Citrix 1Y0-241 Deploy and Manage Citrix ADC with Traffic Management Online Training
Citrix 1Y0-241 Online Training
The questions for 1Y0-241 were last updated at Nov 23,2024.
- Exam Code: 1Y0-241
- Exam Name: Deploy and Manage Citrix ADC with Traffic Management
- Certification Provider: Citrix
- Latest update: Nov 23,2024
Scenario: A Citrix Administrator created and bound multiple content switching policies. During testing, attempts to access https://cs.mycompany.com resulted in the error message below:
HTTP 503 Service Unavailable
In a Citrix ADC configuration, what can the administrator do to fix the error?
- A . Disable the spillover redirect URL.
- B . Bind a certificate
- C . Enable the content switching feature
- D . Check the priorities of the existing policies
What is the first thing a Citrix Administrator should develop when creating a server certificate for Citrix ADC to secure traffic?
- A . A private key
- B . A certificate revocation list (CRL)
- C . A certificate signing request (CSR)
- D . A certificate key-pair
A Citrix Administrator needs to block all DNS requests from subnet 10.107.149.0/24.
Which expressions can the administrator use to match the required traffic?
- A . CLIENT.IP.SRC(10.107.149.0) && (client.UDP.DSTPORT.EQ(53) || client TCP DSTPORT.EQ(53))
- B . CLIENT.IP.SRC IN_SUBNET(10 107.149.0/24) && client.UDP.DSTPORT.EQ(53) || client.TCP.DSTPORT.EQ(53)
- C . CLIENT.IP.SRC(10.107.149.0) && client UDP.DSTPORT.EQ(53) || client.TCP.DSTPORT.EQ(53)
- D . CLIENT.IP.SRC IN_SUBNET(10.107.149.0/24) && (client.UDP.DSTPORT.EQ(53) || client.TCP.DSTPORT.EQ(53))
A Citrix Administrator configured an external syslog server but is NOT seeing detailed TCP information?
What could be causing this?
- A . Log facility is NOT configured.
- B . TCP logging is NOT enabled.
- C . User-defined audit log is NOT configured.
- D . Log level is NOT enabled.
Scenario: A Citrix Administrator configured SNMP to send traps to an external SNMP system. When reviewing the messages, the administrator notices several entity UP and entity DOWN messages.
To what are these messages related?
- A . Load-balancing vServers
- B . Network interface
- C . High availability nodes
- D . SSL profile
To protect an environment against Hash DoS attacks, which two configurations can a Citrix Administrator use to block all post requests that are larger than 10,000 bytes? (Choose two.)
- A . > add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(”POST”)&& http.REQ.CONTENT_LENGTH.GT(10000)”
> add rewrite policy drop_rewrite expr_hashdos_prevention DROP
> bind rewrite global drop_rewrite 100 END Ctype REQ_OVERRIDE - B . > add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(”POST”)&& http.REQ.CONTENT_LENGTH.GT(10000)”
> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP
> bind responder global pol_resp_hashdos_prevention 70 END Ctype REQ_OVERRIDE - C . > add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(”POST”) || http.REQ.CONTENT_LENGTH.GT(10000)”
> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP
> bind responder global pol_resp_hashdos_prevention 70 END Ctype REQ_OVERRIDE - D . > add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(”POST”) || http.REQ.CONTENT_LENGTH.GT(10000)”
> add rewrite policy drop_rewrite expr_hashdos_prevention DROP
> bind rewrite global drop_rewrite 70 END Ctype REQ_OVERRIDE - E . > add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(”POST”) || http.REQ.CONTENT_LENGTH.GT(10000)”
> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP
> bind responder global pol_resp_hashdos_prevention 100 END Ctype REQ_OVERRIDE - F . > add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(”POST”) || http.REQ.CONTENT_LENGTH.GT(10000)”
> add rewrite policy drop_rewrite expr_hashdos_prevention DROP
> bind rewrite global drop_rewrite 100 END Ctype REQ_OVERRIDE
Users are experiencing resets from the intranet server website, which is load balanced through the Citrix ADC.
Which Citrix ADC tool can a Citrix Administrator use to troubleshoot the reset issue?
- A . View the newnslog from the command line interface (CLI) to look for packet resets from the Citrix ADC.
- B . Use the nslog to look for packet resets on the Citrix ADC.
- C . Take a packet trace with nstrace and analyze with Wireshark.
- D . Look in the event viewer for packet resets from the Citrix ADC
Scenario: While using the GUI, a Citrix ADC MPX appliance becomes unresponsive. A Citrix Administrator needs to restart the appliance and force a core dump for analysis.
What can the administrator do to accomplish this?
- A . Turn off the appliance using the power button.
- B . Use the reset button on the front of the appliance.
- C . Use the NMI button on the back of the appliance.
- D . Connect to a USB port to issue a restart command.
Scenario: A Citrix ADC MPX is using one of four available 10G ports. A Citrix Administrator discovers a traffic bottleneck at the Citrix ADC.
What can the administrator do to increase bandwidth on the Citrix ADC?
- A . Purchase another Citrix ADC MPX appliance.
- B . Plug another 10G Citrix ADC port into the router.
- C . Add two more 10G Citrix ADC ports to the network and configure VLAN.
- D . Add another 10G Citrix ADC port to the switch, and configure Link Aggregation Control Protocol (LACP).
Scenario: A Citrix Administrator executed the command below in an active-active, global server load balancing (GSLB) setup.
set gslb parameter CldnsprobeOrder DNS PING TCP
The order to calculate the _____ for dynamic proximity will be the DNS UDP query followed by the ping and then TCP. (Choose the correct option to complete the sentence.)
- A . Time to live (TTL)
- B . Empty Domain Service (EDS)
- C . Multiple IP responses (MIR)
- D . Round-trip time (RTT)