1Y0-440 Online Practice Questions and Answers

Scenario: Based on a discussion between a Citrix Architect and a team of Workspacelab members, the MPX Logical layout for Workspacelab has been created across three (3) sites.

The requirements captured during the design discussion held for a NetScaler design project are as follows:

1.

Two (2) pairs of NetScaler MPX appliances deployed in the DMZ and internal network.

2.

High Availability will be accessible for each NetScaler MPX

3.

The external NetScaler MPX appliance will be deployed in multi-arm mode.

4.

The internal NetScaler MPX will be deployed in single-arm mode wherein it will be connected to Cisco ACI Fabric.

5.

All three (3) Workspacelab sites: Dc, NDR and DR, will have similar NetScaler configurations and design.

How many NetScaler MPX appliances should the architect deploy at each site to meet the design requirements above?

A. 4

B. 12

C. 6

D. 2

Scenario: A Citrix Architect needs to plan for a customer environment in which more than 10,000 users will need access. The networking infrastructure needs to be able to handle the expected usage.

Which business driver should be prioritized based on the customer's requirement?

A. Increase flexibility

B. Enable mobile work styles

C. Simplify management

D. Increase Scalability

E. Reduce Costs

F. Increase Security

Scenario: A Citrix Architect has configured NetScaler Gateway integration with a XenApp environment to provide access to users from two domains: vendorlab.com and workslab.com. The Authentication method used is LDAP.

Which two steps are required to achieve Single Sign-on StoreFront using a single store? (Choose two.)

A. Configure Single sign-on domain in Session profile `userPrincipalName'.

B. Do NOT configure SSO Name attribute in LDAP Profile.

C. Do NOT configure sign-on domain in Session Profile.

D. Configure SSO Name attribute to `userPrincipalName' in LDAP Profile.

Scenario: A Citrix Architect needs to assess an existing on-premises NetScaler deployment which includes Advanced Endpoint Analysis scans. During a previous security audit, the team discovered that certain endpoint devices were able to perform unauthorized actions despite NOT meeting pre-established criteria.

The issue was isolated to several endpoint analysis (EPA) scan settings.

Click the Exhibit button to view the endpoint security requirements and configured EPA policy settings.

Which setting is preventing the security requirements of the organization from being met?

A. Item 6

B. Item 7

C. Item 1

D. Item 3

E. Item 5

F. Item 2

G. Item 4

Scenario: A Citrix Architect has met with a team of Workspacelab members for a design discussion. They have captured the following requirements for NetScaler design project:

1.

The authentication must be deployed for the users from the workspacelab.com and vendorlab.com domains.

2.

The workspacelab users connecting from the internal (workspacelab) network should be authenticated using LDAP.

3.

The workspacelab users connecting from the external network should be authenticated using LDAP and RADIUS.

4.

The vendorlab users should be authenticated using Active Directory Federation Service.

5.

The user credentials must NOT be shared between workspacelab and vendorlab.

6.

Single Sign-on must be performed between StoreFront and NetScaler Gateway.

7.

A domain drop down list must be provided if the used connects to the NetScaler gateway virtual server externally.

Which method must the architect utilize for user management between the two domains?

A. Create shadow accounts for the users of the Workspacelab domain in the Vendorlab domain.

B. Create a global catalog containing the objects of Vendorlab and Workspacelab domains.

C. Create shadow accounts for the Vendorlab domain in the Workspacelab domain.

D. Create a two-way trust between the Vendorlab and Workspacelab domains.

Which parameter must a Citrix Architect configure to ensure that HDX Proxy Connection terminates upon AAA Session TimeOut?

A. ICA session timeout in VPN parameters

B. Session timeout(mins) in NetScaler gateway Session Profile.

C. Session timeout(mins) in VPN Parameters

D. ICA session timeout in netScaler Gateway Session Profile.

Scenario: A Citrix Architect needs to design a hybrid XenApp and XenDesktop environment which will include as well as resource locations in an on-premises datacenter and Microsoft Azure.

Organizational details and requirements are as follows:

1.

Active XenApp and XenDesktop Service subscription

2.

No existing NetScaler deployment

3.

Minimization of additional costs

4.

All users should correct directly to the resource locations containing the servers which will host HDX sessions

Click the Exhibit button to view the conceptual environment architecture.

The architect should use___________ in Location A, and should use _______________ in Location B. (Choose the correct option to complete the sentence.)

A. No NetScaler products; NetScaler ICA Proxy (cloud-licensed)

B. NetScaler Gateway as a Service; NetScaler ICA Proxy (cloud-licensed)

C. NetScaler Gateway as a Service; no NetScaler products

D. No NetScaler products; NetScaler Gateway appliance

E. NetScaler gateway as a Service; NetScaler ADC (BYO)

Which two NetScaler cookies indicate the validity of the Authentication, Authorization and Accounting (AAA) session for users? (Choose two.)

A. NSC_WT

B. NSC_TMAS

C. NSC_AAAC

D. NSC_TMAA

Scenario: A Citrix Architect needs to configure a full VPN session profile to meet the following requirements:

1.

Users should be able to send the traffic only for the allowed networks through the VPN tunnel.

2.

Only the DNS requests ending with the configured DNS suffix workspacelab.com must be sent to NetScaler Gateway.

3.

If the DNS query does NOT contain a domain name, then DNS requests must be sent to NetScaler gateway.

Which settings will meet these requirements?

A. Split Tunnel to OFF, Split DNS Both

B. Split Tunnel to ON, Split DNS Local

C. Split Tunnel to OFF, Split DNS Remote

D. Split Tunnel to ON, Split DNS Remote

Scenario: A Citrix Architect has deployed Authentication for the SharePoint server through NetScaler. In order to ensure that users are able to edit or upload documents, the architect has configured persistent cookies on the NetScaler profile.

Which action should the architect take to ensure that cookies are shared between the browser and non-browser applications?

A. The time zone should be the same on the NetScaler, client, and SharePoint server.

B. The SharePoint load-balancing VIP FQDN and the AAA VIP FQDN should be in the trusted site of the client browser.

C. The Secure flag must be enabled on the cookie.

D. The cookie type should be HttpOnly.