV monitor?
• In the example rewrite policy bindings for VIP1_http, which policy is evaluated last?
• Which setting reduces server load, improves response time, and increases the number of SSL transactions per second on an SSL vServer?
• In a GSLB deployment using the same hostname for internal and external traffic, which DNS feature allows serving different responses based on client location?
• Which policy expression will allow all users access through the vServer in an AAA configuration?
• What happens when a responder policy bound to a vServer uses 'gotoPriorityExpression END'?
• In an HA pair, the secondary appliance shows state Unknown due to which issue?
• In a global server load balancing (GSLB) active-active environment, when the connection is proxied, which is used to source the traffic?
• How can an administrator meet the needs of multiple newly acquired companies by providing separate VPN access, load balancing, and throughput on a single hardware device?
• A team member has admin partition permissions but cannot use aaad.debug in the CLI. What is the likely reason?
• Which Citrix ADC edition is designed for container-native load balancing and is suitable for Linux environments with limited budgets?
• Which sequence of tool names matches the described uses: resetting a connection by client parameter, redirecting or replying with a custom message, and manipulating data on HTTP requests/responses?
• Which feature is used to redirect traffic or respond with custom messages in Citrix ADC?
• In a load-balancing setup with three identical backend servers, which action best enables maintenance on one server without impacting others?
• To verify that all client certificates presented to the authentication vServer are valid through the year 2023, which expression should you use?
• Which mechanism can a Citrix Administrator use to restrict access to the Citrix ADC management IP (NSIP) address?
• Which Citrix ADC mode allows using the client’s IP address as the source IP for ADC-to-server connections?
• If a user reports latency while accessing an application load-balanced by Citrix ADC, which tool should you use to gather response time, client latency, and server processing time data?
• During startup of a vServer configured for least bandwidth, which load-balancing method is used by default?
• When MEP is enabled and a GSLB delay of 10 seconds is configured, what happens if the MEP connection remains DOWN for that period?
• In the show csvserver output, what does the Backup field indicate?
• What is the first item you typically create when generating a server certificate for Citrix ADC to secure traffic?
• What is the primary benefit of using a Citrix ADC SDX appliance in a multi-tenant deployment?
• To prevent users from seeing an SSL trust error about the server certificate issuer, which configuration step is essential?
• What is the most likely reason for SNMP alerts not being received despite correct configuration?
• Which statement is NOT a valid bind point for a URL transformation policy?
• How can Citrix ADM be configured to alert you when client connections to vServers exceed a defined threshold?
• In a Citrix ADC high-availability pair, which configuration setting keeps the primary device from losing its role when the secondary is added?
• Binding a policy dataset to a vServer causes the associated policies to be evaluated for which of the following?
• In the CSV show output, what is the value shown for the Traffic Domain field?
• What encryption configuration enables end-to-end security with caching and compression on the Citrix ADC?
• To address bandwidth saturation on the data interface of a Citrix ADC SDX, which action should the administrator take?
• Which upgrade path is most cost-effective to handle increasing SSL and web traffic without adding hardware?
• Which built-in command policy permission level should be used to create local, limited-privilege user accounts that have read-only access and the ability to enable and disable services and servers?
• Which Citrix ADC tool is recommended to diagnose resets observed when a website behind ADC is load-balanced?
• To ensure that one Citrix ADC is always up and primary in an HA pair, what must be configured?
• Which policy is used to generate redirects or custom responses based on requests?
• In the policy binding, what is the priority value assigned to Redirect_Pol?
• To enable high availability across subnets, which mode must be enabled on the Citrix ADC?
• In a DMZ deployment of a Citrix ADC MPX appliance with one interface in the DMZ and the other on the internal network, which deployment mode is appropriate?
• In dynamic proximity calculations, which metric is computed from the sequence of DNS UDP probe, Ping, then TCP?
• Which DNS rate-limiting command sequence correctly configures a threshold of 1,000 per second and enables it globally?
• Which log records detailed information such as statistics, metrics, and debug information in a proprietary binary format on the Citrix ADC?
