Question 1

Which type of policy would a Citrix Administrator use to disable USB redirection?

Options :

A : Session

B : SmartControl

C : Auditing

D : Authorization

Answer: A

Question 2

A Citrix Administrator needs to protect the HTTP backend server type without actually removing the header.

Which rewrite action type can the administrator apply to the Citrix ADC configuration to accomplish this?

Options :

A : CORRUPT_HTTP_HEADER

B : REPLACE_HTTP_REQ

C : REPLACE

D : REPLACE_ALL

Answer: C

Question 3

Which statement is applicable when configuring the lights out management (LOM) port?

Options :

A : LOM is accessed using command line interface (CLI).

B : LOM IP address should be in the same subnet as NSIP.

C : LOM firmware is NOT included in the Citrix ADC upgrade package.

D : LOM port can be used to remotely monitor the appliance.

Answer: D

Question 4

To protect an environment against Hash DoS attacks, which two configurations can a Citrix Administrator use to block all post requests that are larger than 10,000 bytes? (Choose two.)

Options :

A : > add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(\”POST\”) || http. REQ.CONTENT_LENGTH.GT(10000)”> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP> bind responder global pol_resp_hashdos_prevention 70 END -type REQ_OVERRIDE

B : > add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(\”POST\”) && http.REQ.CONTENT_LENGTH.GT(10000)”> add rewrite policy drop_rewrite expr_hashdos_prevention DROP> bind rewrite global drop_rewrite 100 END -type REQ_OVERRIDE

C : > add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(\”POST\”) && http.REQ. CONTENT_LENGTH.GT(10000)”> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP> bind responder global pol_resp_hashdos_prevention 70 END -type REQ_OVERRIDE

D : > add policy expression expr_hashdos_prevention “http. REQ. METHOD.EQ(\”POST\”) || http. REQ.CONTENT_LENGTH.GT(10000)”> add rewrite policy drop_rewrite expr_hashdos_prevention DROP> bind rewrite global drop_rewrite 70 END -type REQ_OVERRIDE

E : > add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(\”POST\” || http.REQ.CONTENT_LENGTH.GT(10000)"> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP> bind responder global pol_resp_hashdos_prevention 100 END -type REQ_OVERRIDE

F : > add policy expression expr_hashdos_prevention “http. REQ. METHOD.EQ(\”POST\”) || http. REQ.CONTENT_LENGTH.GT(10000)”> add rewrite policy drop_rewrite expr_hashdos_prevention DROP> bind rewrite global drop_rewrite 100 END -type REQ_OVERRIDE

Answer: B,E

Question 5

Scenario: A Citrix Administrator needs to configure an authentication workflow on Citrix ADC with the below requirements.All internal users must use their corporate credentials to authenticate.

Users from partner organizations must be authenticated using their own directory services without replication or a synchronization process.

How can the administrator meet the above requirements while authenticating the users?

Options :

A : Deploy SAML on Citrix ADC in the service provider (SP) role for users from partner organizations.

B : Create two LDAP and two SAML authentication policies on the authentication, authorization, and auditing (AAA) virtual server.

C : Configure nFactor authentication with two LDAP advanced policies and one SAML advanced policy.

D : Configure two dedicated AAA virtual servers for internal and partner users.

Answer: C

Free 1Y0-231 Mock Exam – Practice Online Confidently

Buying Options: