Scenario: A Citrix Architect has deployed two MPX devices, 12.0.53.13 nc and MPX 11500 models, in a high availability (HA) pair for the Workspace labs team. The deployment method is two-arm. and the devices are installed behind a CISCO ASA 5585 firewall. The architect enables the following features on the Citrix ADC devices: Content Switching. SSL Offloading, Load Balancing, Citrix Gateway, Application Firewall in hybrid security, and Appflow. All are enabled to send monitoring information to Citrix Application Delivery Management 12.0.53.13 nc build. The architect is preparing to configure load balancing for Microsoft Exchange 2016 server.

The following requirements were discussed during the implementation:

✑ All traffic needs to be segregated based on applications, and the fewest number of IP addresses should be utilized during the configuration.

✑ All traffic should be secured, and any traffic coming into HTTP should be redirected to HTTPS.

✑ Single Sign-on should be created for Microsoft Outlook web access (OWA).

✑ Citrix ADC should recognize Uniform Resource Identifier (URI) and close the

session to Citrix ADC, when users hit the Logoff button in Microsoft Outlook web access.

✑ Users should be able to authenticate using user principal name (UPN).

✑ The Layer 7 monitor should be configured to monitor the Microsoft Outlook web access servers, and the monitor probes must be sent on SSL.

Which Responder policy can be utilized to redirect the users from http://mail.citrix.com to https://mail.citrix.com/owa?

Reveal Solution Hide Solution

Scenario: A Citrix Architect has set up NetScaler MPX devices in high availability mode with version 12.0.53.13 nc. These are placed behind a Cisco ASA 5505 Firewall. The Cisco ASA Firewall is configured to block traffic using access control lists. The network address translation (NAT) is also performed on the firewall.

The following requirements were captured by the architect during the discussion held as part of the NetScaler security implementation project with the customer’s security team:

The NetScaler MPX device:

✑ should monitor the rate of traffic either on a specific virtual entity or on the device. It should be able to mitigate the attacks from a hostile client sending a flood of requests. The NetScaler device should be able to stop the HTTP, TCP, and DNS based requests.

✑ needs to protect backend servers from overloading.

✑ needs to queue all the incoming requests on the virtual server level instead of the service level.

✑ should provide protection against well-known Windows exploits, virus-infected personal computers, centrally managed automated botnets, compromised webservers, known spammers/hackers, and phishing proxies.

✑ should provide flexibility to enforce the decided level of security check inspections for the requests originating from a specific geolocation database.

✑ should block the traffic based on a pre-determined header length, URL length, and cookie length. The device should ensure that characters such as a single straight quote (“); backslash (); and semicolon (;) are either blocked, transformed, or dropped while being sent to the backend server.

Which security feature should the architect configure to meet these requirements?

Reveal Solution Hide Solution

A Citrix Architect can execute a configuration job using a DeployMasterConfiguration template on a Citrix ADC____deployed________. (Choose the correct option to complete sentence:

Reveal Solution Hide Solution

A Citrix Architect needs to make sure that maximum concurrent AAA user sessions are limited to 4000 as a security restriction.

Which authentication setting can the architect utilize to view the current configuration?

Reveal Solution Hide Solution

Scenario: A Citrix Architect needs to assess an existing on-premises NetScaler deployment which includes Advanced Endpoint Analysis scans. During a previous security audit, the team discovered that certain endpoint devices were able to perform unauthorized actions despite NOT meeting pre-established criteria.

The issue was isolated to several endpoint analysis (EPA) scan settings.

Click the Exhibit button to view the endpoint security requirements and configured EPA policy settings.

Which setting is preventing the security requirements of the organization from being met?

Reveal Solution Hide Solution

Which four settings can a Citrix Architect use to create a configuration job using Citrix Application Delivery Management? (Choose four.)

Reveal Solution Hide Solution

Which response is returned by the Citrix ADC, if a negative response is present in the local cache?

Reveal Solution Hide Solution

Which two NetScaler cookies indicate the validity of the Authentication, Authorization and Accounting (AAA) session for users? (Choose two.)

Reveal Solution Hide Solution

Which three methods can a Citrix Architect use to assess the capabilities of a network infrastructure? (Choose three.)

Reveal Solution Hide Solution

Scenario: A Citrix Architect needs to assess an existing Citrix ADC configuration. The customer recently found that members of certain administrator groups were receiving permissions on the production Citrix ADC appliances that do NOT align with the designed security requirements.

Click the Exhibit button to view the configured command policies for the production Citrix ADC deployment.

To align the command policy configuration with the security requirements of the organization, the__________for________________should change. (Choose the correct option to complete the sentence.)

Reveal Solution Hide Solution