Deck 2: Deploy and Manage Citrix ADC 13 with Citrix Gateway

Question 1

What does a Citrix Administrator need to configure to allow access to Citrix Virtual Apps and Desktops without the use of a VPN or a clientless-access connection?

A) Ciphers group
B) SSL profile
C) Net profile
D) ICA proxy

Answer 1

D

Question 2

Which two features can a Citrix Administrator use to allow secure external access to a sensitive company web server that is load-balanced by the Citrix ADC? (Choose two.)

A) Authentication, authorization, and auditing (AAA)
B) Citrix Web App Firewall
C) ICA proxy
D) AppFlow
E) Integrated caching

Answer 2

A,B

Question 3

Which three Citrix Gateway elements can be configured by the Citrix Gateway Wizard? (Choose three.)

A) The rewrite policy for HTTP to HTTPS redirect
B) The responder policy for HTTP to HTTPS redirect
C) The Citrix Gateway primary virtual server
D) The bind SSL server certificate for the Citrix Gateway virtual server
E) The primary and optional secondary authentications

Answer 3

C,D,E

Question 4

Scenario: A Citrix Administrator configured a new router that requires some incoming and outgoing traffic to take different paths through it. The administrator notices that this is failing and runs a network trace. After a short monitoring period, the administrator notices that the packets are still NOT getting to the new router from the Citrix ADC. Which mode should the administrator disable on the Citrix ADC to facilitate the successful routing of the packets?

A) Layer3
B) USNIP
C) MAC-based forwarding (MBF)
D) USIP

Question 5

Scenario: A Citrix Administrator configured the policies below: POLICY 1: add rewrite action ACT_1 corrupt_http_header Accept-Encoding add rewrite policy POL_1 HTTP.REQ.IS_VALID ACT_1 POLICY 2: add rewrite action ACT_2 insert_http_header Accept-Encoding "\"identity\"" add rewrite policy POL_2 "HTTP.REQ.IS_VALID" ACT_2 Which set of commands can the administrator use to bind the rewrite policies to the LB vserver lb_vsrv so that POL_2 is evaluated after POL_1 is evaluated successfully?

A) bind lb vserver lb_vsrv -policyName POL_1 -priority 110 -gotoPriorityExpression NEXT -type REQUEST bind lb vserver lb_vsrv -policyName POL_2 -priority 100 -gotoPriorityExpression END -type REQUEST
B) bind lb vserver lb_vsrv -policyName POL_1 -priority 90 -type REQUEST bind lb vserver lb_vsrv -policyName POL_2 -priority 100 -type REQUEST
C) bind lb vserver lb_vsrv -policyName POL_1 -priority 90 -gotoPriorityExpression END -type REQUEST bind lb vserver lb_vsrv -policyName POL_2 -priority 80 -gotoPriorityExpression NEXT -type REQUEST
D) bind lb vserver lb_vsrv -policyName POL_1 -priority 90 -gotoPriorityExpression NEXT -type REQUEST

Question 6

Scenario: A Citrix Administrator needs to integrate LDAP for Citrix ADC system administration using current Active Directory (AD) groups. The administrator created the group on the Citrix ADC, exactly matching the group name in LDAP. What can the administrator bind to specify the permission level and complete the LDAP configuration?

A) Users to the group on the Citrix ADC
B) A nested group to the new group
C) An authentication, authorization, and auditing (AAA) action to the group
D) A command policy to the group

Question 7

What can a Citrix Administrator configure to filter IPv4 addresses?

A) Pattern set
B) Data set
C) Citrix Web App Firewall
D) URL set

Question 8

Scenario: A Citrix Administrator manages an environment that has three SSL websites, all serving the same content. www.company.com www.company.net www.company.org The administrator would like to consolidate the websites into a single, load-balanced SSL virtual server. What can the administrator bind to use a single SSL virtual server?

A) The certificate of each website to a single SSL virtual server
B) A wildcard certificate to a single SSL virtual server
C) A multiple SAN certificate to a single SSL virtual server
D) A wildcard certificate to a content-switching virtual server

Question 9

Scenario: To meet the security requirements of the organization, a Citrix Administrator needs to configure a Citrix Gateway virtual server with time-outs for user sessions triggered by the behaviors below: Inactivity for at least 15 minutes. No keyboard or mouse activity for at least 15 minutes Which set of time-out settings can the administrator configure to meet the requirements?

