Deploy and Manage Citrix ADC 13 with Traffic Management練習テスト2022年最新の1Y0-241ストレスなしで合格させちゃう！
練習CCA-AppDS 1Y0-241問題集オンライン試験練習テストと詳細な解説付き！
質問 10
set gslb vServer-GSLB-1-MIR ENABLED
What will the Citrix ADC appliance send when the above command is executed?
- A. The Remote GSLB service as the first record in the response and adds the remaining active services as additional records
- B. The Local GSLB service as the first record in the response and adds the remaining active services as additional records
- C. Only the best GSLB service in the response
- D. The best global server load balancing (GSLB) service as the first record in the response, and the remaining active services as additional records
正解: B
質問 11
To protect an environment against Hash DoS attacks, which two configurations can a Citrix Administrator use to block all post requests that are larger than 10,000 bytes? (Choose two.)
- A. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\") ||
http.REQ.CONTENT_LENGTH.GT(10000)"
> add rewrite policy drop_rewrite expr_hashdos_prevention DROP
> bind rewrite global drop_rewrite 70 END -type REQ_OVERRIDE - B. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\")&&
http.REQ.CONTENT_LENGTH.GT(10000)"
> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP
> bind responder global pol_resp_hashdos_prevention 70 END -type REQ_OVERRIDE - C. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\") ||
http.REQ.CONTENT_LENGTH.GT(10000)"
> add rewrite policy drop_rewrite expr_hashdos_prevention DROP
> bind rewrite global drop_rewrite 100 END -type REQ_OVERRIDE - D. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\")&&
http.REQ.CONTENT_LENGTH.GT(10000)"
> add rewrite policy drop_rewrite expr_hashdos_prevention DROP
> bind rewrite global drop_rewrite 100 END -type REQ_OVERRIDE - E. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\") ||
http.REQ.CONTENT_LENGTH.GT(10000)"
> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP
> bind responder global pol_resp_hashdos_prevention 70 END -type REQ_OVERRIDE - F. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\") ||
http.REQ.CONTENT_LENGTH.GT(10000)"
> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP
> bind responder global pol_resp_hashdos_prevention 100 END -type REQ_OVERRIDE
正解: B,F
質問 12
Scenario: A Citrix Administrator configured a load-balancing vServer. The URL for this vServer is vpn.citrix.com. The backend server has the host name configured as server1.citrix.com.
The administrator needs to implement the policy to change the host name from vpn.citrix.com to server1.citrix.com, and vice versa.
Which does the administrator need to configure to meet this requirement?
- A. set transform action "host change" -priority 10 -reqUrlFrom "https://server1.citrix.com/*" -reqUrlInto
"https://vpn.citrix.com/*" -resUrlFrom "https://vpn.citrix.com/*" -resUrlInto "https://server1.citrix.com/*" - B. set transform action "host change" -priority 10 -reqUrlFrom "https://server1.citrix.com/*" -reqUrlInto
"https://vpn.citrix.com/*" -resUrlFrom "https://server1.citrix.com/*" -resUrlInto "https://vpn.citrix.com/*" - C. set transform action "host change" -priority 10 -reqUrlFrom "https://vpn.citrix.com/*" -reqUrlInto "https:// server1.citrix.com/*" -resUrlFrom "https://server1.citrix.com/*" -resUrlInto "https://vpn.citrix.com/*"
- D. set transform action "host change" -priority 10 -reqUrlFrom "https://vpn.citrix.com/*" -reqUrlInto "https:// server1.citrix.com/*" -resUrlFrom "https://vpn.citrix.com/*" -resUrlInto "https://server1.citrix.com/*"
正解: D
質問 13
Scenario: A Citrix Administrator needs to improve website loading speed. End users are reporting slow GIF image rendering speeds as they scroll down a website, which affects overall page load time.
Which Citrix ADC feature can the administrator enable to improve website performance?
- A. Image shrink-to attributes
- B. Image lazy loading
- C. Image optimization
- D. Domain sharding
正解: C
質問 14
Scenario: A Citrix Administrator configured a global server load balancing (GSLB) setup for internal and external users using the same host name. For internal users, cvad.citrite.net should go to the Citrix StoreFront site; for external users, it should connect to the Citrix ADC Gateway VPN site.
Which feature should the administrator configure to accomplish this?
