Citrix Architecting a Citrix Networking Solution - 1Y0-440 Exam Practice Test
Scenario: A Citrix Architect and a team of Workspacelab members have met for a design discussion about the NetScaler Design Project. They captured the following requirements:
Two pairs of NetScaler MPX appliances will be deployed in the DMZ network and the internal network.
High availability will be accessible between the pair of NetScaler MPX appliances in the DMZ network.
Multi-factor authentication must be configured for the NetScaler Gateway virtual server.
The NetScaler Gateway virtual server is integrated with XenApp/XenDesktop environment.
Load balancing must be deployed for the users from the workspacelab.com and vendorlab.com domains.
The logon page must show the workspacelab logo.
Certificate verification must be performed to identify and extract the username.
The client certificate must have UserPrincipalName as a subject.
All the managed workstations for the workspace users must have a client identifications certificate installed on it.
The workspacelab users connecting from a managed workstation with a client certificate on it should be authenticated using LDAP.
The workspacelab users connecting from a workstation without a client certificate should be authenticated using LDAP and RADIUS.
The vendorlab users should be authenticated using Active Directory Federation Service.
The user credentials must NOT be shared between workspacelab and vendorlab.
Single Sign-on must be performed between StoreFront and NetScaler Gateway.
A domain drop down list must be provided if the user connects to the NetScaler Gateway virtual server externally.
The domain of the user connecting externally must be identified using the domain selected from the domain drop down list.
On performing the deployment, the architect observes that users are always prompted with two-factor authentication when trying to assess externally from an unmanaged workstation.
Click the exhibit button to view the configuration.
What should the architect do to correct this configuration?
Two pairs of NetScaler MPX appliances will be deployed in the DMZ network and the internal network.
High availability will be accessible between the pair of NetScaler MPX appliances in the DMZ network.
Multi-factor authentication must be configured for the NetScaler Gateway virtual server.
The NetScaler Gateway virtual server is integrated with XenApp/XenDesktop environment.
Load balancing must be deployed for the users from the workspacelab.com and vendorlab.com domains.
The logon page must show the workspacelab logo.
Certificate verification must be performed to identify and extract the username.
The client certificate must have UserPrincipalName as a subject.
All the managed workstations for the workspace users must have a client identifications certificate installed on it.
The workspacelab users connecting from a managed workstation with a client certificate on it should be authenticated using LDAP.
The workspacelab users connecting from a workstation without a client certificate should be authenticated using LDAP and RADIUS.
The vendorlab users should be authenticated using Active Directory Federation Service.
The user credentials must NOT be shared between workspacelab and vendorlab.
Single Sign-on must be performed between StoreFront and NetScaler Gateway.
A domain drop down list must be provided if the user connects to the NetScaler Gateway virtual server externally.
The domain of the user connecting externally must be identified using the domain selected from the domain drop down list.
On performing the deployment, the architect observes that users are always prompted with two-factor authentication when trying to assess externally from an unmanaged workstation.
Click the exhibit button to view the configuration.
What should the architect do to correct this configuration?
Correct Answer: B
Vote an answer
Which two features are supported on LbaaSV1? (Choose two.)
Correct Answer: A,C
Vote an answer
Under which two circumstances will a service be taken out of the slow start phase with automated slow start? (Choose Two)
Correct Answer: A,D
Vote an answer
A Citrix Architect needs to configure advanced features of NetScaler by using StyleBooks as a resource in the Heat service.
What is the correct sequence of tasks to be completed for configuring NetScaler using the Heat stack?
What is the correct sequence of tasks to be completed for configuring NetScaler using the Heat stack?
Correct Answer: C
Vote an answer
Scenario: A Citrix Architect holds a design discussion with a team of Workspacelab members, and they capture the following requirements for the NetScaler design project.
A pair of NetScaler MPX appliances will be deployed in the DMZ network and another pair in the internal network.
High availability will be accessible between the pair of NetScaler MPX appliances in the DMZ network.
Multi-factor authentication must be configured for the NetScaler Gateway virtual server.
The NetScaler Gateway virtual server is integrated with the StoreFront server.
Load balancing must be deployed for users from the workspacelab.com domain.
The workspacelab users should be authenticated using Cert Policy and LDAP.
All the client certificates must be SHA 256-signed, 2048 bits, and have UserPrincipalName as the subject.
Single Sign-on must be performed between StoreFront and NetScaler Gateway.
After deployment, the architect observes that LDAP authentication is failing.