A) Session time-out and client idle time-out set to 15
B) Session time-out and forced time-out set to 15
C) Client idle time-out and forced time-out set to 15
D) Client idle time-out and forced time-out set to 900

Question 10

A Citrix Administrator needs to configure a Citrix ADC high availability (HA) pair with each Citrix ADC in a different subnet. What does the administrator need to do for HA to work in different subnets?

A) Configure SyncVLAN
B) Turn on Independent Network Configuration (INC) mode
C) Turn on HA monitoring on all Interfaces
D) Turn on fail-safe mode

Question 11

What can a Citrix Administrator configure to access RDP shortcuts?

A) Split tunneling
B) Bookmarks
C) Next hop server
D) Intranet applications

Question 12

A Citrix Administrator has received a low disk space alert for /var on the Citrix ADC. Which type of files should the administrator archive to free up space?

A) Syslog
B) Nslog
C) DNScache
D) Nsconfig

Question 13

Scenario: A Citrix Administrator currently manages a Citrix ADC environment for a growing retail company that may soon double its business volume. A Citrix ADC MPX 5901 is currently handling web and SSL transactions, but is close to full capacity. Due to the forecasted growth, the administrator needs to find a cost-effective solution. Which cost-effective recommendation can the administrator provide to management to handle the growth?

A) A license upgrade to a Citrix ADC MPX 5905
B) The addition of another MPX 5901 appliance
C) A hardware upgrade to a Citrix ADC MPX 8905
D) A hardware upgrade to a Citrix ADC SDX 15020

Question 14

Which type of policy would a Citrix Administrator use to disable USB redirection?

A) Session
B) SmartControl
C) Auditing
D) Authorization

Question 15

Scenario: A Citrix Administrator needs to create local, limited-privilege user accounts for other administrators. The other administrators will require only: The ability to enable and disable services and servers Read-only access Which built-in command policy permission level can the administrator use?

A) Read-only
B) Operator
C) Sysadmin
D) Network

Question 16

Which set of items can a Citrix Administrator change when configuring a portal theme for users?

A) Browser requirements, logo, labels
B) Logo, background, browser requirements
C) Font color, labels, URL displayed
D) Logo, background, labels

Question 17

Scenario: A Citrix Administrator is managing a Citrix Gateway with a standard platform license and remote employees in the environment. The administrator wants to increase access by 3,000 users through the Citrix Gateway using VPN access. Which license should the administrator recommend purchasing?

A) Citrix Gateway Express
B) Citrix ADC Upgrade
C) Citrix Gateway Universal
D) Citrix ADC Burst Pack

Question 18

The Citrix ADC SDX architecture allows instances to share _____________ and _____________. (Choose the two correct options to complete the sentence.)

A) the kernel
B) CPU
C) memory
D) physical interfaces

Question 19

Scenario: A Citrix Administrator configured SNMP to send traps to an external SNMP system. When reviewing the messages, the administrator notices several entity UP and entity DOWN messages. To what are these messages related?

A) Load-balancing virtual servers
B) SSL certificate
C) VLAN
D) High availability nodes

Question 20

What is one reason a Citrix Administrator should configure the AlwaysON VPN feature?

A) An employee needs to have client choices after logging on outside the enterprise network.
B) Management wants to regulate the network access provided to its users when they are connected to a VPN tunnel.
C) Management wants web traffic to go out locally instead of across the VPN.
D) An employee starts the laptop outside the enterprise network and needs assistance to establish VPN connectivity.

Question 21

Scenario: A Junior Citrix Administrator needs to create a content switching virtual server on a Citrix ADC high availability (HA) pair. The NSIP addresses are 192 168.20.10 and 192.168.20.11. The junior administrator connects to NSIP address 192.168.20.10 and saves the changes. The following day, a Senior Citrix Administrator tests the new content switching virtual server, but it is NOT working. The senior administrator connects to the HA pair and discovers that everything the junior administrator configured is NOT visible. Why has the Citrix ADC lost the newly added configurations?

