
[Mar-2022] 1Y0-241 Dumps With 100% Verified Q&As - Pass Guarantee or Full Refund
Pass Citrix 1Y0-241 Exam With Practice Test Questions Dumps Bundle
Citrix 1Y0-241 Exam Certification Details:
| Passing Score | 61% |
| Sample Questions | Citrix 1Y0-241 Sample Questions |
| Schedule Exam | PEARSON VUE |
| Exam Price | $200 USD |
| Exam Name | Deploy and Manage Citrix ADC 13 with Traffic Management (CCA-AppDS) |
| Exam Code | 1Y0-241 |
| Duration | 90 minutes |
NEW QUESTION 29
Scenario: A Citrix Administrator configured a load-balancing vServer. The URL for this vServer is vpn.citrix.com. The backend server has the host name configured as server1.citrix.com.
The administrator needs to implement the policy to change the host name from vpn.citrix.com to server1.citrix.com, and vice versa.
Which does the administrator need to configure to meet this requirement?
- A. set transform action "host change" -priority 10 -reqUrlFrom "https://vpn.citrix.com/*" -reqUrlInto
"https://server1.citrix.com/*" -resUrlFrom "https://server1.citrix.com/*" -resUrlInto "https://vpn.citrix.com/*" - B. set transform action "host change" -priority 10 -reqUrlFrom "https://server1.citrix.com/*" -reqUrlInto
"https://vpn.citrix.com/*" -resUrlFrom "https://vpn.citrix.com/*" -resUrlInto "https://server1.citrix.com/*" - C. set transform action "host change" -priority 10 -reqUrlFrom "https://server1.citrix.com/*" -reqUrlInto
"https://vpn.citrix.com/*" -resUrlFrom "https://server1.citrix.com/*" -resUrlInto "https://vpn.citrix.com/*" - D. set transform action "host change" -priority 10 -reqUrlFrom "https://vpn.citrix.com/*" -reqUrlInto
"https://server1.citrix.com/*" -resUrlFrom "https://vpn.citrix.com/*" -resUrlInto "https://server1.citrix.com/*"
Answer: D
NEW QUESTION 30
To protect an environment against Hash DoS attacks, which two configurations can a Citrix Administrator use to block all post requests that are larger than 10,000 bytes? (Choose two.)
- A. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\") ||
http.REQ.CONTENT_LENGTH.GT(10000)"
> add rewrite policy drop_rewrite expr_hashdos_prevention DROP
> bind rewrite global drop_rewrite 70 END -type REQ_OVERRIDE - B. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\")&&
http.REQ.CONTENT_LENGTH.GT(10000)"
> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP
> bind responder global pol_resp_hashdos_prevention 70 END -type REQ_OVERRIDE - C. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\") ||
http.REQ.CONTENT_LENGTH.GT(10000)"
> add rewrite policy drop_rewrite expr_hashdos_prevention DROP
> bind rewrite global drop_rewrite 100 END -type REQ_OVERRIDE - D. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\")&&
http.REQ.CONTENT_LENGTH.GT(10000)"
> add rewrite policy drop_rewrite expr_hashdos_prevention DROP
> bind rewrite global drop_rewrite 100 END -type REQ_OVERRIDE - E. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\") ||
http.REQ.CONTENT_LENGTH.GT(10000)"
> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP
> bind responder global pol_resp_hashdos_prevention 70 END -type REQ_OVERRIDE - F. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\") ||
http.REQ.CONTENT_LENGTH.GT(10000)"
> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP
> bind responder global pol_resp_hashdos_prevention 100 END -type REQ_OVERRIDE
Answer: B,F
Explanation:
Explanation/Reference: https://support.citrix.com/article/CTX131868
NEW QUESTION 31
Scenario: A Citrix Administrator configured Citrix ADC load balancing to send requests to one of three identical backend servers. Each server handles multiple protocols, and load balancing is set up in round-robin mode.
The current load-balancing setup on the Citrix ADC is:
* One load-balancing vServer with one externally accessible VIP
* One service created for each protocol type
* One server entity for each backend resource
During business hours, the administrator wants to make changes to one backend server without affecting the other servers.
What is the most efficient way for the administrator to ensure that all traffic is routed away from the server without impeding responses from other resources?
- A. Disable the backend server entity targeted for change.
- B. Disable the backend service entity targeted for change.
- C. Unbind the correct server entity from the load-balancing vServer.
- D. Disable the load-balancing vServer.
Answer: D
NEW QUESTION 32
Which two steps are necessary to configure global server load balancing (GSLB) service selection using content switching (CS)? (Choose two.)
- A. Configure a CS vServer of target type GSLB.
- B. Configure CS policies that designate a load-balancing vServer as the target vServer.
- C. Bind the GSLB domain to the GSLB vServer.
