Free Online 1Y0-440 Practice Test

Question 1

Scenario: A Citrix Architect and a team of Workspacelab members met to discuss a Citrix ADC design

project. They captured the following requirements from this design discussion:

All three (3) Workspacelab sites (DC, NOR, and DR) will have similar Citrix ADC configurations and

design.

The external Citrix ADC MPX1 appliances will have Global Server Load Balancing (GSLB) configured

and deployed in Active/Active mode.

ADNS service should be configured on the Citrix ADC to make it authoritative for domain

nsg.workspacelab.com • In GSLB deployment, the DNS resolution should be performed to connect the

user to the site with least network latency.

On the internal Citrix ADC, load balancing for StoreFront services, Citrix XML services, and Citrix

Director services must be configured.

On the external Citrix ADC, the Gateway virtual server must be configured in ICA proxy mode.

Click the Exhibit button to view the logical representation of the network

On which firewall should the architect configure the access policy to permit the MEP communication between the sites?

A : CISCO IPS 1 and Checkpoint FW1

B : CISCO IPS and CISCO IPS1

C : CISCO IPS and Checkpoint FW1

D : Checkpoint FW1 and DMZ ASA Firewall

Answer: D

Question 2

Which format must a Citrix Architect utilize while importing the StyleBook in Citrix Application Delivery Management to compose the content of a StyleBook in the YAML editor?

A : Raw

B : NITRO APl

C : Bundle

D : HTML

E : File

F : SGML

Answer: A

Question 3

Scenario: A Citrix Architect has configured two MPX devices in high availability mode with version

12.0.53.13 nc. After a discussion with the security team, the architect enabled the Application Firewall feature

for additional protection.

In the initial deployment phase, the following security features were enabled:

IP address reputation

HTML SQL injection check

Start URL

HTML Cross-site scripting

Form-field consistency

After deployment in pre-production, the team identifies the following additional security features and changes

as further requirements:

Application Firewall should retain the response of form field in its memory When a client submits the

form in the next request. Application Firewall should check for inconsistency in the request before

sending it to the web server

All the requests dropped by Application Firewall should receive a pre-configured HTML error page

with appropriate information.

The Application Firewall profile should be able to handle the data from the RSS feed and an

ATOM-based site.

Click the Exhibit button to view an excerpt of the existing configuration

What should the architect do to meet these requirements?

A : Delete the existing profile and create a new profile of type: XML Application (SOAP)

B : Modify the existing profile to include sessionization

C : Create a new basic profile and use pre-existing HTML settings.

D : Modify existing profile settings, change HTML settings, and ensure to exclude uploaded files from security checks.

Answer: B

Question 4

Scenario: A Citrix Architect has set up Citrix ADC MPX devices in high availability mode with version

12.0.53.13 nc. These are placed behind a Cisco ASA 5505 firewall. The Cisco ASA firewall is configured to

block traffic using access control lists. The network address translation (NAT) is also performed on the

firewall.

The following requirements were captured by the architect during the discussion held as part of the Citrix

ADC security implementation project with the customers security team:

The Citrix ADC MPX device:

should monitor the rate of traffic either on a specific virtual entity or on the device It should be able to

mitigate the attacks from a hostile client sending a flood of requests. The Citrix ADC device should be

able to stop the HTTP TCP. and DNS based requests

needs to protect backend servers from overloading

needs to queue all the incoming requests on the virtual server level instead of the service level

should provide access to resources on the basis of priority

should provide protection against well-known Windows exploits virus-infected personal computers,

centrally managed automated botnets, compromised webservers, known spammers/hackers, and

phishing proxies

should provide flexibility to enforce the desired level of security check inspections for the requests

originating from a specific geolocation database.

should block the traffic based on a pre-determined header length. URL length and cookie length. The

device should ensure that characters such as a single straight quote ('): backslash (\); and semicolon (;)

are either blocked, transformed, or dropped while being sent to the backend server.

Which security feature should the architect configure to meet these requirements?

A : Configure Application Firewall with HTML cross-site scripting to block unwanted traffic

B : Configure pattern sets using regular expressions to block attacks

C : Configure Signatures manually and apply them to the Application Firewall profile

D : Configure signatures to auto-update and apply them to the Application Firewall profile

E : Configure IP address reputation and use IPREP and webroot to block the traffic

Answer: A

Question 5

Scenario: A Citrix Architect and a team of Workspacelab members met to discuss a Citrix ADC design

project. They captured the following requirements from this design discussion:

All three (3) Workspacelab sites (DC. NDR. and DR) will have similar Citrix ADC configurations and

design.

The external Citrix ADC MPX appliances will have Global Server Load Balancing (GSLB) configured

and deployed in Active/Active mode

ADNS service should be configured on the Citrix ADC to make it authoritative for domain nsg

Workspacelab.com.

In GSLB deployment, the DNS resolution should be performed to connect the user to the site with least

network latency.

On the internal Citrix ADC, load balancing for StoreFront services, Citrix XML services, and Citrix

Director services must be configured

On the external Citrix ADC. the Gateway virtual server must be configured in ICA proxy mode

Click the Exhibit button to view the logical representation of the network and the firewall policy prerequisites

provided by the architect. On which two firewalls should the architect configure the policies? (Choose two.)

A : CISCO IPS

B : CISCO IPS 1

C : DMZ ASA Firewall

D : Checkpoint FW1

Answer: C,D

Free Online Citrix 1Y0-440 Practice Test