A) The junior administrator made the changes and did NOT force a failover to save the configurations.
B) The junior administrator connected to the NSIP of the secondary Citrix ADC in the HA pair.
C) The Citrix ADC appliances have different firmware versions.
D) Both Citrix ADCs in the HA pair restarted overnight.

Question 22

Scenario: A Citrix Administrator is configuring a new authentication, authorization, and auditing (AAA) virtual server, and the status is DOWN. The administrator makes the below configurations: add lb vserver lb_vsrv_www HTTP 10.107.149.229 80 -persistenceType NONE -cltTimeout 180 -authn401 ON -authnVsName SAML_SP bind lb vserver lb_vsrv_www_ssl Red_srv bind lb vserver Ib_vsrv_www_ssl Blue_srv add authentication vserver SAML_SP SSL 10.107.149.230 443 -AuthenticationDomain citrix.lab What should the administrator bind to the virtual server SAML_SP to complete the installation and change the status to UP?

A) An SSL certificate
B) A service
C) An AAA policy
D) An LDAP policy

Question 23

Scenario: After deploying a Citrix ADC in production, a Citrix Administrator notices that client requests are NOT being evenly distributed among backend resources. The administrator wants to change from the default load-balancing method to one that will help distribute the load more evenly. Which load-balancing method would ensure that the server with the least amount of network utilization is receiving new connections?

A) Least response time
B) Least bandwidth
C) Least connection
D) Least packets

Question 24

Scenario: Client connections to certain virtual servers are abnormally high. A Citrix Administrator needs to be alerted whenever the connections pass a certain threshold. How can the administrator use Citrix Application Delivery Management (ADM) to accomplish this?

A) Configure TCP Insight on the Citrix ADM.
B) Configure SMTP reporting on the Citrix ADM by adding the threshold and email address.
C) Configure specific alerts for virtual servers using Citrix ADM.
D) Configure network reporting on the Citrix ADM by setting the threshold and email address.

Question 25

Which three pieces of information are required for a Citrix Unified Gateway deployment? (Choose three.)

A) Advanced license or higher
B) Valid SSL certificate
C) Multiple IP addresses for user access
D) Secondary authentication for the Citrix Gateway
E) Content Switching virtual server

Question 26

A Citrix ADC is connected with one network interface to the client network and another to the server network, ensuring that all traffic flows through the appliance. Which type of deployment is this?

A) Direct server return
B) One-arm
C) Bridge mode
D) Two-arm

Question 27

Scenario: A Citrix Administrator would like to grant access to a Junior Citrix Administrator on the Citrix ADC. The administrator would like to grant full access to everything except: Shell User configuration Partition configuration Which preexisting command policy would meet the needs of this scenario?

A) Network
B) Operator
C) Sysadmin
D) Superuser

Question 28

What is a recommended practice for managing a Citrix ADC high availability (HA) pair to ensure that management changes are always made on the primary Citrix ADC?

A) Enable USIP on both nodes (primary and secondary).
B) Connect to both Citrix ADCs to see which one is the primary.
C) Enable management access to a SNIP.
D) Enable management access on the Cluster IP (CLIP) address.

Question 29

Scenario: While attempting to access a web server that is load-balanced by a Citrix ADC using HTTPS, a user receives the message below: SSL/TLS error: You have not chosen to trust "Certificate Authority" the issuer of the server's security certificate. What can a Citrix Administrator do to prevent users from getting this message?

A) Ensure that the server certificate is linked to its respective intermediate and root certificates.
B) Ensure that users have the server certificate installed.
C) Ensure that users have the certificate's private key.
D) Ensure that users have the certificate's public key.

Question 30

A Citrix Administrator configured a Citrix Gateway virtual server for authentication, but there is no authentication policy bound to the virtual server. Which authentication binding point will the Citrix ADC evaluate next?

A) Override global
B) Group
C) Default global
D) User

Question 31

A Citrix Administrator needs to provide access to Microsoft SharePoint through Citrix Gateway for users connecting from a web browser using the Citrix Gateway plug-in. How can the administrator configure this?

