Citrix 1Y0-240 問題集

質問 1：
Scenario: A Citrix Administrator used the commands in the screenshot to apply the user- agent check to all the virtual servers. However, the administrator observed that it is NOT being applied to the vServer lb_vsrv_www.
View the screenshot (Exhibit).

What can be causing this issue?
A. Two responder policies are bound to same vServer.
B. The bind type of the policy drop is Default Global.
C. Logging action is bound to the Responder policy.
D. Pattern set is being used with global policies.
正解：A

質問 2：
Which two of the following settings could be configured using a TCP profile that is bound to a service? (Choose two.)
A. TCP buffer size
B. TCP Server time-out values
C. Source IP for specific subnet
D. Number of max concurrent TCP connections
E. Window scaling
F. Allowed bandwidth throughput
正解：A,E

質問 3：
A Citrix ADC implementation is experiencing intermittent network issues, specifically regarding traffic to a back-end service associated with IP address 10.10.1.86. Which command should a network engineer execute to generate diagnostic information to investigate this issue?
A. traceroute 10.10.1.86
B. show service 10.10.1.86 -summary
C. nstcpdump.sh host 10.10.1.86
D. show run | grep 10.10.1.86
正解：C

質問 4：
Scenario: A company has three HTTP servers that are load balanced using Citrix ADC. When users connect to the HTTP application they often receive inconsistent data or are advised that they need to log on again. Which step should the engineer take to correct this?
A. Remove Down State Flush.
B. Change the global TCP Client Idle Time-Out value.
C. Configure persistence with appropriate timeouts.
D. Change the idle timeout value for the service.
正解：C

質問 5：
A network engineer has configured two Citrix ADC MPX appliances as a high availability (HA) pair. What can the engineer configure to prevent failover if only a single interface fails?
A. PBR
B. FIS
C. SNMP
D. VMAC
正解：B

質問 6：
Scenario: A Citrix Administrator suspects an attack on a load balancing virtual server.
The administrator needs to restrict the access to the load balancing virtual server (192.168.100.25) for 10 minutes.
Which Access Control List (ACL) will help to accomplish this requirement?
A. add ns acl rule1 DENY *destlP 192.168.100.25 *TTL 600000
B. add simpleacl rule1 DENY *srclP 192.168.100.25 *TTL 600
C. add ns acl rule1 DENY *destlP 192.168.100.25 *TTL 600
D. add simpleacl rule1 DENY *srclP 192.168.100.25 *TTL 600000
正解：C

質問 7：
A network engineer might choose to use SSL_Bridge instead of a SSL virtual server in order to
__________. (Choose the correct option to complete the sentence.)
A. enable use of OCSP for revoked certificates
B. be able to decrypt the SSL traffic
C. enable SSL server certificates on the service group
D. pass user certificates to the back-end servers
正解：D