Citrix 1Y0-241 Exam Questions Instant Access

Question 1

Scenario: The Citrix Administrator of a Linux environment needs to load balance the web servers. Due to budget constraints, the administrator is NOT able to implement a full-scale solution.

What can the administrator purchase and install to load balance the webservers?

ACitrix ADC MPX

BCitrix ADC VPX

CCitrix ADC SDX

DCitrix ADC CPX

Answer : D

it is the CPX, which is not a full scale solution. You dont need a full virtual like VPX to run CPX inside Docker for Linux, that is the budget choice.

Question 2

A Citrix Administrator needs to configure a rate-limiting policy setting DNS requests to a threshold of 1,000 per second.

Which command does the administrator need to run to correctly configure this policy?

AHTTP.REQ.LIMIT(<limit_identifier>)

BSYS.CHECK.LIMIT(<limit_identifier>)

CSYS.CHECK.LIMIT(<limit_identifier>) || CONNECTION.IP.LIMIT(<limit_identifier>)

DSYS.CHECK.LIMIT(<limit_identifier>) || HTTP.REQ.LIMIT(<limit_identifier>)

Answer : B

https://docs.citrix.com/en-us/citrix-adc/current-release/appexpert/rate-limiting/configuring-binding-traffic-rate-policy1.html

https://discussions.citrix.com/topic/398863-netscaler-rate-limiting-policy/

Question 3

Scenario: A Citrix Administrator observes that when the client gets redirected to www.citrix.com/owa/search?q=username, an HTTP 503 response is received from the content switching vServer.

The relevant configuration is as follows:

> add cs action CS_Act_1 -targetLBVserver SERVER_1

> add cs action CS_Act_2 -targetLBVserver SERVER_2

> add cs action CS_Act_3 -targetLBVserver SERVER_3

> add cs action CS_Act_4 -targetLBVserver SERVER_4

> add cs policy CS_Pol_1 -rule "http.REQ.URL path_and_queryCONTAINS(\"connect\")" -action CS_Act_1

> add cs policy CS_Pol_2 -rule "http.REQ.URL path_and_query EQ(\"owa\")" -action CS_Act_2

> add cs policy CS_Pol_3 -rule "http REQ.URL path_and_query CONTAINS(\"owa\")" -action CS_Act_3

> add cs policy CS_Pol_4 -rule "http.REQ.IS_VALID" -action CS_Act_4

> bind cs vServer CS_vserver1 -policyName CS_Pol_1 -priority 110

> bind cs vServer CS_vserver1 -policyName CS_Pol_4 -priority 120

How can the administrator correct the issue?

AUnbind CS_Pol_1.

BBind Policy CS_Pol_3 with priority 100.

CBind Policy CS_Pol_2 with priority 100.

DUnbind CS Pol 4.

Answer : B

Question 4

Scenario: A Junior Citrix Administrator needs to create a content switching vServer on a Citrix ADC high availability (HA) pair. The NSIP addresses are 192.168.20.10 and 192.168.20.11. The junior administrator connects to NSIP address 192.168.20.10 and saves the changes.

The following day, a Senior Citrix Administrator tests the new content switching vServer, but it is NOT working. The senior administrator connects to the HA pair and discovers that everything the junior administrator configured is NOT visible.

Why has the Citrix ADC lost the newly added configurations?

AThe junior administrator made the changes and did NOT force a failover to save the configuration.

BThe junior administrator connected to the NSIP of the secondary Citrix ADC in the HA pair.

CBoth Citrix ADCs in the HA pair restarted overnight.

DThe Citrix ADC appliances have different firmware versions.

Answer : B

'You are connected to the secondary node...' when first login to the NSIP and after saving the configuration

Question 5

Scenario: A Citrix Administrator is configuring a Citrix ADC high availability (HA) pair. The administrator needs to ensure that one Citrix ADC is UP and primary at all times to guarantee that business websites are always available.

In the event that both nodes become unavailable or fail a health check, what does the administrator need to do to ensure that the Citrix ADCs still handle web traffic?

AConfigure HA fail-safe mode on the primary Citrix ADC only.

BDisable HA fail-safe mode on each Citrix ADC independently.

CConfigure HA fail-safe mode on each Citrix ADC independently.

DDisable HA fail-safe mode on the primary Citrix ADC only.

Answer : C

Question 6

To protect an environment against Hash DoS attacks, which two configurations can a Citrix Administrator use to block all post requests that are larger than 10,000 bytes? (Choose two.)

A> add policy expression expr_hashdos_prevention ''http.REQ.METHOD.EQ(\''POST\'')&&
http.REQ.CONTENT_LENGTH.GT(10000)''
> add rewrite policy drop_rewrite expr_hashdos_prevention DROP
> bind rewrite global drop_rewrite 100 END --type REQ_OVERRIDE

B> add policy expression expr_hashdos_prevention ''http.REQ.METHOD.EQ(\''POST\'')&&
http.REQ.CONTENT_LENGTH.GT(10000)''
> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP
> bind responder global pol_resp_hashdos_prevention 70 END --type REQ_OVERRIDE

C> add policy expression expr_hashdos_prevention ''http.REQ.METHOD.EQ(\''POST\'') ||
http.REQ.CONTENT_LENGTH.GT(10000)''
> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP
> bind responder global pol_resp_hashdos_prevention 70 END --type REQ_OVERRIDE

D> add policy expression expr_hashdos_prevention ''http.REQ.METHOD.EQ(\''POST\'') ||
http.REQ.CONTENT_LENGTH.GT(10000)''
> add rewrite policy drop_rewrite expr_hashdos_prevention DROP
> bind rewrite global drop_rewrite 70 END --type REQ_OVERRIDE

E> add policy expression expr_hashdos_prevention ''http.REQ.METHOD.EQ(\''POST\'') ||
http.REQ.CONTENT_LENGTH.GT(10000)''
> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP
> bind responder global pol_resp_hashdos_prevention 100 END --type REQ_OVERRIDE

F> add policy expression expr_hashdos_prevention ''http.REQ.METHOD.EQ(\''POST\'') ||
http.REQ.CONTENT_LENGTH.GT(10000)''
> add rewrite policy drop_rewrite expr_hashdos_prevention DROP
> bind rewrite global drop_rewrite 100 END --type REQ_OVERRIDE

Answer : A, B

Question 7

Scenario: A Citrix Administrator executed the following command in a global server load balancing (GSLB) environment:

set gslb site SiteB --triggerMonitor MEPDOWN

What will be the effect of this command on the default service monitoring behavior on a remote site?

AThe service monitor is invoked only when Metric Exchange Protocol (MEP) has marked the service as DOWN.

BThe service monitor is invoked only when Metric Exchange Protocol (MEP) connectivity has been lost between Site A and Site B.

CThe service monitor will take precedence over Metric Exchange Protocol (MEP).

DThe state of the GSLB service will always be controlled by Metric Exchange Protocol (MEP).

Answer : A

Citrix Deploy and Manage Citrix ADC with Traffic Management 1Y0-241 Exam Questions