Black Friday Special 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: Board70

New Release 1Y0-440 CCE-N Questions

Page: 5 / 11
Question 20

Scenario: A junior Citrix Architect would like to use nFactor to perform authentication based on the domain. The junior architect has reached out to a supervisor for assistance and has been provided with the following step-by-step configuration guide:

  • Create Authentication policy for LDAP. RADIUS.
  • Create logon schema for Domain drop down. LDAP. LDAP+RADIUS, and noschema.
  • Create Authentication policy label for OnlyLDAR LDAP+RADIUS, and RADIUS.
  • Bind DOMAIN drop down as default logon schema policy
  • Create Authentication profile to bind the AAA virtual server.
  • Bind Authentication profile to Traffic management virtual server or Citrix Gateway virtual server.

What must the junior architect bind In order for the authentication to work correctly?

Options:

A.

The authentication policy label to Citrix ADC AAA virtual server

B.

The authentication policy label to the Citrix Gateway virtual server

C.

The logon schema to the AAA virtual server

D.

The logon schema to the Citrix ADC AAA virtual server

E.

The authentication policy label to the Traffic management virtual server

Question 21

Scenario: A Citrix Architect has set up Citrix ADC MPX devices in high availability mode with version 12.0.53.13 nc. These are placed behind a Cisco ASA 5505 firewall. The Cisco ASA firewall is configured to block traffic using access control lists. The network address translation (NAT) is also performed on the firewall.

The following requirements were captured by the architect during the discussion held as part of the Citrix ADC security implementation project with the customers security team:

The Citrix ADC MPX device:

  • should monitor the rate of traffic either on a specific virtual entity or on the device It should be able to mitigate the attacks from a hostile client sending a flood of requests. The Citrix ADC device should be able to stop the HTTP TCP. and DNS based requests
  • needs to protect backend servers from overloading
  • needs to queue all the incoming requests on the virtual server level instead of the service level
  • should provide access to resources on the basis of priority
  • should provide protection against well-known Windows exploits virus-infected personal computers, centrally managed automated botnets, compromised webservers, known spammers/hackers, and phishing proxies
  • should provide flexibility to enforce the desired level of security check inspections for the requests originating from a specific geolocation database.
  • should block the traffic based on a pre-determined header length. URL length and cookie length. The device should ensure that characters such as a single straight quote ('): backslash (\); and semicolon (;) are either blocked, transformed, or dropped while being sent to the backend server.

Which security feature should the architect configure to meet these requirements?

Options:

A.

Configure Application Firewall with HTML cross-site scripting to block unwanted traffic

B.

Configure pattern sets using regular expressions to block attacks

C.

Configure Signatures manually and apply them to the Application Firewall profile

D.

Configure signatures to auto-update and apply them to the Application Firewall profile

E.

Configure IP address reputation and use IPREP and webroot to block the traffic

Question 22

What are three potential risks when examining the disaster recovery plan and implementation for a company? (Choose three)

Options:

A.

Supporting infrastructure for proposed environment is NOT included in disaster recovery implementation

B.

A disaster recovery plan exists but has never been tested

C.

A disaster recovery location does NOT exist.

D.

Users require mobile devices with continuous access

E.

Optimal Gateway Routing decisions are NOT understood

Question 23

Scenario: A Citrix Architect has sent the following request to the NetScaler:

Which response would indicate the successful execution of the NITRO command?

Options:

A.

302

B.

201

C.

202

D.

200

Page: 5 / 11
Exam Code: 1Y0-440
Exam Name: Architecting a Citrix Networking Solution
Last Update: Nov 23, 2024
Questions: 152
1Y0-440 pdf

1Y0-440 PDF

$25.5  $84.99
1Y0-440 Engine

1Y0-440 Testing Engine

$28.5  $94.99
1Y0-440 PDF + Engine

1Y0-440 PDF + Testing Engine

$40.5  $134.99