- A. DNS Preferred Location
- B. DNS Record
- C. DNS Proxy
- D. DNS View
正解: D
質問 15
Which two steps are necessary to configure global server load balancing (GSLB) service selection using content switching (CS)? (Choose two.)
- A. Configure a CS vServer of target type GSLB.
- B. Configure CS policies that designate a load-balancing vServer as the target vServer.
- C. Bind the GSLB domain to the GSLB vServer.
- D. Bind the domain to the CS vServer instead of the GSLB vServer.
正解: A,B
解説:
Explanation/Reference: https://docs.citrix.com/en-us/citrix-adc/current-release/global-server-load-balancing/how-to/ configure-gslb-content-switch.html
質問 16
Scenario: A Citrix Administrator configured Citrix ADC load balancing to send requests to one of three identical backend servers. Each server handles multiple protocols, and load balancing is set up in round-robin mode.
The current load-balancing setup on the Citrix ADC is:
* One load-balancing vServer with one externally accessible VIP
* One service created for each protocol type
* One server entity for each backend resource
During business hours, the administrator wants to make changes to one backend server without affecting the other servers.
What is the most efficient way for the administrator to ensure that all traffic is routed away from the server without impeding responses from other resources?
- A. Disable the backend server entity targeted for change.
- B. Disable the backend service entity targeted for change.
- C. Unbind the correct server entity from the load-balancing vServer.
- D. Disable the load-balancing vServer.
正解: D
質問 17
Scenario: A Citrix Administrator manages an environment that has three SSL websites, all serving the same content.
www.company.com
www.company.net
www.company.org
The administrator would like to consolidate the websites into a single, load-balanced SSL vServer.
What can the administrator bind to use a single SSL vServer?
- A. A wildcard certificate to a content-switching vServer
- B. A multiple SAN certificate to a single SSL vServer
- C. A wildcard certificate to a single SSL vServer
- D. The certificate of each website to a single SSL vServer
正解: D
質問 18
A Citrix Administrator configured global server load balancing (GSLB) for www.citrix.com, with two ADNS services named Citrix ADC 1 and Citrix ADC 2 in the setup.
Which record does the administrator need to add on the parent DNS server to delegate requests from www.citrix.com to Citrix ADC 1 and Citrix ADC 2?
- A. Address (A) record
- B. Name Server (NS) record
- C. Pointer Record (PTR)
- D. Canonical Name (CNAME)
正解: B
解説:
Explanation/Reference: https://docs.citrix.com/en-us/citrix-adc/current-release/dns/configure-citrix-adc-adns-server.html
質問 19
Scenario: A Citrix Administrator gives permissions to team members to access their own admin partition. This will allow them to add resources for different departments and manage them without making changes to the default Citrix ADC partition and configuration.
One team member typing to use the command line interface (CLI) to troubleshoot an authentication issue could NOT use aaad.debug. However, the team member has full permissions on the admin partition.
What can be the cause of this issue?
- A. The team member is NOT using the CLI correctly.
- B. The team member needs to troubleshoot the issue from the GUI.
- C. The team member does NOT have permission to use the CLI.
- D. The team member does NOT have shell access by design.
正解: A
質問 20
Scenario: A Citrix Administrator configured a responder policy as follows:
> add responder action Redirect_Act respondwith "DIAMETER.NEW_REDIRECT(\"aaa://host.example.com\")"
> add responder policy Redirect_Pol "diameter.req.avp(264).value.eq(\"host1.example.net\")" Redirect_Act
> bind lb vServer vs1 -policyName Redirect_Pol -priority 10 -type REQUEST What will be the effect of this configuration?
- A. Response originated from "host1.example.net" will be redirected to "host.example.com".
- B. Request originated from "host1.example.net" will be redirected to "host.example.com".
- C. Response originated from "host.example.net" will be redirected to "host1.example.com".
- D. Request originated from "host.example.net" will be redirected to "host1.example.com".
正解: B
解説:
Explanation/Reference:
質問 21
Scenario: A Citrix Administrator made changes to a Citrix ADC, deleting parts of the configuration and saving some new ones. The changes caused an outage that needs to be resolved as quickly as possible. There is no Citrix ADC backup.
What does the administrator need to do to recover the configuration quickly?
- A. Restore from the revision history.
- B. Restart the Citrix ADC.
- C. Run saved versus running configuration.
- D. Run highly availability (HA) file synchronization.