• A Citrix administrator bound multiple content switching policies. During testing, attempting to access https://cs.mycompany.com results in HTTP 503. Which action should the administrator take to fix the issue?
• For a web service running on port 80, which monitor would verify standard HTTP availability?
• What is the effect of enabling tagging on all interfaces in a shared Citrix SDX environment?
• In a responder policy that rewrites the incoming URL, the policy type used when binding should be REQUEST or RESPONSE?
• Enabling MIR on a GSLB vServer affects responses by:
• A Citrix Administrator configured compression on web servers and removed the Accept Encoding header from client requests, but data are not being compressed by the Citrix ADC. What could be the cause?
• In Citrix ADC, the SNMP traps labeled entity UP and entity DOWN are associated with which component?
• To prevent DNS responses from advertising the IP addresses of all active services, which gslb vServer parameter should be updated?
• What does the setting 'Disable Primary vServer On Down' specify in the show output?
• Which step can a Citrix Administrator take to use default compression policies?
• If a responder policy redirects requests to a new host, which of the following statements is true?
• To provide independent administration for three departments on one appliance, what configuration should be used?
• Which Citrix ADC monitor can verify the authentication service of the Active Directory domain controller?
• What is the primary role of a Subnet IP (SNIP) in Citrix ADC deployments?
• During a disaster recovery test, which condition could cause failover not to occur as expected?
• In the given rewrite policy bindings for VIP1_http, which policy will be evaluated last if POL_12 is hit first?
• Which cost-effective recommendation can the administrator provide to handle projected growth when MPX 5901 is near capacity?
• In content switching, which component determines where to forward matching requests?
• The command 'set httpcallout httpcallout1 -cacheForSecs 120' changes the cache duration of which HTTP element?
• Which policy expression blocks HTTP POST requests with content length greater than 10000 bytes?
• During HA failover, which mechanism does the Citrix ADC use to inform network devices about updated IP-to-MAC bindings?
• To restrict access to a specific load-balancing vServer for 10 minutes using an ACL, which command should be used?
• If a Citrix ADC has a bottleneck on a 10G port and you want to increase total bandwidth, which action should you take?
• Why might an ADM console show only 30 virtual servers when there are 100 across six Citrix ADCs?
• What Citrix ADC feature would you use to reset or drop a connection based on a client or request-based parameter?
• After binding VLAN 20 to interface 1/1 on a Citrix ADC that is already bound to VLAN 40, which of the following describes the interface's VLAN binding and native VLAN?
• Which feature allows creating a consistent set of front-end SSL parameters across multiple SSL vServers?
• In a default Citrix ADC environment, if VLAN 20 is bound to an interface as tagged, which VLANs are bound to the interface?
• Which flag indicates that rewrite policies should apply only to requests?
• A week after configuring an ACL, it is no longer present on the Citrix ADC. What could be the reason?
• In a GSLB deployment for www.citrix.com using two Citrix ADCs, which DNS record must be added on the parent DNS server to delegate requests to the ADCs?
• Which Citrix ADC ACL command would you use to bridge traffic originating from the IP address 192.168.10.200?
• A user reports HTTP 503 Service Unavailable when accessing https://cs.mycompany.com. What change in the Citrix ADC configuration can fix this?
• Which rewrite action type should be used to protect the HTTP header without removing it?
• To filter traffic based on IPv6 addresses, which ACL command would you use on Citrix ADC?
• Which mode on a Citrix ADC can be used to avoid asymmetrical packet flows and multiple route/ARP lookups?
• Which configuration enables department-level isolation on a single Citrix ADC appliance?
• With default settings, if VLAN 20 is bound as tagged on an interface, which VLAN would be untagged?
• In a content switching setup, which policy should be bound to the vServer to correctly route requests when the primary server is selected?
• If a packet is addressed to a MAC owned by the ADC, but the destination IP doesn't belong to the ADC and Layer 3 is enabled by default, what will the ADC do with the packet?
• Which Citrix ADC feature best improves website image rendering speed when users scroll and page load times are sluggish?
• Which configuration method can be used to restrict access to the NSIP?
• Which statement describes the one-arm deployment mode?
• To have three SSL websites served by a single SSL vServer, using a certificate that covers all domains, which certificate type should be bound?
• Which load-balancing method ensures the server with the least network utilization receives new connections?
• What is the effect of binding a GSLB domain to a GSLB vServer?
• To match the host name www.example.com in all HTTP requests, which expression is correct?
• What is a correct statement about using rewrite and responder policies in Citrix ADC?
• What is the effect of enabling 'Stay Primary' on the primary device?
• In a responder policy scenario, which expression completes the policy to ensure that '/mytraining' is appended to every URL path received?
• Which log type would you consult to obtain binary trace data during debugging on the Citrix ADC?
• In content switching policy binding, gotoPriorityExpression NEXT specifies what behavior?
• Which setting would prevent the primary from inadvertently relinquishing its role in an HA scenario?
• How can an administrator remove health checks from specific bound resources?
• Which mode must be configured to allow an ADC to control packet forwarding based on route table lookups?
• What should the administrator enable while configuring the front end optimization (FEO) feature to improve page rendering time?
• Which of the following is a correct rewrite action to replace http:// with https:// in the response body?
• Which statement about a GSLB vServer is true?
• If configuration changes cause an outage and there is no backup, what is the fastest recovery approach?
• Which platform is designed for multi-tenant isolation in Citrix ADC?
• In the show csvserver output, what does the IcmpResponse value PASSIVE denote?
• In an SSL offload deployment, which rewrite policy command will modify all URLs in the HTTP response body from http:// to https://?
• Which action should be taken to ensure clients trust the HTTPS certificate chain used by the Citrix ADC (including intermediate and root certificates)?
• What upgrading flexibility does SDX provide in this scenario?
• A Citrix Administrator configured a rewrite action: > add rewrite action sync_date replace http.res.date.sys.time. What does this rewrite action accomplish?
• To configure a rate-limiting policy for DNS requests at 1,000 per second, which command should you run?
• In the responder policy example, which action is used to construct the new URL by combining the request hostname and path with a fixed file name?
• Which monitor should be used to verify the availability of an e-commerce solution that uses backend SQL and RADIUS, with a status page on port 99?
• Which parameter controls how long to wait before the system stops directing new requests to a service and finalizes persistence when a service is disabled?
• In an active-active GSLB environment, which description matches the order of records in the response when MIR is enabled?
• Which license should the administrator recommend purchasing to increase Citrix Gateway access for 3,000 remote users?
• In the rewrite policy example, which operator is used to compare the HTTP hostname to a fixed value?
• In a Linux environment, due to budget constraints, which Citrix ADC edition can be purchased and installed to load balance web servers?
• What condition triggers the redirect URL configured with set cs vServer vServer-CS-1 -redirectURL http://www.newdomain.com/mysite/?
• To grant a Junior Citrix Administrator full access except Shell, User configuration, and Partition configuration, which preexisting command policy should you apply?
• Which front-end optimization technique allows parallel downloads of resources from different domains to improve page rendering time?
• In a content switching vServer with multiple policies, CSPOL_7 has been invoked. Which policy will be invoked next given the priorities CSPOL_7 (100), CSPOL_5 (90), CSPOL_9 (110), CSPOL_4 (120), CSPOL_8 (210)?
• What is the effect of the given responder policy configuration on requests to http://www.mywebsite.com/?
• To allow three departments to use the same IP address for their load-balanced vServers on a Citrix ADC, what configuration enables this?
• Which of the following is NOT among the four authentication types available for Citrix ADC AAA multifactor authentication?
• Which statement best describes binding a content switching vServer policy with a defined priority and using NEXT to evaluate subsequent policies?
• While the GUI is unresponsive, which action should be taken on a Citrix ADC MPX appliance to restart and capture a core dump for analysis?
• In a responder policy, the expression '!(CLIENT.IP.SRC.TYPECAST_TEXT_T.CONTAINS_ANY("Admin_group"))' RESET applied to a load-balanced vServer will primarily cause what behavior?
• When integrating LDAP for Citrix ADC system administration using AD groups, what binding is used to specify the permission level and complete the LDAP configuration?