Validated 1Y0-230 Study Guides 2021

NEW QUESTION 1
Which three steps can a Citrix Administrator take to integrate an existing CERT-based authentication policy on an existing NetScaler Gateway platform? (Choose three.)

• A. Create a CERT authentication policy and bind it to the NetScaler Gateway virtual server
• B. Enable client authentication on the SSL parameters of the virtual server
• C. Bind the existing CERT authentication policy to the NetScaler Gateway virtual server
• D. Enable the two-factor option on the existing CERT authentication profile
• E. Change the client certificate to Mandatory on the SSL parameters of the virtual server

Answer: ACD

NEW QUESTION 2
How can a Citrix Administrator provide two-factor authentication with tokens in a XenDesktop with NetScaler Gateway environment?

• A. Create a SAML IDP policy and bind it to the existing virtual server.
• B. Configure a TACACS authentication policy and bind it to the existing virtual server.
• C. Configure a RADIUS authentication policy and bind it to the existing virtual server.
• D. Create an authorization policy and bind it to the existing virtual server.

Answer: C

NEW QUESTION 3
Scenario: A Citrix Administrator has a NetScaler SDX appliance with several instances configured. The administrator needs one instance with two interfaces connected to forward packets that are NOT destined for its MAC address. Hence, the administrator has enabled Layer 2 mode. After enabling Layer 2 mode, the administrator found the interface status going up and down.
What can the administrator perform to resolve this issue?

• A. Disable Layer 2 mode on a NetScaler instance.
• B. Enable MAC-based Forwarding mode.
• C. Enable tagging on all interfaces.
• D. Enable Layer 3 mode along with Layer 2 mode.

Answer: C

NEW QUESTION 4
A Citrix Administrator needs to create a customized blacklist of IP addresses to supplement the Webroot reputation check, and in order to have stricter access through NetScaler.
How can the administrator create this blacklist?

• A. Create several extended Access Control List policies.
• B. Create a data set for IPv4 address matching.
• C. Enable MAC-based Forwarding.
• D. Create several simple Access Control List policies.

Answer: A

NEW QUESTION 5
Scenario: Users belong to three Authentication, Authorization and Auditing (AAA) groups: Corporate, Finance and Software.
Show aaa groups:
>show aaa group
1) GroupName: Corporate
2) GroupName: Finance
3) GroupName: Software Done
>show aaa group Corporate GroupName: Corporate Weight: 0
Authorization Policy: pol_1, Type: Classic, Priority: 0
> add authorization policy pol_1 ns_true ALLOW
> bind aaa group Corporate –policy pol_1
The user is being denied resources while aaad.debug shows: Group ‘corporate’ being extracted for user User1
Why is the user being denied access?

• A. The Authorization policy is NOT configured properly.
• B. The group attribute is NOT configured in the LDAP policy.
• C. AAA group names are NOT the same as those in Active Directory/
• D. LDAP Base DN is incorrect.

Answer: D

NEW QUESTION 6
Scenario: A Citrix Administrator created a rewrite policy to add a custom footer for a NetScaler Gateway login page. However, the administrator is NOT able to see the changes on the login page.
Which step can the administrator perform next to see the changes on the login page?

• A. Restart the NetScaler
• B. Edit the vpn/gateway_login_view.js file
• C. Make changes to rc.netscaler
• D. Disable the Rewrite and Responder feature

Answer: B

NEW QUESTION 7
Scenario: A Citrix Administrator configured SNMP to send traps to an external SNMP system. When reviewing the messages, the administrator noticed several entity UP and entity DOWN messages.
To what are these messages related?

• A. High availability synchronization
• B. Load balancing virtual servers
• C. High availability heartbeats
• D. Network interface

Answer: B

NEW QUESTION 8
Which mode on the NetScaler can a Citrix Administrator utilize to avoid asymmetrical packet flows and multiple route/ARP lookups?

• A. USNIP
• B. Layer 3
• C. MAC-based Forwarding
• D. Layer 2

Answer: C

Explanation: MAC-based forwarding can be used to avoid multiple-route/ARP lookups and to avoid asymmetrical packet flows.

NEW QUESTION 9
Scenario: A Citrix Administrator needs to build policies that control the selection of XenApp applications to which a user has access. The administrator would like for the policy decisions to be made by leveraging the HDX settings.
Which type of policy would enable this requirement?

• A. Traffic
• B. SmartControl
• C. Authorization
• D. SmartAccess

Answer: D

NEW QUESTION 10
A Citrix Administrator has deployed a new NetScaler MPX appliance in the demilitarized (DMZ) with one interface in the DMZ and the other on the internal network.
In which mode should the administrator deploy the NetScaler?

• A. One-Arm
• B. Two-Arm
• C. Forward Proxy
• D. Transparent

Answer: D

NEW QUESTION 11
A Citrix Administrator needs to configure single sign-on to a StoreFront server using an external, secure single URL.
Which type of virtual server can the administrator use to meet this requirement?

• A. Load Balancing
• B. Content Switching
• C. VPN
• D. Unified Gateway

Answer: D

NEW QUESTION 12
Scenario: A NetScaler is configured with the following modes:
-MAC-based Forwarding
-USIP
-USNIP
-Layer 3 mode
A Citrix Administrator configured a new router and now requires some of the incoming and outgoing traffic to take different paths through the new router. However, the administrator notices that this is failing and takes a network trace. After a short monitoring period, the administrator notices that the packets are still NOT getting to the new router from the NetScaler.
Which mode should the administrator disable on the NetScaler to facilitate the addition of the new router and successfully route the packets?

• A. MAC-based Forwarding
• B. USIP
• C. Layer 3 mode
• D. USNIP

Answer: D

NEW QUESTION 13
TCP multiplexing is a technique that enables the reuse of existing TCP connections
Which NetScaler hardware or software platform offers a Multi-Tenant solution?

• A. VPX
• B. CPX
• C. MPX
• D. SDX

Answer: D

NEW QUESTION 14
Scenario: A Citrix Administrator was notified that all contractor user IDs will start with the prefix “con.” Currently SmartControl is used to restrict access to peripherals.
Which expression can the administrator use to accomplish this requirement?

• A. HTTP.REQ.USERNAME.CONTAINS(“con”).NOT
• B. HTTP.REQ.USER.IS_MEMBER_OF(“con”).NOT
• C. HTTP.REQ.USE
• D. IS_MEMBER-OF (“con”)
• E. HTTP.REQ.USERNAME.CONTAINS (“con”)

Answer: C

Explanation: Reference https://support.citrix.com/article/CTX200261

NEW QUESTION 15
Scenario: Client connects to certain virtual servers are abnormally high. A Citrix Administrator needs to be alerted whatever the connections pass a certain threshold.
How can the administrator use NetScaler Management and Analytics System (MAS) to accomplish this requirement?

• A. Configure SMTP Reporting on the NetScaler MAS by adding the threshold and email address.
• B. Configure specific alerts for virtual servers using NetScaler MAS.
• C. Configure TCP Insight on the NetScaler MAS.
• D. Configure Network Reporting on the NetScaler MAS by setting the threshold and email address.

Answer: D

NEW QUESTION 16
Scenario: A Citrix Administrator needs to create local user accounts for other administrators with limited privileges. The other administrators will need only:
-Read-only access
-The ability to enable and disable services and servers
Which built-in Command Policy permission level can the administrator use?

• A. Network
• B. Operator
• C. Sysadmin
• D. Read-Only

Answer: B