- D. Bind the domain to the CS vServer instead of the GSLB vServer.
Answer: A,B
NEW QUESTION 33
To protect an environment against Hash DoS attacks, which two configurations can a Citrix Administrator use to block all post requests that are larger than 10,000 bytes? (Choose two.)
- A. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\") ||
http.REQ.CONTENT_LENGTH.GT(10000)"
> add rewrite policy drop_rewrite expr_hashdos_prevention DROP
> bind rewrite global drop_rewrite 70 END -type REQ_OVERRIDE - B. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\")&&
http.REQ.CONTENT_LENGTH.GT(10000)"
> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP
> bind responder global pol_resp_hashdos_prevention 70 END -type REQ_OVERRIDE - C. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\") ||
http.REQ.CONTENT_LENGTH.GT(10000)"
> add rewrite policy drop_rewrite expr_hashdos_prevention DROP
> bind rewrite global drop_rewrite 100 END -type REQ_OVERRIDE - D. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\")&&
http.REQ.CONTENT_LENGTH.GT(10000)"
> add rewrite policy drop_rewrite expr_hashdos_prevention DROP
> bind rewrite global drop_rewrite 100 END -type REQ_OVERRIDE - E. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\") ||
http.REQ.CONTENT_LENGTH.GT(10000)"
> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP
> bind responder global pol_resp_hashdos_prevention 70 END -type REQ_OVERRIDE - F. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\") ||
http.REQ.CONTENT_LENGTH.GT(10000)"
> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP
> bind responder global pol_resp_hashdos_prevention 100 END -type REQ_OVERRIDE
Answer: B,F
NEW QUESTION 34
A Citrix Network Engineer informs a Citrix Administrator that a data interface used by Citrix ADC SDX is being saturated.
Which action could the administrator take to address this bandwidth concern?
- A. Configure LACP on the SDX for the data interface.
- B. Add a second interface to each Citrix ADC VPX instance.
- C. Configure LACP on the SDX for management interface.
- D. Configure a failover interface set on each Citrix ADC VPX instance.
Answer: A
NEW QUESTION 35
A Citrix Administrator configured global server load balancing (GSLB) for www.citrix.com, with two ADNS services named Citrix ADC 1 and Citrix ADC 2 in the setup.
Which record does the administrator need to add on the parent DNS server to delegate requests from www.citrix.com to Citrix ADC 1 and Citrix ADC 2?
- A. Address (A) record
- B. Name Server (NS) record
- C. Pointer Record (PTR)
- D. Canonical Name (CNAME)
Answer: B
Explanation:
Explanation/Reference: https://docs.citrix.com/en-us/citrix-adc/current-release/dns/configure-citrix-adc-adns-server.html
NEW QUESTION 36
Which two policies can a Citrix Administrator configure using only the advanced policy expression? (Choose two.)
- A. SSL
- B. DNS
- C. System
- D. Integrated caching
Answer: B,D
Explanation:
Explanation/Reference: https://docs.citrix.com/en-us/citrix-adc/current-release/appexpert/policies-and-expressions/ introduction-to-policies-and-exp/classic-and-advanced-policy.html
NEW QUESTION 37
Scenario: After deploying a Citrix ADC in production, a Citrix Administrator notices that client requests are NOT being evenly distributed among backend resources. The administrator wants to change from the default loadbalancing method to one that will help distribute the load more evenly.
Which load-balancing method would ensure that the server with the least amount of network utilization is receiving new connections?
- A. Least packets
- B. Least bandwidth
- C. Least connection
- D. Least response time
Answer: C
NEW QUESTION 38
Scenario: A Citrix Administrator manages an environment that has three SSL websites, all serving the same content.
www.company.com
www.company.net
www.company.org
The administrator would like to consolidate the websites into a single, load-balanced SSL vServer.
What can the administrator bind to use a single SSL vServer?
- A. A wildcard certificate to a content-switching vServer
- B. A multiple SAN certificate to a single SSL vServer
- C. A wildcard certificate to a single SSL vServer
- D. The certificate of each website to a single SSL vServer
Answer: D
NEW QUESTION 39
A Citrix Administrator needs to confirm that all client certificates presented to the authentication vServer are valid until the year 2023.
Which expression can the administrator use to meet this requirement?
- A. CLIENT.SSL.CLIENT_CERT.DAYS_TO_EXPIRE.EQ(2023)
- B. CLIENT.SSL.ORIGIN_SERVER_CERT.VALID_NOT_AFTER.EQ(GMT2023)
- C. CLIENT.SSL.CLIENT_CERT.VALID_NOT_AFTER.EQ(GMT2023)
- D. CLIENT.SSL.CLIENT_CERT.VALID_NOT_BEFORE.EQ(GMT2023)
Answer: C
Explanation:
Explanation/Reference: https://docs.citrix.com/en-us/citrix-adc/current-release/ssl/ssl-actions-and-policies/config-built-in- ssl-actions.html
NEW QUESTION 40
Scenario: The Citrix Administrator of a Linux environment needs to load balance the web servers. Due to budget constraints, the administrator is NOT able to implement a full-scale solution.
