[2024年08月09日]1Y0-440試験問題集でCitrix練習テスト問題
最新でリアルな1Y0-440試験問題集解答
この試験は、TCP/IPネットワークの確固たる理解とCitrix ADCおよびCitrix SD-WAN技術の経験を持つITプロフェッショナルを対象としています。候補者は、Citrix ADCおよびSD-WAN展開の実践的な経験を持ち、ネットワークアーキテクチャと設計原則に熟達していることが期待されています。
質問 # 40
Scenario: A Citrix Architect holds a design discussion with a team of Workspacelab members, and they capture the following requirements for the NetScaler design project.
* A pair of NetScaler MPX appliances will be deployed in the DMZ network and another pair in the internal network.
* High availability will be accessible between the pair of NetScaler MPX appliances in the DMZ network.
* Multi-factor authentication must be configured for the NetScaler Gateway virtual server.
* The NetScaler Gateway virtual server is integrated with the StoreFront server.
* Load balancing must be deployed for users from the workspacelab.com domain.
* The workspacelab users should be authenticated using Cert Policy and LDAP.
* All the client certificates must be SHA 256-signed, 2048 bits, and have UserPrincipalName as the subject.
* Single Sign-on must be performed between StoreFront and NetScaler Gateway.
After deployment, the architect observes that LDAP authentication is failing.
Click the Exhibit button to review the output of aaad debug and the configuration of the authentication policy.
Exhibit 1
Exhibit 2
What is causing this issue?
- A. User does NOT exist in database
- B. IdapLoginName is set as sAMAccountName
- C. Password used is incorrect
- D. UserNamefield is set as subjection
正解：D
質問 # 41
Scenario: A Citrix Architect needs to deploy three VPX instances on NetScaler SDX 11500 device to meet the following design requirements:
* Three (3) VPX instances must be provisioned on the SDX device.
* Instance 1 must be utilized for deploying NetScaler Gateway virtual server.
* Instance 2 must be utilized for deploying load balancing virtual servers for XML, Director, StoreFront, and Active Directory servers.
* Separate IP address must be utilized for the communication with XenApp environment and LDAP communication.
* Instance 3 must be used for deploying the test environment.
* In the test environment, NetScaler Gateway virtual server, load balancing virtual servers for XML, Director, StoreFront and Active Directory servers must be configured.
How many IP addresses will be required to meet these design requirements?
- A. 0
- B. 1
- C. 2
- D. 3
正解：B
質問 # 42
Scenario: A Citrix Architect observes the following configurations while performing an assessment of a Citrix ADC deployment:
* Citrix Gateway virtual server nsg-dmz-001 is configured in ICA Proxy mode.
* The authentication method used is Plaintext LDAP.
* The session policies bound are configured to integrate with StoreFront in ICA proxy mode to perform Single Sign-on.
* The connection to LDAP server is performed using SNIP by Citrix ADC.
* To meet the new design requirement the architect needs to change the SNIP used for communication with LDAP servers.
Which AAA parameter must the architect verify to update the source IP address for the communication from Citrix ADC to the LDAP server?
- A. AAA Session IP
- B. aaadnatip
- C. MappedlPAddress
- D. NetProfile
正解：B
質問 # 43
Scenario: A Citrix Architect needs to configure a full VPN session profile to meet the following requirements:
* Users should be able to send the traffic only for the allowed networks through the VPN tunnel.
* Only the DNS requests ending with the configured DNS suffix workspacelab.com must be sent to NetScaler Gateway.
* If the DNS query does NOT contain a domain name, then DNS requests must be sent to NetScaler gateway.
Which settings will meet these requirements?
- A. Split Tunnel to ON, Split DNS Remote
- B. Split Tunnel to OFF, Split DNS Both
- C. Split Tunnel to ON, Split DNS Local
- D. Split Tunnel to OFF, Split DNS Remote
正解：C
質問 # 44
_________ content type supports sending NITRO commands to NetScaler. (Choose the correct option to complete sentence.)
- A. Text/html
- B. Application/json
- C. Text/enriched
- D. Application/sgml
正解：B
質問 # 45
Scenario: A Citrix Architect needs to assess an existing NetScaler configuration. The customer recently found that members of certain administrator groups were receiving permissions on the production NetScaler appliances that do NOT align with the designed security requirements.
