1Y0-241 practice questions 51–60

1. Question 51 · 109 in bank

   Scenario: A Citrix ADC is configured with Interface 1/1 and bound to VLAN 40. A Citrix Administrator executes the below command: > bind vlan 20 -ifnum 1/1 What is the result of executing this command on the Citrix ADC?

   • AInterface 1/1 is bound to VLAN 20, and native VLAN is 20.
   • BInterface 1/1 is bound to VLAN 20, and native VLAN is NOT changed.
   • CInterface 1/1 is bound to VLAN 20, and native VLAN is 40.
   • DInterface 1/1 is bound to VLAN 20, and native VLAN is 1.

   Show answer

   Answer: A

   Next question

2. Question 52 · 109 in bank

   Scenario: A Citrix Administrator needs to improve website loading speed. End users are reporting slow GIF image rendering speeds as they scroll down a website, which affects overall page load time. Which Citrix ADC feature can the administrator enable to improve website performance?

   • ADomain sharding
   • BImage lazy loading
   • CImage optimization
   • DImage shrink-to attributes

   Show answer

   Answer: C

   Next question

3. Question 53 · 109 in bank

   A Citrix Administrator needs to confirm that all client certificates presented to the authentication vServer are valid until the year 2023. Which expression can the administrator use to meet this requirement?

   • ACLIENT.SSL.CLIENT_CERT.VALID_NOT_AFTER.EQ(GMT2023)
   • BCLIENT.SSL.CLIENT_CERT.VALID_NOT_BEFORE.EQ(GMT2023)
   • CCLIENT.SSL.ORIGIN_SERVER_CERT.VALID_NOT_AFTER.EQ(GMT2023)
   • DCLIENT.SSL.CLIENT_CERT.DAYS_TO_EXPIRE.EQ(2023)

   Show answer

   Answer: A

   Next question

4. Question 54 · 109 in bank

   Scenario: A Citrix Administrator would like to grant access to a Junior Citrix Administrator on the Citrix ADC. The administrator would like to grant full access to everything except the following: ✑ Shell ✑ User configuration ✑ Partition configuration Which preexisting command policy would meet the needs of this scenario?

   • ASysadmin
   • BOperator
   • CNetwork
   • DSuperuser

   Show answer

   Answer: A

   Next question

5. Question 55 · 109 in bank

   Scenario: A Citrix Administrator configured SNMP to send traps to an external SNMP system. When reviewing the messages, the administrator notices several entity UP and entity DOWN messages. To what are these messages related?

   • ALoad-balancing vServers
   • BNetwork interface
   • CHigh availability nodes
   • DSSL profile

   Show answer

   Answer: A

   Next question

6. Question 56 · 109 in bank

   Select 2

   To protect an environment against Hash DoS attacks, which two configurations can a Citrix Administrator use to block all post requests that are larger than 10,000 bytes? (Choose two.)

   • A> add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\")&& http.REQ.CONTENT_LENGTH.GT(10000)" > add rewrite policy drop_rewrite expr_hashdos_prevention DROP > bind rewrite global drop_rewrite 100 END -type REQ_OVERRIDE
   • B> add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\")&& http.REQ.CONTENT_LENGTH.GT(10000)" > add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP > bind responder global pol_resp_hashdos_prevention 70 END -type REQ_OVERRIDE
   • C> add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\") || http.REQ.CONTENT_LENGTH.GT(10000)" > add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP > bind responder global pol_resp_hashdos_prevention 70 END -type REQ_OVERRIDE
   • D> add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\") || http.REQ.CONTENT_LENGTH.GT(10000)" > add rewrite policy drop_rewrite expr_hashdos_prevention DROP > bind rewrite global drop_rewrite 70 END -type REQ_OVERRIDE
   • E> add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\") || http.REQ.CONTENT_LENGTH.GT(10000)" > add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP > bind responder global pol_resp_hashdos_prevention 100 END -type REQ_OVERRIDE
   • F> add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\") || http.REQ.CONTENT_LENGTH.GT(10000)" > add rewrite policy drop_rewrite expr_hashdos_prevention DROP > bind rewrite global drop_rewrite 100 END -type REQ_OVERRIDE

   Show answer

   Answer: AB

   Next question

7. Question 57 · 109 in bank

   Scenario: A Citrix Administrator suspects an attack on a load-balancing vServer (IP address 192.168.100.25). The administrator needs to restrict access to this vServer for 10 minutes. Which Access Control List (ACL) will accomplish this?

   • Aadd simpleacl rule1 DENY -srcIP 192.168.100.25 -TTL 600000
   • Badd simpleacl rule1 DENY -srcIP 192.168.100.25 -TTL 600
   • Cadd ns acl rule1 DENY -destIP 192.168.100.25 -TTL 600000
   • Dadd ns acl rule1 DENY -destIP 192.168.100.25 -TTL 600

   Show answer

   Answer: D

   Next question

8. Question 58 · 109 in bank

   Scenario: A Citrix Administrator manages an environment that has three SSL websites, all serving the same content. www.company.com www.company.net www.company.org The administrator would like to consolidate the websites into a single, load-balanced SSL vServer. What can the administrator bind to use a single SSL vServer?

   • AA wildcard certificate to a single SSL vServer
   • BA wildcard certificate to a content-switching vServer
   • CThe certificate of each website to a single SSL vServer
   • DA multiple SAN certificate to a single SSL vServer

   Show answer

   Answer: D

   Next question

9. Question 59 · 109 in bank

   Scenario: The primary content switching vServer has gone down. To troubleshoot, a Citrix Administrator has issued the following command: > show csvserver CSV CSV (10.1.100.100:443) -HTTPS Type: CONTENT State: UP - Last state change was at Mon Jun 29 15:20:43 2020 Time since last state change: 1 day, 06:47:58 610 Client Idle Timeout: 180 sec - Down state flush: ENABLED - Disable Primary vServer On Down: DISABLED Appflow logging: ENABLED - Port Rewrite: DISABLED - State Update: DISABLED - Default: Content Precedence: URL vServer IP and Port insertion: OFF Persistence: NONE redirect: http://www.site1.com/mysite1/maintenance Backup: vServer-LB-2 - Listen Policy: NONE - IcmpResponse: PASSIVE - RHIstate: PASSIVE - Traffic Domain: 0 - Based on this output, where will the subsequent request be redirected?

   • Ahttp://www.site1.com/mysite1/maintenance
   • BvServer-LB-2
   • CBackup content switching vServer
   • D10.1.100.100:443

   Show answer

   Answer: B

   Next question

10. Question 60 · 109 in bank

    A Citrix Administrator needs to use a client's IP address as the source IP address for Citrix ADC-to-server connections. Which Citrix ADC mode can the administrator use to meet this requirement?

    • AUSNIP
    • BLayer 2
    • CLayer 3
    • DUSIP

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

1Y0-241 practice, question 51. 109 questions available.