What can the administrator purchase and install to load balance the webservers?
- A. Citrix ADC VPX
- B. Citrix ADC SDX
- C. Citrix ADC MPX
- D. Citrix ADC CPX
Answer: D
NEW QUESTION 41
Scenario: A Citrix Administrator executed the command below in an active-active, global server load balancing (GSLB) setup.
set gslb parameter -ldnsprobeOrder DNS PING TCP
The order to calculate the _____ for dynamic proximity will be the DNS UDP query followed by the ping and then TCP. (Choose the correct option to complete the sentence.)
- A. Round-trip time (RTT)
- B. Time to live (TTL)
- C. Multiple IP responses (MIR)
- D. Empty Domain Service (EDS)
Answer: A
NEW QUESTION 42
Scenario: A Citrix Administrator configured SNMP to send traps to an external SNMP system. When reviewing the messages, the administrator notices several entity UP and entity DOWN messages.
To what are these messages related?
- A. Network interface
- B. Load-balancing vServers
- C. High availability nodes
- D. SSL profile
Answer: B
NEW QUESTION 43
Scenario: A Citrix Administrator suspects an attack on a load-balancing vServer (IP address 192.168.100.25).
The administrator needs to restrict access to this vServer for 10 minutes.
Which Access Control List (ACL) will accomplish this?
- A. add ns acl rule1 DENY -destIP 192.168.100.25 -TTL 600
- B. add ns acl rule1 DENY -destIP 192.168.100.25 -TTL 600000
- C. add simpleacl rule1 DENY -srcIP 192.168.100.25 -TTL 600
- D. add simpleacl rule1 DENY -srcIP 192.168.100.25 -TTL 600000
Answer: A
NEW QUESTION 44
A Citrix Administrator needs to configure a Citrix ADC high availability (HA) pair with each Citrix ADC in a different subnet.
What does the administrator need to do for HA to work in different subnets?
- A. Turn on Independent Network Configuration (INC) mode.
- B. Turn on HA monitoring on all interfaces
- C. Turn on fail-safe mode.
- D. Configure SyncVlan
Answer: A
Explanation:
Explanation/Reference: https://docs.citrix.com/en-us/citrix-adc/current-release/system/high-availability-introduction/ configuring-high-availability-nodes-different-subnets.html
NEW QUESTION 45
A Citrix Administrator needs to configure a rate-limiting policy setting DNS requests to a threshold of 1,000 per second.
Which command does the administrator need to run to correctly configure this policy?
- A. SYS.CHECK.LIMIT(<limit_identifier>)
- B. SYS.CHECK.LIMIT(<limit_identifier>) || HTTP.REQ.LIMIT(<limit_identifier>)
- C. SYS.CHECK.LIMIT(<limit_identifier>) || CONNECTION.IP.LIMIT(<limit_identifier>)
- D. HTTP.REQ.LIMIT(<limit_identifier>)
Answer: A
NEW QUESTION 46
Which two policies can a Citrix Administrator configure using only the advanced policy expression? (Choose two.)
- A. SSL
- B. DNS
- C. System
- D. Integrated caching
Answer: B,D
NEW QUESTION 47
Which feature can a Citrix Administrator use to create a consistent set of front-end SSL parameters across multiple SSL vServers?
- A. SSL policy
- B. SSL multiplexing
- C. SSL profile
- D. SSL bridge
- E. SSL policy
Answer: C
NEW QUESTION 48
What is the first thing a Citrix Administrator should develop when creating a server certificate for Citrix ADC to secure traffic?
- A. A certificate signing request (CSR)
- B. A certificate revocation list (CRL)
- C. A certificate key-pair
- D. A private key
Answer: D
Explanation:
Explanation/Reference: https://docs.citrix.com/en-us/citrix-adc/current-release/ssl/how-to-articles/create-and-use-ssl- certificates-on-a-citrix-adc-appliance.html
NEW QUESTION 49
Which mode does a Citrix Administrator need to configure to allow a Citrix ADC to control the packet- forwarding function based on the route table lookups?
- A. Layer 3
- B. USIP
- C. Layer 2
- D. MBF
Answer: A
Explanation:
Explanation/Reference: https://docs.citrix.com/en-us/citrix-adc/current-release/getting-started-with-citrix-adc/configure- system-settings/configure-modes-packet-forwarding.html
NEW QUESTION 50
......
2022 Valid 1Y0-241 test answers & Citrix Exam PDF: https://pdfpractice.actual4dumps.com/1Y0-241-study-material.html