Click the Exhibit button to view the configured command policies for the production NetScaler deployment.
To align the command policy configuration with the security requirements of the organization, the _______ for
______should change. (Choose the correct option to complete the sentence.)
- A. priority; Item 2
- B. priority; Item 5
- C. command spec; item 3
- D. command spec; Item 6
- E. action; Item 1
- F. action; Item 4
正解：A
質問 # 46
Scenario: A Citrix Architect holds a design discussion with a team of Workspacelab members, and they capture the following requirements for the NetScaler design project.
A pair of NetScaler MPX appliances will be deployed in the DMZ network and another pair in the internal network.
High availability will be accessible between the pair of NetScaler MPX appliances in the DMZ network.
Multi-factor authentication must be configured for the NetScaler Gateway virtual server.
The NetScaler Gateway virtual server is integrated with the StoreFront server.
Load balancing must be deployed for users from the workspacelab.com domain.
The workspacelab users should be authenticated using Cert Policy and LDAP.
All the client certificates must be SHA 256-signed, 2048 bits, and have UserPrincipalName as the subject.
Single Sign-on must be performed between StoreFront and NetScaler Gateway.
After deployment, the architect observes that LDAP authentication is failing.
Click the Exhibit button to review the output of aaad debug and the configuration of the authentication policy.
Exhibit 1
Exhibit 2
What is causing this issue?
- A. User does NOT exist in database
- B. IdapLoginName is set as sAMAccountName
- C. Password used is incorrect
- D. UserNamefield is set as subjection
正解：D
質問 # 47
Scenario: A Citrix Architect needs to design a new multi-datacenter NetScaler deployment. The customer wants NetScaler to provide access to various backend resources by using Global Server Load Balancing (GSLB) in an Active-Active deployment.
Click the Exhibit button to view additional requirements identified by the architect.
Which GSLB algorithm or method should the architect use for the deployment, based on the stated requirements?
- A. Least packets
- B. Least response time
- C. Dynamic round trip time (RTT)
- D. least connection
- E. Static proximity
- F. Source IP hash
正解：B
質問 # 48
Scenario: A Citrix Architect needs to design a hybrid Citrix Virtual App and Citrix Virtual Desktop environment which will include as well as resource locations in an on-premises datacenter and Microsoft Azure.
Organizational details and requirements are as follows:
Active Citrix Virtual App and Citrix Virtual Desktop Service subscription No existing Citrix deployment Minimization of additional costs All users should correct directly to the resource locations containing the servers which will host HDX sessions Click the Exhibit button to view the conceptual environment architecture.
The architect should use___________ in Location A, and should use _______________ in Location B. (Choose the correct option to complete the sentence.)
- A. No Citrix products; Citrix ICA Proxy (cloud-licensed)
- B. Citrix gateway as a Service; Citrix ADC (BYO)
- C. Citrix Gateway as a Service; no Citrix ADC products
- D. No Citrix products; Citrix Gateway appliance
- E. Citrix Gateway as a Service; Citrix ICA Proxy (cloud-licensed)
正解：C
質問 # 49
A Citrix Architect needs to configure advanced features of Citrix ADC by using StyleBooks as a resource in the Heat service.
What is the correct sequence of tasks to be completed for configuring Citrix ADC using the Heat stack?
- A. 1. Install NetScaler Bundle for OpenStack
2. Prepare the HOT by using the NetScaler heat resources and NetScaler Network Resource
3. Register OpenStack with NMAS
4. Deploy the Heat stack
5. Add NetScaler instances (Optional)
6. Create service packages (Add OpenStack tenants) - B. 1. Install Citrix ADC Bundle for OpenStack
2 Register OpenStack with Citrix Application Delivery Management
3. Add Citrix ADC instances (Optional)
4. Create service packages (Add OpenStack tenants)
5. Prepare the HOT by using the Citrix ADC Heat resources and Citrix ADC Network Resource
6. Deploy the Heat stack - C. 1. Install Citrix ADC Bundle for OpenStack
2. Deploy the Heat stack
3. Register OpenStack with Citrix Application Delivery Management
4. Add Citrix ADC instances (Optional)
5. Prepare the HOT by using the Citrix ADC Heat resources and Citrix ADC Network Resource
6. Create service packages (Add OpenStack tenants) - D. 1. Install Citrix ADC Bundle for OpenStack
2 Add Citrix ADC instances (Optional)
3. Create service packages (Add OpenStack tenants)
4. Prepare the HOT by using the Citrix ADC Heat resources and Citrix ADC Network Resource
5. Register OpenStack with Citrix Application Delivery Management
6. Deploy the Heat stack
正解：B
解説：
Explanation
-
Workflow to configure ADC instances using Heat
質問 # 50
Scenario: Based on a discussion between a Citrix Architect and a team of Workspacelab members, the MPX Logical layout for Workspacelab has been created across three (3) sites.
The requirements captured during the design discussion held for a NetScaler design project are as follows:
* Two (2) pairs of Citrix ADC MPX appliances deployed in the DMZ and internal network.
* High Availability will be accessible for each Citrix ADC MPX
* The external Citrix ADC MPX appliance will be deployed in multi-arm mode.
* The internal Citrix ADC MPX will be deployed in single-arm mode wherein it will be connected to Cisco ACI Fabric.
* All three (3) Workspacelab sites: Dc, NDR and DR, will have similar Citrix ADC configurations and design.
How many Citrix ADC MPX appliances should the architect deploy at each site to meet the design requirements above?
- A. 0
- B. 1
- C. 2
- D. 3
- E. 4
- F. 5
正解：B
質問 # 51
Which two settings must a Citrix Architect enable to deploy a shared VLAN on Citrix ADC VPX instance on an ESX platform? (Choose two.)
- A. VLAN sharing on the VLAN
- B. Port based VLAN tagging must be enabled
- C. Promiscuous mode for shared VLANs
- D. VLAN tagging on the VLAN
正解：A、C
質問 # 52
Scenario: A Citrix Architect has deployed Citrix Gateway integration with the StoreFront server. The Vasco server is used to perform WebAUTH to authenticate users The configuration snippet is as follows:
Which parameter is utilized to calculate the content-length insert in the request sent to the server?
- A. successRule
- B. Exp2
- C. Expl
- D. POST expresston
正解：B
質問 # 53
Scenario: A Citrix Architect has deployed an authentication setup for the load balancing virtual server for the SAP application. The authentication is being performed using RADIUS and LDAP. RADIUS is the first factor, and LDAP is the second factor in the authentication. The Single Sign-on with SAP application should be performed using LDAP credentials. Which session profile should be used to perform the Single Sign-on?
- A. add tm sessionAction prof -sessTimeout 30 -defaultAuthorizationAction ALLOW -SSO ON -ssoCredential PRIMARY -httpOnlyCookie NO
- B. add vpn sessionAction prof-sessTimeout 30 -defaultAuthorizationAction ALLOW -SSO ON -ssoCredential SECONDARY -httpOnlyCookie NO
- C. add tm sessionAction prof -sessTimeout 30 -defaultAuthorizationAction ALLOW -SSO ON -ssoCredential SECONDARY -httpOnlyCookie NO
- D. add vpn sessionAction prof -sessTimeout 30 -defaultAuthorizationAction ALLOW -SSO ON -ssoCredential PRIMARY -httpOnlyCookie NO
正解：C
質問 # 54
Scenario: Based on a discussion between a Citrix Architect and a team of Workspacelab members, the MPX Logical layout for Workspacelab has been created across three (3) sites.
They captured the following requirements during the design discussion held for a NetScaler design project:
* All three (3) Workspacelab sites (DC, NDR, and DR) will have similar NetScaler configurations and design.
* Both external and internal NetScaler MPX appliances will have Global Server Load Balancing (GSLB) configured and deployed in Active/Passive mode.
* GSLB should resolve both A and AAA DNS queries.
* In the GSLB deployment, the NDR site will act as backup for the DC site, whereas the DR site will act as backup for the NDR site.
* When the external NetScaler replies to DNS traffic coming in through Cisco Firepower IPS, the replies should be sent back through the same path.
* On the internal NetScaler, both the front-end VIP and backend SNIP will be part of the same subnet.
* The external NetScaler will act as default gateway for the backend servers.