A) Configure Citrix Gateway in ICA proxy mode.
B) Set clientless access to OFF.
C) Enable SSL bridge mode.
D) Set clientless access to ON.

Question 32

Which authentication type can a Citrix Administrator use to enable Citrix ADC authentication, authorization, and auditing (AAA) dual-factor authentication from a user's mobile device app?

A) LDAP
B) LOCAL
C) SAML
D) RADIUS

Question 33

A Citrix Administrator wants to customize the look of the landing page presented to users during the authentication process on Citrix ADC. Which nFactor component should the administrator modify in this scenario?

A) Logon Schema
B) Pass-through factor
C) Next factor
D) NoAuth Policy

Question 34

A Citrix Administrator needs to deploy a Citrix ADC between the servers and the client, with servers only allowed to reach the client through the Citrix ADC. In which mode should the administrator deploy the Citrix ADC?

A) Inline
B) Direct server return
C) Transparent
D) One-arm

Question 35

Scenario: A Citrix Administrator made changes to a Citrix ADC, deleting parts of the configuration and saving some new ones. The changes caused an outage that needs to be resolved as quickly as possible. There is no Citrix ADC backup. What does the administrator need to do to recover the configuration quickly?

A) Restore from the revision history.
B) Run high availability (HA) file synchronization.
C) Restart the Citrix ADC.
D) Run saved versus running configuration.

Question 36

Scenario: A Citrix Administrator suspects an attack on a load-balancing virtual server (IP address 192.168.100.25). The administrator needs to restrict access to this virtual server for 10 minutes. Which access control list (ACL) will accomplish this?

A) add ns acl rule1 DENY -destIP 192.168.100.25 -TTL 600000
B) add simpleacl rule1 DENY -srcIP 192.168.100.25 -TTL 600000
C) add ns acl rule1 DENY -destIP 192.168.100.25 -TTL 600
D) add simpleacl rule1 DENY -srcIP 192.168.100.25 -TTL 600

Question 37

What are three possible policy results in a default (advanced) policy configuration? (Choose three.)

A) true
B) false
C) Undefined
D) Bridge
E) Drop

Question 38

Scenario: While performing a disaster recovery test, a Citrix Administrator decides to failover the Citrix ADC high availability (HA) pair appliances. The administrator notices that the failover is NOT working as expected, and the secondary Citrix ADC is NOT taking over as primary. The administrator suspects that networking issues may be causing the failure. What could be the cause of this issue?

A) HA monitoring is enabled on an interface of the secondary node that shows as ENABLED, DOWN.
B) HA monitoring is enabled on a disabled interface of the primary node.
C) HA heartbeats are only seen on some enabled interfaces of the secondary node.
D) The Independent Network Configuration (INC) mode is enabled on the primary node.

Question 39

Scenario: A Citrix ADC MPX is using one of four available 10G ports. A Citrix Administrator discovers a traffic bottleneck at the Citrix ADC. What can the administrator do to increase bandwidth on the Citrix ADC?

A) Add two more 10G Citrix ADC ports to the network and configure VLAN.
B) Add another 10G Citrix ADC port to the switch, and configure link aggregation control protocol (LACP).
C) Purchase another Citrix ADC MPX appliance.
D) Plug another 10G Citrix ADC port into the router.

Question 40

Which scenario will cause automatic high availability (HA) synchronization to fail?

A) Different build versions
B) A configuration change to the primary Citrix ADC
C) A forced failover
D) Manually forced synchronization

Question 41

A Citrix Administrator needs to configure a Citrix Gateway virtual server to meet an organization's security requirements. Which two types of devices can the administrator control with Endpoint Analysis (EPA) scans? (Choose two.)

A) iOS
B) Mac
C) Microsoft Windows
D) Chromebook
E) Android

Question 42

After being audited, a Citrix Administrator learns that additional security enhancements should be made to one of the virtual servers. Which two actions can the administrator perform to accomplish this? (Choose two.)

A) Enable the TLSv1.2.
B) Enable the RC4 cipher suite.
C) Create a SHA1 key.
D) Disable the SSLv3.