Download Free Citrix 1Y0-241 Real Exam Questions Download
Latest Citrix 1Y0-241 Real Exam Dumps PDF
NEW QUESTION 19
Scenario: A Citrix Administrator gives permissions to team members to access their own admin partition. This will allow them to add resources for different departments and manage them without making changes to the default Citrix ADC partition and configuration.
One team member typing to use the command line interface (CLI) to troubleshoot an authentication issue could NOT use aaad.debug. However, the team member has full permissions on the admin partition.
What can be the cause of this issue?
- A. The team member does NOT have permission to use the CLI.
- B. The team member is NOT using the CLI correctly.
- C. The team member needs to troubleshoot the issue from the GUI.
- D. The team member does NOT have shell access by design.
Answer: B
NEW QUESTION 20
A Citrix Administrator needs to confirm that all client certificates presented to the authentication vServer are valid until the year 2023.
Which expression can the administrator use to meet this requirement?
- A. CLIENT.SSL.ORIGIN_SERVER_CERT.VALID_NOT_AFTER.EQ(GMT2023)
- B. CLIENT.SSL.CLIENT_CERT.VALID_NOT_BEFORE.EQ(GMT2023)
- C. CLIENT.SSL.CLIENT_CERT.VALID_NOT_AFTER.EQ(GMT2023)
- D. CLIENT.SSL.CLIENT_CERT.DAYS_TO_EXPIRE.EQ(2023)
Answer: C
Explanation:
Explanation/Reference: https://docs.citrix.com/en-us/citrix-adc/current-release/ssl/ssl-actions-and-policies/config-built-in- ssl-actions.html
NEW QUESTION 21
Scenario: A Citrix ADC is configured with Interface 1/1 and bound to VLAN 40. A Citrix Administrator executed the below command:
> bind vlan 10 -ifnum 1/1
What is the result of executing this command on the Citrix ADC?
- A. Interface 1/1 is bound to VLAN 20, and native VLAN is NOT changed.
- B. Interface 1/1 is bound to VLAN 20, and native VLAN is 40.
- C. Interface 1/1 is bound to VLAN 20, and native VLAN is 1.
- D. Interface 1/1 is bound to VLAN 20, and native VLAN is 20.
Answer: A
Explanation:
Explanation/Reference: https://support.citrix.com/article/CTX122921
NEW QUESTION 22
Scenario: A Citrix Administrator executed the command below:
> set httpcallout httpcallout1 -cacheForSecs 120
This command changes the cache duration of the HTTP ____________ to be set to 120 seconds. (Choose the correct option to complete the sentence.)
- A. response
- B. request
- C. callout response
- D. callout request
Answer: C
NEW QUESTION 23
Scenario: A company has three departments with proprietary applications that need to be load balanced on a Citrix ADC. The three department managers would like to use the same IP address to access their individual applications. This would mean configuring three load-balanced vServers, all using the same IP address.
What can the Citrix Administrator configure for this scenario?
- A. Three SNIPs with the same IP address on a Citrix ADC
- B. Three different admin partitions that allow use of the same IP address for each load-balanced vServer on a Citrix ADC
- C. Three different Citrix ADCs that use the same IP address
- D. Three different load-balanced vServers with three different IP addresses on a Citrix ADC
Answer: A
NEW QUESTION 24
Scenario: A Citrix Administrator needs to integrate LDAP for Citrix ADC system administration using current active directory (AD) groups. The administrator created the group on the Citrix ADC, exactly matching the group name in LDAP.
What can the administrator bind to specify the permission level and complete the LDAP configuration?
- A. A nested group to the new group
- B. Users to the group on the Citrix ADC
- C. An authentication, authorization, and auditing (AAA) action to the group
- D. A command policy to the group
Answer: D
NEW QUESTION 25
A Citrix Network Engineer informs a Citrix Administrator that a data interface used by Citrix ADC SDX is being saturated.
Which action could the administrator take to address this bandwidth concern?
- A. Configure a failover interface set on each Citrix ADC VPX instance.
- B. Configure LACP on the SDX for the data interface.
- C. Configure LACP on the SDX for management interface.
- D. Add a second interface to each Citrix ADC VPX instance.
Answer: B
Explanation:
Explanation/Reference: https://training.citrix.com/public/Exam+Prep+Guides/241/1Y0-
241_Exam_Preparation_Guide_v01.pdf
NEW QUESTION 26
Scenario: A Citrix Administrator executed the command below in an active-active, global server load balancing (GSLB) setup.
set gslb parameter -ldnsprobeOrder DNS PING TCP
The order to calculate the _____ for dynamic proximity will be the DNS UDP query followed by the ping and then TCP. (Choose the correct option to complete the sentence.)
