Citrix Architecting a Citrix Networking Solution Exam (1Y0-440) - Citrix Actual Exam Questions

Scenario: The Workspacelab team has configured their NetScaler Management and Analytics (NMAS) environment. A Citrix Architect needs to log on to the NMAS to check the settings. Which two authentication methods are supported to meet this requirement? (Choose two.)

Scenario: Based on a discussion between a Citrix Architect and a team of Workspacelab members, the MPX Logical layout for Workspacelab has been created across three (3) sites. The requirements captured during the design discussion held for a NetScaler design project are as follows: Two (2) pairs of Citrix ADC MPX appliances deployed in the DMZ and internal network. High Availability will be accessible for each Citrix ADC MPX The external Citrix ADC MPX appliance will be deployed in multi-arm mode. The internal Citrix ADC MPX will be deployed in single-arm mode wherein it will be connected to Cisco ACI Fabric. All three (3) Workspacelab sites: Dc, NDR and DR, will have similar Citrix ADC configurations and design. How many Citrix ADC MPX appliances should the architect deploy at each site to meet the design requirements above?

Scenario: A Citrix Architect needs to assess an existing on-premises NetScaler deployment which includes Advanced Endpoint Analysis scans. During a previous security audit, the team discovered that certain endpoint devices were able to perform unauthorized actions despite NOT meeting pre- established criteria. The issue was isolated to several endpoint analysis (EPA) scan settings. Click the Exhibit button to view the endpoint security requirements and configured EPA policy settings. Which setting is preventing the security requirements of the organization from being met?

Scenario: A Citrix Architect and a team of Workspacelab members met to discuss a Citrix ADC design project. They captured the following requirements from this design discussion: • All three (3) Workspacelab sites (DC, NDR, and DR) will have similar Citrix ADC configurations and design. • The external Citrix ADC MPX appliances will have Global Server Load Balancing (GSLB) configured and deployed in Active/Active mode. • ADNS service should be configured on the Citrix ADC to make it authoritative for domain nsg.workspaceIab.com. • In GSLB deployment, the DNS resolution should be performed to connect the user to the site with least network latency. • On the internal Citrix ADC, load balancing for StoreFront services, Citrix XML services, and Citrix Director services must be configured. • On the external Citrix ADC, the Gateway virtual server must be configured in ICA proxy mode. Which GSLB method should the architect utilize to meet the design requirements?

Scenario: A Citrix Architect holds a design discussion with a team of Workspacelab members, and they capture the following requirements for the NetScaler design project. A pair of NetScaler MPX appliances will be deployed in the DMZ network and another pair in the internal network. High availability will be accessible between the pair of NetScaler MPX appliances in the DMZ network. Multi-factor authentication must be configured for the NetScaler Gateway virtual server. The NetScaler Gateway virtual server is integrated with the StoreFront server. Load balancing must be deployed for users from the workspacelab.com domain. The workspacelab users should be authenticated using Cert Policy and LDAP. All the client certificates must be SHA 256-signed, 2048 bits, and have UserPrincipalName as the subject. Single Sign-on must be performed between StoreFront and NetScaler Gateway. After deployment, the architect observes that LDAP authentication is failing. Click the Exhibit button to review the output of aaad debug and the configuration of the authentication policy. Exhibit 1 Exhibit 2 What is causing this issue?