Citrix Architecting a Citrix Networking Solution Exam (1Y0-440) - Citrix Exam Questions

Scenario: A Citrix Architect has set up Citrix ADC MPX devices in high availability mode with version 12.0.53.13 nc. These are placed behind a Cisco ASA 5505 firewall. The Cisco ASA firewall is configured to block traffic using access control lists. The network address translation (NAT) is also performed on the firewall. The following requirements were captured by the architect during the discussion held as part of the

Citrix ADC security implementation project with the customers security team:

The Citrix ADC MPX device: should monitor the rate of traffic either on a specific virtual entity or on the device It should be able to mitigate the attacks from a hostile client sending a flood of requests. The Citrix ADC device should be able to stop the HTTP TCP. and DNS based requests needs to protect backend servers from overloading needs to queue all the incoming requests on the virtual server level instead of the service level should provide access to resources on the basis of priority should provide protection against well-known Windows exploits virus-infected personal computers, centrally managed automated botnets, compromised webservers, known spammers/hackers, and phishing proxies should provide flexibility to enforce the desired level of security check inspections for the requests originating from a specific geolocation database. should block the traffic based on a pre-determined header length. URL length and cookie length. The device should ensure that characters such as a single straight quote ('): backslash (\); and semicolon (;) are either blocked, transformed, or dropped while being sent to the backend server.

Which security feature should the architect configure to meet these requirements?

Scenario: A Citrix Architect has deployed two MPX devices, 12.0.53.13 nc and MPX 11500 models, in high availability (HA) pair for the Workspace labs team. The deployment method is two-arm and the devices are installed behind a CISCO ASA 5585 Firewall. The architect enabled the following features on the NetScaler devices. Content Switching, SSL Offloading, Load Balancing, NetScaler Gateway, Application Firewall in hybrid security and Appflow. All are enabled to send monitoring information to NMAS 12.0.53.13 nc build. The architect is preparing to configure load balancing for Microsoft Exchange 2016 server.

The following requirements were discussed during the implementation: All traffic needs to be segregated based on applications, and the fewest number of IP addresses should be utilized during the configuration All traffic should be secured and any traffic coming into HTTP should be redirected to HTTPS. Single Sign-on should be created for Microsoft Outlook web access (OWA). NetScaler should recognize Uniform Resource Identifier (URl) and close the session to NetScaler

when users hit the Logoff button in Microsoft Outlook web access. Users should be able to authenticate using either user principal name (UPN) or sAMAccountName. The Layer 7 monitor should be configured to monitor the Microsoft Outlook web access servers and the monitor probes must be sent on SSL

Which monitor will meet these requirements?

Which three session settings are valid once a Citrix Architect has configured session settings to customize user sessions? (Choose three.)

Scenario: A Citrix Architect needs to design a new Citrix ADC Gateway deployment to provide secure RDP access to backend Windows machines. Click the Exhibit button to view additional requirements collected by the architect during the design discussions.



To meet the customer requirements, the architect should deploy the RDP proxy through _______, using a solution. (Choose the correct option to complete the sentence.) _________

Scenario: A junior Citrix Architect would like to use nFactor to perform authentication based on the domain. The junior architect has reached out to a supervisor for assistance and has been provided with the following step-by-step configuration guide: Create Authentication policy for LDAP. RADIUS. Create logon schema for Domain drop down. LDAP. LDAP+RADIUS, and noschema. Create Authentication policy label for OnlyLDAR LDAP+RADIUS, and RADIUS. Bind DOMAIN drop down as default logon schema policy Create Authentication profile to bind the AAA virtual server. Bind Authentication profile to Traffic management virtual server or Citrix Gateway virtual server.

What must the junior architect bind In order for the authentication to work correctly?