* All three (3) sites, DC, NDR, and DR, will have two (2) links to the Internet from different service providers configured in Active/Standby mode.
Which design decision must the architect make the design requirements above?
- A. The ADNS service must be configured with an IPv6 address.
- B. NSIP of the External NetScaler must be configured as the default gateway on the backend servers.
- C. MAC-based Forwarding must be enabled on the External NetScaler Pair.
- D. The Internal NetScaler must be deployed in Transparent mode.
正解：D
質問 # 55
Scenario: A Citrix Architect needs to configure a full VPN session profile to meet the following requirements:
* Users should be able to send the traffic only for the allowed networks through the VPN tunnel.
* Only the DNS requests ending with the configured DNS suffix workspacelab.com must be sent to NetScaler Gateway.
* If the DNS query does NOT contain a domain name, then DNS requests must be sent to NetScaler gateway.
Which settings will meet these requirements?
- A. Split Tunnel to ON, Split DNS Remote
- B. Split Tunnel to OFF, Split DNS Both
- C. Split Tunnel to ON, Split DNS Local
- D. Split Tunnel to OFF, Split DNS Remote
正解：A
解説：
Explanation
https://support.citrix.com/article/CTX207149
質問 # 56
Scenario: A Citrix Architect has executed the following commands on the Citrix ADC:
In which scenario will the timeout work as configured?
- A. If a session is idle, then the client browser will keep on sending HTTP Responses in which URL will contain UA!=
- B. If a session is idle, then the client browser will keep on sending HTTP Requests in which URL will contain UA=0
- C. If a session is non-idle, then the client browser will send an HTTP Request in which the URL will contain UA=0'
- D. If a session is non-idle, then the client browser will send an HTTP Response in which the URL will contain UA!=
正解：C
質問 # 57
Scenario: A Citrix Architect has implemented two high availability pairs of MPX 5500 and MPX 11500 devices respectively with 12.0.53.13 nc version. The NetScaler devices are set up to handle NetScaler Gateway, Load Balancing, Application Firewall, and Content Switching. The Workspacelab infrastructure is set up to be monitored with NMAS version 12.0.53.13 nc by the Workspacelab administrators. The Workspacelab team wants to implement one more pair of NetScaler MPX 7500 devices with version
12.0.53.13 nc.
The Citrix consulting team has assigned the task to implement these NetScaler devices in the infrastructure and set them up to be monitored and managed by NMAS.
The following are the requirements that were discussed during the project initiation call:
* NMAS should be configured to get the infrastructure information under sections such as HDX Insight, WEB Insight, and Security Insight.
* Configuration on the new MPX devices should be identical to MPX 11500 devices.
* Configuration changes after the deployment and initial setup should be optimized using NMAS.
* NMAS should be utilized to configure templates that can be utilized by the Workspacelab team in future deployment.
* As per the requirement from the Workspacelab team, NMAS should be store the audited data for only
15 days.
Which process should the architect utilize to ensure that the deployment of MPX 11500 devices are optimized and that it is correct, before deploying the devices in production?
- A. Under Configuration jobs; Configuration Audit and Advice should be used prior to deployment.
- B. Under Stylebooks; Public and composite stylebook templates should be utilized prior to deployment.
- C. Under Stylebooks; Inbuilt and composite stylebook templates should be utilized prior to deployment.
- D. Under Configuration Management; Configuration Audit and Advice should be used prior to deployment.
正解：D
質問 # 58
Scenario: A Citrix Architect needs to assess an existing Citrix ADC configuration. The customer recently found that members of certain administrator groups were receiving permissions on the production Citrix ADC appliances that do NOT align with the designed security requirements. Click the Exhibit button to view the configured command policies for the production Citrix ADC deployment.
To align the command policy configuration with the security requirements of the organization, the__________for________________should change. (Choose the correct option to complete the sentence.)
- A. command spec; Item 3
- B. priority; Item 2
- C. priority; Item 5
- D. command spec; Item 6
- E. action; Item 1
- F. action; Item 4
正解：B
質問 # 59
Scenario: A Citrix Architect has deployed load balancing for SharePoint 2010 on a Citrix ADC instance. While editing the document, the architect observed the error displayed below:
Sorry, we couldn't open 'https://sharepointcs.emea.in/Shared Documents/Citrix Enhancement Request Form.doc' After troubleshooting, the architect discovers the issue. When a user opens a document, it opens in the browser, but while editing the document, thd session is transferred from the browser to the Word application During this time, the cookies should be transferred from the browser to the Word application.
Which two configurations should the architect modify to ensure that the cookies are shared between the browser and non-browser applications? (Choose two.)
- A. Set HTTPOnly Cookie to NO
- B. Set HTTPOnly Cookie to Yes
- C. Disable Persistent Cookie
- D. Set lb vserver -persistenceType COOKIEINSERT
- E. Set the NSC_AAAC cookie with HTTPOnly Flag
- F. Enable Persistent Cookie
正解：A、F
質問 # 60
Scenario: A Citrix Architect needs to assess an existing NetScaler multi-site deployment. The deployment is using Global Server Load Balancing (GSLB) configured in a parent-child configuration.
Click the Exhibit button to view the diagram of the current GSLB configuration and parent-child relationships, as well as the status of the sites and the connectivity between them.
Based on the displayed configuration and status, Child_site1_______ a connection from _______. (Choose the correct option to complete the sentence.)
- A. accepts; SiteP2; becomes its child site
- B. rejects; SiteP3; remains a child site of SiteP1
- C. rejects; SiteP2 and SiteP3; remains a child site of SiteP1
- D. rejects; SiteP2; remains a child site of SiteP1
- E. accepts; SiteP3; becomes its child site
- F. does NOT receive; SiteP2 and SiteP3; remains a child site of SiteP1
正解：A
質問 # 61
Scenario: A Citrix Architect holds a design discussion with a team of Workspacelab members, and they capture the following requirements for the NetScaler design project.
* A pair of NetScaler MPX appliances will be deployed in the DMZ network and another pair in the internal network.
* High availability will be accessible between the pair of NetScaler MPX appliances in the DMZ network.
* Multi-factor authentication must be configured for the NetScaler Gateway virtual server.
* The NetScaler Gateway virtual server is integrated with the StoreFront server.
* Load balancing must be deployed for users from the workspacelab.com domain.
* The workspacelab users should be authenticated using Cert Policy and LDAP.
* All the client certificates must be SHA 256-signed, 2048 bits, and have UserPrincipalName as the subject.
* Single Sign-on must be performed between StoreFront and NetScaler Gateway.
After deployment, the architect observes that LDAP authentication is failing.
Click the Exhibit button to review the output of aaad debug and the configuration of the authentication policy.
Exhibit 1
Exhibit 2
What is causing this issue?
- A. User does NOT exist in database
- B. IdapLoginName is set as sAMAccountName
- C. Password used is incorrect
- D. UserNamefield is set as subjection
正解：D
質問 # 62
What are three potential risks when examining the disaster recovery plan and implementation for a company? (Choose three)
- A. A disaster recovery plan exists but has never been tested
- B. Optimal Gateway Routing decisions are NOT understood
- C. A disaster recovery location does NOT exist.
- D. Supporting infrastructure for proposed environment is NOT included in disaster recovery implementation
- E. Users require mobile devices with continuous access
正解：A、C、D
質問 # 63
......
認定試験は、Citrix ADCの展開、セキュリティ、負荷分散、高可用性、およびトラブルシューティングなどのトピックをカバーしています。候補者は、Citrixネットワーク技術、Citrix ADC、Citrix Gateway、およびCitrix SD-WANを含む知識についてテストされます。また、試験は、さまざまなシナリオでCitrixネットワーキングソリューションを設計、構成、およびトラブルシューティングする能力も評価します。
シトリックス1Y0-440試験は、ネットワーク設計、セキュリティ、高可用性、トラブルシューティングなどの様々なトピックをカバーしています。TCP / IP、HTTP、SSL、DNSなどのネットワークの概念やプロトコルについての深い理解が必要です。候補者は、組織のニーズを満たすシトリックスネットワーキングソリューションを設計し、高可用性、セキュリティ、パフォーマンスを確保する能力について評価されます。
あなたを簡単に合格させる1Y0-440試験正確なPDF問題：https://jp.fast2test.com/1Y0-440-premium-file.html