Citrix 1Y0-440 dumps - 100% Pass Guarantee!

Scenario: Based on a discussion between a Citrix Architect and a team of Workspacelab members, the MPX Logical layout for Workspacelab has been created across three (3) sites.

The requirements captured during the design discussion held for a NetScaler design project are as follows:

1.

Two (2) pairs of NetScaler MPX appliances deployed in the DMZ and internal network.

2.

High Availability will be accessible for each NetScaler MPX

3.

The external NetScaler MPX appliance will be deployed in multi-arm mode.

4.

The internal NetScaler MPX will be deployed in single-arm mode wherein it will be connected to Cisco ACI Fabric.

5.

All three (3) Workspacelab sites: Dc, NDR and DR, will have similar NetScaler configurations and design.

How many NetScaler MPX appliances should the architect deploy at each site to meet the design requirements above?

A. 4

B. 12

C. 6

D. 2

Scenario: A Citrix Architect and a team of Workspacelab members met to discuss a NetScaler design project. They captured the following requirements from this design discussion:

1.

A pair of NetScaler MPX appliances will be deployed in the DMZ network.

2.

High Availability will be accessible in the NetScaler MPX in the DMZ Network.

3.

Load balancing should be performed for the internal network services like Microsoft Exchange Client Access Services and Microsoft App-V.

4.

The load balancing should be performed for StoreFront.

5.

The NetScaler Gateway virtual server will be utilizing the StoreFront load-balancing virtual server.

6.

The NetScaler Gateway virtual server and StoreFront.

7.

The NetScaler Gateway virtual service and StoreFront and load-balancing services are publicly accessible.

8.

The traffic for internal and external services must be isolated.

Click the Exhibit button to review the logical network diagram.

Which two design decisions are incorrect based on these requirements? (Choose two.)

A. LB StoreFront bound to traffic Domain 0

B. NetScaler Gateway VIP bound to Traffic Domain 1

C. LB APP-V bound to Traffic Domain 1

D. SNIP 192.168.20.2 bound to Traffic Domain 1

Scenario: The Workspacelab team has configured their NetScaler Management and Analytics (NMAS) environment. A Citrix Architect needs to log on to the NMAS to check the settings.

Which two authentication methods are supported to meet this requirement? (Choose two.)

A. Certificate

B. RADIUS

C. TACACS

D. Director

E. SAML

F. AAA

Scenario: A Citrix Architect needs to deploy three VPX instances on NetScaler SDX 11500 device to meet the following design requirements:

1.

Three (3) VPX instances must be provisioned on the SDX device.

2.

Instance 1 must be utilized for deploying NetScaler Gateway virtual server.

3.

Instance 2 must be utilized for deploying load balancing virtual servers for XML, Director, StoreFront, and Active Directory servers.

4.

Separate IP address must be utilized for the communication with XenApp environment and LDAP communication.

5.

Instance 3 must be used for deploying the test environment.

6.

In the test environment, NetScaler Gateway virtual server, load balancing virtual servers for XML, Director, StoreFront and Active Directory servers must be configured.

How many IP addresses will be required to meet these design requirements?

A. 14

B. 20

C. 16

D. 18

Scenario: A Citrix Architect has set up NetScaler MPX devices in high availability mode with version

12.0.53.13 nc. These are placed behind a Cisco ASA 5505 Firewall. The Cisco ASA Firewall is configured to block traffic using access control lists. The network address translation (NAT) is also performed on the firewall.

The following requirements were captured by the architect during the discussion held as part of the NetScaler security implementation project with the customer's security team:

The NetScaler MPX device:

1.

should monitor the rate of traffic either on a specific virtual entity or on the device. It should be able to mitigate the attacks from a hostile client sending a flood of requests. The NetScaler device should be able to stop the HTTP, TCP, and DNS based requests.

2.

needs to protect backend servers from overloading.

3.

needs to queue all the incoming requests on the virtual server level instead of the service level.

4.

should provide protection against well-known Windows exploits, virus-infected personal computers, centrally managed automated botnets, compromised webservers, known spammers/hackers, and phishing proxies.

5.

should provide flexibility to enforce the decided level of security check inspections for the requests originating from a specific geolocation database.

6.

should block the traffic based on a pre-determined header length, URL length, and cookie length. The device should ensure that characters such as a single straight quote ("); backslash (\); and semicolon (;) are either blocked, transformed, or dropped while being sent to the backend server.

Which security feature should the architect configure to meet these requirements?

A. Global Server Load balancing with Dynamic RTT

B. Global Server Load Balancing with DNS views

C. Geolocation-based blocking using Application Firewall

D. geolocation-based blocking using Responder policies