正解: A
質問 22
Scenario: After deploying a Citrix ADC in production, a Citrix Administrator notices that client requests are NOT being evenly distributed among backend resources. The administrator wants to change from the default load-balancing method to one that will help distribute the load more evenly.
Which load-balancing method would ensure that the server with the least amount of network utilization is receiving new connections?
- A. Least packets
- B. Least bandwidth
- C. Least connection
- D. Least response time
正解: C
解説:
Explanation/Reference: https://docs.citrix.com/en-us/citrix-adc/current-release/getting-started-with-citrix-adc/load- balancing.html
質問 23
What is the first thing a Citrix Administrator should develop when creating a server certificate for Citrix ADC to secure traffic?
- A. A certificate signing request (CSR)
- B. A certificate revocation list (CRL)
- C. A certificate key-pair
- D. A private key
正解: D
質問 24
A Citrix Administrator needs to confirm that all client certificates presented to the authentication vServer are valid until the year 2023.
Which expression can the administrator use to meet this requirement?
- A. CLIENT.SSL.CLIENT_CERT.DAYS_TO_EXPIRE.EQ(2023)
- B. CLIENT.SSL.ORIGIN_SERVER_CERT.VALID_NOT_AFTER.EQ(GMT2023)
- C. CLIENT.SSL.CLIENT_CERT.VALID_NOT_AFTER.EQ(GMT2023)
- D. CLIENT.SSL.CLIENT_CERT.VALID_NOT_BEFORE.EQ(GMT2023)
正解: C
質問 25
Which two protocols would provide end-to-end data encryption, while allowing a Citrix ADC to optimize the responses? (Choose two.)
- A. SSL bridge protocol for the vServer
- B. HTTP protocol for the vServer
- C. HTTP protocol for the services
- D. SSL bridge protocol for the services
- E. SSL protocol for the services
- F. SSL protocol for the vServer
正解: E,F
質問 26
Scenario: The Citrix Administrator of a Linux environment needs to load balance the web servers. Due to budget constraints, the administrator is NOT able to implement a full-scale solution.
What can the administrator purchase and install to load balance the webservers?
- A. Citrix ADC VPX
- B. Citrix ADC SDX
- C. Citrix ADC MPX
- D. Citrix ADC CPX
正解: D
質問 27
A Citrix Administrator needs to match the host name 'www.example.com' in all HTTP requests.
Which expression, when used, meets this requirement?
- A. HTTP.RES.HOSTNAME.CONTAINS("www.example.com")
- B. HTTP.RES.HOSTNAME.EQ("www.example.com")
- C. HTTP.REQ.HOSTNAME.EQ("www.example.com")
- D. HTTP.REQ.HOSTNAME("example.com")
正解: A
質問 28
Scenario: A Citrix Administrator executed the following commands on the Citrix ADC:
> add policy dataset Admin_group ipv4
> bind policy dataset Admin_group 192.168.149.10 -index 11
> bind policy dataset Admin_group 192.168.149.39 -index 12
> bind policy Admin_group 192.168.149.49 -index 13
> add responder policy POL_1
"!(CLIENT.IP.SRC.TYPECAST_TEXT_T.CONTAINS_ANY(\"Admin_group\"))"
RESET
> bind lb vServer lb_vsrv_www -policyName POL_1 -priority 100 -gotoPriorityExpression END -type REQUEST What will be the effect of these commands?
- A. All traffic from users with a source IP address of 192.168.149.10, 192.168.149.39, or 192.168.149.49 will be blocked through the Citrix ADC.
- B. Only users with a source IP address of 192.168.149.10, 192.168.149.39, or 192.168.149.49 will be allowed to connect to vServer lb_vsrv_www.
- C. Only users with a source IP address of 192.168.149.10 or 192.168.149.39 will be allowed to connect to vServer lb_vsrv_www.
- D. Only users with a source IP address of 192.168.149.10, 192.168.149.39, or 192.168.149.49 will be blocked when attempting to connect to vServer lb_vsrv_www.
正解: B
質問 29
......
時間限定！今すぐ無料アクセス1Y0-241練習問題：https://drive.google.com/open?id=1UqBlVLqIS0rYNCNG5t3v6kG5tilLqIHk
最適な1Y0-241試験学習資料と準備材料を提供しています：https://www.goshiken.com/Citrix/1Y0-241-mondaishu.html