1Y0-231 practice questions 111–120

1. Question 111 · 133 in bank

   A Citrix Administrator is concerned about preventing an SSL renegotiation attack. What must the administrator do to prevent an SSL renegotiation attack against the Citrix ADC?

   • AEnable RC4 ciphers.
   • BDeploy Citrix ADC using default settings.
   • CDisable TLSv1.3 and SSLv3.
   • DImplement TLS_FALLBACK_SCSV.

   Show answer

   Answer: B

   Next question

2. Question 112 · 133 in bank

   Scenario: A Citrix Administrator configured the rewrite policies below:

   

   In which order should the policies be evaluated?

   • APOL_2, POL_3, POL_4, POL_1
   • BPOL_1
   • CPOL_2, POL_3
   • DPOL_2, POL_3, POL_4

   Show answer

   Answer: D

   Next question

3. Question 113 · 133 in bank

   Select 2

   What are two pre-requisites on a Citrix Gateway virtual server when configuring SmartAccess policies? (Choose two.)

   • ADTLS must be enabled.
   • BValid universal licenses must be available.
   • CEndpoint Analysis must be configured.
   • DICA Only must be unchecked.

   Show answer

   Answer: BD

   Next question

4. Question 114 · 133 in bank

   Select 3

   A Citrix Administrator needs to customize the user experience for those connecting with the Citrix Gateway plug-in. Using session and traffic policies, which three options can the administrator configure for this customization? (Choose three.)

   • ASplit tunneling
   • BSSO
   • CThe level of user access to applications
   • DThe domains to which users are allowed access
   • EAuthentication methods

   Show answer

   Answer: ABC

   Next question

5. Question 115 · 133 in bank

   Scenario: A Citrix Administrator is configuring a Citrix ADC high availability (HA) pair. The administrator needs to ensure that one Citrix ADC is UP and primary at all times to guarantee that business websites are always available. In the event that both nodes become unavailable or fail a health check, what does the administrator need to do to ensure that the Citrix ADCs still handle web traffic?

   • ADisable HA fail-safe mode on the primary Citrix ADC only.
   • BConfigure HA fail-safe mode on the primary Citrix ADC only.
   • CDisable HA fail-safe mode on each Citrix ADC independently.
   • DConfigure HA fail-safe mode on each Citrix ADC independently.

   Show answer

   Answer: D

   Next question

6. Question 116 · 133 in bank

   Scenario: A Citrix Administrator needs to: • give users the ability to directly change their passwords from their Microsoft Windows machines. • force remote users to change their passwords on their next logon based on compliance and security policies. What can the administrator configure to achieve these requirements?

   • AAlwaysON VPN
   • BAccess Control
   • CSmartAccess
   • DMicro VPN

   Show answer

   Answer: B

   Next question

7. Question 117 · 133 in bank

   Which statement correctly describes a feature of SAML authentication?

   • ASAML authentication performs incremental directory database replication between partners.
   • BSAML can be configured in SAML identity provider (IdP) or SAML service provider (SP) roles on the same Citrix ADC appliance.
   • CCitrix ADC configured with the SAML service provider (SP) role needs to have access to the directory server to validate user credentials.
   • DSAML authentication uses the common LDAP ports, reducing the required port numbers between authentication partners.
   • EOnly encrypted user credentials are passed on the identity provider (IdP) and service provider (SP) roles of SAML.

   Show answer

   Answer: B

   Next question

8. Question 118 · 133 in bank

   Scenario: To receive data alerts for failures, a Citrix Administrator is configuring SNMP on the Citrix ADC. The administrator is confident that the manager, alarms, and SNMP traps are configured correctly. The following week, there is a Citrix ADC-related outage and the administrator does NOT receive any alerts. What could be the reason for this alert failure?

   • AThe Citrix ADC is configured for SNMP version 1.
   • BThe Citrix Web App Firewall is blocking the alerts from going out.
   • CThe Citrix ADC only has standard licensing.
   • DThe community name was NOT configured in the Citrix ADC SNMP trap destination settings.

   Show answer

   Answer: D

   Next question

9. Question 119 · 133 in bank

   A Citrix Administrator needs to provide two-factor authentication in a Citrix Virtual Apps and Desktops with Citrix Gateway environment by ___________ and binding it to the existing virtual server. (Choose the correct option to complete the sentence.)

   • Aconfiguring an nFactor authentication policy
   • Bcreating a SAML IDP policy
   • Cconfiguring a RADIUS authentication policy
   • Dadding an authentication profile

   Show answer

   Answer: C

   Next question

10. Question 120 · 133 in bank

    A Citrix Administrator needs to deploy a Citrix ADC appliance to the network through a single VLAN using a single subnet when clients and servers reside on the same subnet. How can the administrator deploy the Citrix ADC in this environment?

    • AOne-arm
    • BL2 mode
    • CTwo-arm
    • DMAC-based forwarding

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

1Y0-231 practice, question 111. 133 questions available.