Citrix 1y0-231 practice test

Question 1

After being audited, a Citrix Administrator learns that additional security enhancements should be
made to one
of the virtual servers.
Which two actions can the administrator perform to accomplish this? (Choose two.)

• A. Enable the TLSv1.2.
• B. Enable the RC4 cipher suite.
• C. Create a SHA1 key.
• D. Disable the SSLv3.

Answer:

AC

Question 2

A Citrix Administrator needs to configure a Citrix Gateway virtual server to meet an organizations
security
requirements.
Which two types of devices can the administrator control with Endpoint Analysis (EPA) scans?
(Choose two.)

• A. iOS
• B. Mac
• C. Microsoft Windows
• D. Chromebook
• E. Android

Answer:

BC

Reference:
https://shop.adn.de/out/media/citrix_netscaler_gw.pdfs

Question 3

Scenario: A Citrix Administrator would like to grant access to a Junior Citrix Administrator on the
Citrix ADC.
The administrator would like to grant full access to everything except:
Shell
User configuration
Partition configuration
Which preexisting command policy would meet the needs of this scenario?

• A. Network
• B. Operator
• C. Sysadmin
• D. Superuser

Answer:

C

Reference:
https://docs.citrix.com/en-us/citrix-adc/current-release/system/authentication-and-
authorization-forsystem-user/user-usergroups-command-policies.html

Question 4

Scenario: A Citrix Administrator suspects an attack on a load-balancing virtual server (IP address
192.168.100.25). The administrator needs to restrict access to this virtual server for 10 minutes.
Which access control list (ACL) will accomplish this?

• A. add ns acl rule1 DENY -destIP 192.168.100.25 -TTL 600000
• B. add simpleacl rule1 DENY -srcIP 192.168.100.25 -TTL 600000
• C. add ns acl rule1 DENY -destIP 192.168.100.25 -TTL 600
• D. add simpleacl rule1 DENY -srcIP 192.168.100.25 -TTL 600

Answer:

D

Question 5

A Citrix Administrator needs to integrate an existing certification-based authentication policy into an
existing
Citrix Gateway virtual server.
Which three steps can the administrator take to accomplish this? (Choose three.)

• A. Bind the existing CERT authentication policy to the Citrix Gateway virtual server.
• B. Enable the two-factor option on the existing CERT authentication profile.
• C. Enable client authentication on the SSL parameters of the virtual server.
• D. Change the client certificate to mandatory on the SSL parameters of the virtual server.
• E. Create a CERT authentication policy and bind it to the Citrix Gateway virtual server.

Answer:

CDE

Reference:
https://docs.citrix.com/en-us/citrix-gateway/current-release/authentication-
authorization/configureclient-cert-authentication/ng-client-cert-vserver-and-bind-tsk.html

Question 6

A Citrix Administrator configured a Citrix Gateway virtual server for authentication, but there is no
authentication policy bound to the virtual server.
Which authentication binding point will the Citrix ADC evaluate next?

• A. Override global
• B. Group
• C. Default global
• D. User

Answer:

D

Question 7

A Citrix Administrator needs to block all local printer access from users in the Marketing department
who are
connecting remotely, but who should still have access when connecting inside the corporate network
using the
same Citrix Gateway.
What can the administrator configure to accomplish this?

• A. SmartControl
• B. Extended access control list (ACL)
• C. Simple access control list (ACL)
• D. AppFlow

Answer:

A

Reference:
https://docs.citrix.com/en-us/citrix-gateway/current-release/integrate-web-interface-
apps/smartcontrol
.
html

Question 8

A Citrix Administrator wants to customize the look of the landing page presented to users during the
authentication process on Citrix ADC.
Which nFactor component should the administrator modify in this scenario?

• A. Logon Schema
• B. Pass-through factor
• C. Next factor
• D. NoAuth Policy

Answer:

A

Reference:
https://docs.citrix.com/en-us/citrix-adc/current-release/aaa-tm/authentication-
methods/multi-factornfactor-authentication/nfactor-authentication-configuring.html

Question 9

Scenario: A Citrix Administrator is configuring a new authentication, authorization, and auditing
(AAA) virtual
server, and the status is DOWN. The administrator makes the below configurations:
add lb vserver lb_vsrv_www HTTP 10.107.149.229 80 -persistenceType NONE -cltTimeout 180 -
authn401 ON
-authnVsName SAML_SP
bind lb vserver lb_vsrv_www_ssl Red_srv
bind lb vserver Ib_vsrv_www_ssl Blue_srv
add authentication vserver SAML_SP SSL 10.107.149.230 443 -AuthenticationDomain citrix.lab
What should the administrator bind to the virtual server SAML_SP to complete the installation and
change the
status to UP?

• A. An SSL certificate
• B. A service
• C. An AAA policy
• D. An LDAP policy

Answer:

D

Question 10

Which feature can a Citrix Administrator use to create a consistent set of front-end SSL parameters
across
multiple SSL virtual servers?

• A. SSL bridge
• B. SSL multiplexing
• C. SSL policy
• D. SSL profile

Answer:

D

Reference:
https://docs.citrix.com/en-us/citrix-adc/current-release/ssl/ssl-profiles.html