- A. Round-trip time (RTT)
- B. Time to live (TTL)
- C. Multiple IP responses (MIR)
- D. Empty Domain Service (EDS)
Answer: A
NEW QUESTION 27
A Citrix Administrator needs to configure a rate-limiting policy setting DNS requests to a threshold of 1,000 per second.
Which command does the administrator need to run to correctly configure this policy?
- A. SYS.CHECK.LIMIT(<limit_identifier>) || HTTP.REQ.LIMIT(<limit_identifier>)
- B. SYS.CHECK.LIMIT(<limit_identifier>)
- C. SYS.CHECK.LIMIT(<limit_identifier>) || CONNECTION.IP.LIMIT(<limit_identifier>)
- D. HTTP.REQ.LIMIT(<limit_identifier>)
Answer: B
NEW QUESTION 28
set gslb vServer-GSLB-1-MIR ENABLED
What will the Citrix ADC appliance send when the above command is executed?
- A. The Local GSLB service as the first record in the response and adds the remaining active services as additional records
- B. The best global server load balancing (GSLB) service as the first record in the response, and the remaining active services as additional records
- C. The Remote GSLB service as the first record in the response and adds the remaining active services as additional records
- D. Only the best GSLB service in the response
Answer: A
NEW QUESTION 29
Which two protocols would provide end-to-end data encryption, while allowing a Citrix ADC to optimize the responses? (Choose two.)
- A. SSL protocol for the vServer
- B. SSL protocol for the services
- C. HTTP protocol for the services
- D. HTTP protocol for the vServer
- E. SSL bridge protocol for the vServer
- F. SSL bridge protocol for the services
Answer: A,B
NEW QUESTION 30
Scenario: A Citrix Administrator configured a global server load balancing (GSLB) setup for internal and external users using the same host name. For internal users, cvad.citrite.net should go to the Citrix StoreFront site; for external users, it should connect to the Citrix ADC Gateway VPN site.
Which feature should the administrator configure to accomplish this?
- A. DNS Proxy
- B. DNS View
- C. DNS Preferred Location
- D. DNS Record
Answer: B
NEW QUESTION 31
Scenario: A Citrix Administrator configured SNMP to send traps to an external SNMP system. When reviewing the messages, the administrator notices several entity UP and entity DOWN messages.
To what are these messages related?
- A. Network interface
- B. High availability nodes
- C. Load-balancing vServers
- D. SSL profile
Answer: C
NEW QUESTION 32
Scenario:
POLICY 1:
add rewrite action ACT_1 corrupt_http_header Accept-Encoding
add rewrite policy POL_1 HTTPS.REQ.IS_VALID ACT_1
POLICY 2:
add rewrite action ACT_2 insert_http_header Accept-Encoding "\"identity\"" add rewrite policy POL_2 "HTTP.REQ.IS_VALID " ACT_2 How can a Citrix Administrator successfully bind the above rewrite policies to the load-balancing vServer lb_vsrv so that POL_2 is evaluated after POL_2 is evaluated?
- A. bind lb vServer lb_vsrv -policyName POL_1 -priority 90 -gotoPriorityExpression NEXT -type REQUEST bind lb vServer lb_vsrv -policyName POL_2 -priority 100 -gotoPriorityExpression END -type REQUEST
- B. bind lb vServer lb_vsrv -policyName POL_1 -priority 90 -gotoPriorityExpression END -type REQUEST bind lb vServer lb_vsrv -policyName POL_2 -priority 80 -gotoPriorityExpression NEXT -type REQUEST
- C. bind lb vServer lb_vsrv -policyName POL_1 -priority 110 -gotoPriorityExpression NEXT -type REQUEST bind lb vServer lb_vsrv -policyName POL_2 -priority 100 -gotoPriorityExpression END -type REQUEST
- D. bind lb vServer lb_vsrv -policyName POL_1 -priority 90 -type REQUEST bind lb vServer lb_vsrv -policyName POL_2 -priority 100 -type REQUEST
Answer: C
NEW QUESTION 33
Which two steps are necessary to configure global server load balancing (GSLB) service selection using content switching (CS)? (Choose two.)
- A. Configure a CS vServer of target type GSLB.
- B. Bind the domain to the CS vServer instead of the GSLB vServer.
- C. Configure CS policies that designate a load-balancing vServer as the target vServer.
- D. Bind the GSLB domain to the GSLB vServer.
