Citrix 1Y0-A13 問題集

質問 1：
Scenario: An administrator is configuring Access Gateway 9.0, Enterprise Edition in an environment that consists of a double-hop DMZ deployment. The administrator wants connections from the Citrix XenApp Plugin for Hosted Apps on the Internet to go through the first firewall in order to connect to the Access Gateway appliance in the first DMZ.Which port should the administrator enable on the first firewall?
A. 80
B. 443
C. 389
D. 1494
E. 1812
正解：B

質問 2：
Scenario: The following configuration is set on an Access Gateway appliance:
By default access to all the internal resources is allowed
Session profile "SesProf1" has client security check for Symantec Antivirus running and is
configured with quarantine group "Quar"
Session policy "SesPol1" is configured to use "SesProf1"
"SesPol1" is bound to Access Gateway virtual server
Intranet IP addresses in group "Quar" are bound to 10.217.2.1, 10.217.2.2 subnet
An authorization policy in group "Quar" allows access to resource "Res1"
The policy expression for "SesPol1" is ns_true
UserA is running Symantec Antivirus on a laptop and tries to log into the Access Gateway virtual
server.
UserB is NOT running Symantec Antivirus but still tries to log in to the Access Gateway virtual
server.
What will be the expected behavior for each of these users?
A. UserA and UserB will be able to successfully log into the virtual server and will get assigned intranet IP addresses from the "Quar" group and will only have access to "Res1".
B. UserA will be able to successfully log into the virtual server and will have access to all the internal resources. UserB will also be able to log into the virtual server successfully but will fall into the "Quar" group and will only have access to "Res1".
C. UserA will log in successfully through the virtual server and will have full access to all the internal resources; however, UserB will fail the login.
D. UserB will log in successfully through the virtual server and will have full access to all the internal resources; however, UserA will fail the login.
正解：B

質問 3：
When configuring a Web Interface XenApp Services site for SmartAccess where the Citrix Access Gateway Plugin for Windows is present and traffic is being tunneled to Web Interface, which access method should an administrator configure in the "Edit DMZ Settings" portion of the Access Management Console?
A. Direct
B. Gateway Direct
C. Gateway Translated
D. Translated
正解：A

質問 4：
Scenario: A network administrator created multiple personal folder files (*.pst) on a workstation while accessing Outlook over a VPN session. The administrator would like for the *.pst files to be deleted upon logout from the VPN session.The administrator should configure the client cleanup to clean up _______. (Choose the correct option to complete the sentence.)
A. Cookies
B. Application data
C. Address bars
D. *.pst files
正解：B

質問 5：
Scenario: A company currently has Secure Gateway in its environment. The company has been undergoing major expansions, and the number of employees has grown by 60% over the past three years. Recently, the company acquired a new company and the network administrators were instructed to integrate the new company into the existing environment. Due to the increase in the number of employees, there is a higher demand for more servers and rack space. The senior network administrator intends to replace Secure Gateway with Access Gateway 9.0, Enterprise Edition in order to avoid having to purchase more servers in order to expand the existing Secure Gateway implementation to meet the growing needs of the environment. Which Access Gateway 9.0, Enterprise Edition connection type would meet the needs of this environment?
A. Clientless Access
B. ICA Proxy mode
C. Access Gateway Plugin with transparent interception
D. Access Gateway Plugin with clientless interception
正解：B

質問 6：
An administrator runs maintenance on ServerA every Friday between 9:00 pm -11:00 pm. The administrator has been instructed to deny access through the Access Gateway appliance to ServerA during this period only. What must the administrator configure in the Access Gateway environment to meet this requirement?
A. An authorization policy based on the IP address of ServerA
B. An authentication policy based on the IP address of ServerA
C. Authentication policies based on date and time and the IP address of ServerA
D. Authorization policies based on date and time and the IP address of ServerA
正解：D

質問 7：
What must an administrator do in order to obtain a certificate from an authorized Certificate Authority?
A. Connect to the Certificate Authority as a client, and the Certificate Authority will issue a certificate automatically
B. Log on to a Certificate Authority and download a certificate
C. Create and submit a Certificate Signing Request
D. Create and submit a Key Request
正解：C

質問 8：
A network administrator wants to create different intranet applications for users running the Citrix Access Gateway Plugin for Windows.The administrator should create the intranet application by _______ . (Choose the correct phrase to complete the sentence.)
A. Creating an IP address and a subnet mask with interception proxy mode
B. Creating a range of IP addresses with interception transparent mode
C. Configuring client application name with port ranges
D. Configuring intranet IP addresses
正解：B

質問 9：
Scenario: A system administrator has been asked to configure Access Gateway 9.0, Enterprise Edition so that users are NOT presented with the choices page and can only connect clientlessly. The administrator has decided to perform this configuration at the global level. What should be set under the Client Experience tab?

A. Plugin Type to Windows
B. Clientless Access to On
C. Clientless Access URL Encoding to Clear
D. Windows Plugin Type to Access Gateway
正解：B