Answer: A,C
Explanation:
Explanation/Reference: https://docs.citrix.com/en-us/citrix-adc/current-release/global-server-load-balancing/how-to/ configure-gslb-content-switch.html
NEW QUESTION 34
Scenario: The primary content switching vServer has gone down. To troubleshoot, a Citrix Administrator has issued the following command:
> show csvserver CSV
CSV (10.1.100.100:443) - HTTPS Type: CONTENT
State: UP
Last state change was at Mon Jun 29 15:20:43 2020
Time since last state change: 1 day, 06:47:58 610
Client Idle Timeout: 180 sec
Down state flush: ENABLED
Disable Primary vServer On Down: DISABLED
Appflow logging: ENABLED
Port Rewrite: DISABLED
State Update: DISABLED
Default: Content Precedence: URL
vServer IP and Port insertion: OFF
Persistence: NONE redirect: http://www.site1.com/mysite1/maintenance
Backup: vServer-LB-2
Listen Policy: NONE
IcmpResponse: PASSIVE
RHIstate: PASSIVE
Traffic Domain: 0
Based on this output, where will the subsequent request be redirected?
- A. Backup content switching vServer
- B. 10.1.100.100:443
- C. http://www.site1.com/mysite1/maintenance
- D. vServer-LB-2
Answer: C
NEW QUESTION 35
Scenario: After deploying a Citrix ADC in production, a Citrix Administrator notices that client requests are NOT being evenly distributed among backend resources. The administrator wants to change from the default load-balancing method to one that will help distribute the load more evenly.
Which load-balancing method would ensure that the server with the least amount of network utilization is receiving new connections?
- A. Least bandwidth
- B. Least response time
- C. Least packets
- D. Least connection
Answer: D
Explanation:
Explanation/Reference: https://docs.citrix.com/en-us/citrix-adc/current-release/getting-started-with-citrix-adc/load- balancing.html
NEW QUESTION 36
A Citrix Administrator needs to configure a Citrix ADC high availability (HA) pair with each Citrix ADC in a different subnet.
What does the administrator need to do for HA to work in different subnets?
- A. Configure SyncVlan
- B. Turn on HA monitoring on all interfaces
- C. Turn on Independent Network Configuration (INC) mode.
- D. Turn on fail-safe mode.
Answer: C
NEW QUESTION 37
Which mode does a Citrix Administrator need to configure to allow a Citrix ADC to control the packetforwarding function based on the route table lookups?
- A. USIP
- B. Layer 3
- C. Layer 2
- D. MBF
Answer: B
NEW QUESTION 38
Scenario: Client connections to certain vServers are abnormally high. A Citrix Administrator needs to be alerted whenever the connections pass a certain threshold.
How can the administrator use Citrix Application Delivery Management (ADM) to accomplish this?
- A. Configure SMTP reporting on the Citrix ADM by adding the threshold and email address.
- B. Configure specific alerts for vServers using Citrix ADM.
- C. Configure network reporting on the Citrix ADM by setting the threshold and email address.
- D. Configure TCP Insight on the Citrix ADM.
Answer: C
NEW QUESTION 39
A Citrix Administrator needs to use a client's IP address as the source IP address for Citrix ADC-to-server connections.
Which Citrix ADC mode can the administrator use to meet this requirement?
- A. USIP
- B. USNIP
- C. Layer 3
- D. Layer 2
Answer: A
NEW QUESTION 40
To protect an environment against Hash DoS attacks, which two configurations can a Citrix Administrator use to block all post requests that are larger than 10,000 bytes? (Choose two.)
- A. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\") ||
http.REQ.CONTENT_LENGTH.GT(10000)"
> add rewrite policy drop_rewrite expr_hashdos_prevention DROP
> bind rewrite global drop_rewrite 100 END -type REQ_OVERRIDE - B. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\") ||
http.REQ.CONTENT_LENGTH.GT(10000)"
> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP
> bind responder global pol_resp_hashdos_prevention 100 END -type REQ_OVERRIDE - C. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\") ||
http.REQ.CONTENT_LENGTH.GT(10000)"
> add rewrite policy drop_rewrite expr_hashdos_prevention DROP
> bind rewrite global drop_rewrite 70 END -type REQ_OVERRIDE - D. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\") ||
http.REQ.CONTENT_LENGTH.GT(10000)"
> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP
> bind responder global pol_resp_hashdos_prevention 70 END -type REQ_OVERRIDE - E. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\")&&
http.REQ.CONTENT_LENGTH.GT(10000)"
> add rewrite policy drop_rewrite expr_hashdos_prevention DROP
> bind rewrite global drop_rewrite 100 END -type REQ_OVERRIDE - F. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\")&&
http.REQ.CONTENT_LENGTH.GT(10000)"
> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP
> bind responder global pol_resp_hashdos_prevention 70 END -type REQ_OVERRIDE
Answer: B,F
Explanation:
Explanation/Reference: https://support.citrix.com/article/CTX131868
NEW QUESTION 41
......
PDF (New 2021) Actual Citrix 1Y0-241 Exam Questions: https://www.realvce.com/1Y0-241_free-dumps.html
1Y0-241 Exam Dumps, 1Y0-241 Practice Test Questions: https://drive.google.com/open?id=1Vppz1cJPC1iTbsM7_vNAZ5M-vMuIeyhj