Click the Exhibit button to review the output of aaad debug and the configuration of the authentication policy.
Exhibit 1
Exhibit 2
What is causing this issue?
A pair of NetScaler MPX appliances will be deployed in the DMZ network and another pair in the internal network.
High availability will be accessible between the pair of NetScaler MPX appliances in the DMZ network.
Multi-factor authentication must be configured for the NetScaler Gateway virtual server.
The NetScaler Gateway virtual server is integrated with the StoreFront server.
Load balancing must be deployed for users from the workspacelab.com domain.
The workspacelab users should be authenticated using Cert Policy and LDAP.
All the client certificates must be SHA 256-signed, 2048 bits, and have UserPrincipalName as the subject.
Single Sign-on must be performed between StoreFront and NetScaler Gateway.
After deployment, the architect observes that LDAP authentication is failing.
Click the Exhibit button to review the output of aaad debug and the configuration of the authentication policy.
Exhibit 1
Exhibit 2
What is causing this issue?
Correct Answer: D
Vote an answer
Which two parameters must a Citrix Architect specify in the configuration job to replicate a specific configuration snippet from one Crtnx ADC instance to multiple instances? (Choose two.)
Correct Answer: A,D
Vote an answer
Scenario: A Citrix Architect needs to design a new Citrix Gateway deployment for a customer. During the design discussions, the architect documents the key requirements for the Citrix Gateway.
Click the Exhibit button to view the key requirements.
The architect should configure Citrix Gateway for __________________in order to meet the stated requirements. (Choose the correct option to complete the sentence.)
Click the Exhibit button to view the key requirements.
The architect should configure Citrix Gateway for __________________in order to meet the stated requirements. (Choose the correct option to complete the sentence.)
Correct Answer: B
Vote an answer
Scenario: A Citrix Architect holds a design discussion with a team of Workspacelab members, and they capture the following requirements for the Citrix ADC design project:
A pair of Citrlx ADC MPX appliances will be deployed in the DMZ network and another pair in the internal network.
High availability will be accessible between the pair of Citrix ADC MPX appliances in the DMZ network.
Multi-factor authentication must be configured for the Citrix Gateway virtual server.
The Citrix Gateway virtual server is integrated with the StoreFront server.
Load balancing must be configured for the StoreFront server. *Authentication must be deployed for users from the workspacelab.com domain.
The Workspacelab users should be authenticated using Cert Policy and LDAP.
All the client certificates must be SHA 256-signed, 2048 bits, and have UserPrincipalName as the subject.
Single Sign-on must be performed between StoreFront and Citrix Gateway. After deployment the architect observes that LDAP authentication is failing.
Click the Exhibit button to review the output of aaad.debug and the configuration of the authentication policy.
What is causing this issue?
A pair of Citrlx ADC MPX appliances will be deployed in the DMZ network and another pair in the internal network.
High availability will be accessible between the pair of Citrix ADC MPX appliances in the DMZ network.
Multi-factor authentication must be configured for the Citrix Gateway virtual server.
The Citrix Gateway virtual server is integrated with the StoreFront server.
Load balancing must be configured for the StoreFront server. *Authentication must be deployed for users from the workspacelab.com domain.
The Workspacelab users should be authenticated using Cert Policy and LDAP.
All the client certificates must be SHA 256-signed, 2048 bits, and have UserPrincipalName as the subject.
Single Sign-on must be performed between StoreFront and Citrix Gateway. After deployment the architect observes that LDAP authentication is failing.
Click the Exhibit button to review the output of aaad.debug and the configuration of the authentication policy.
What is causing this issue?
Correct Answer: C
Vote an answer
A Citrix Architect needs to evaluate and define the architecture and operational processes required to implement and maintain the production environment. In which two phases of the Citrix Methodology will the architect define this? (Choose two.)
Correct Answer: A,B
Vote an answer
Scenario: A Citrix Architect captured the following requirements during a design discussion held for a Citrix ADC design project.
There will be a pair of Citrix ADC MPX appliances deployed in the DMZ and another pair deployed in the internal network High availability will be accessible for each Citrix ADC MPX appliance in both the DMZ (external) and LAN (internal) networks DMZ Citrix ADC MPX appliances will have GSLB configured and deployed in Active/Passive mode Load balancing for the internal Microsoft Exchange servers will be configured on the internal Citrix ADC appliances Load balancing for SAP application servers in the DMZ will be configured on the DMZ Citrix ADC appliances For the DMZ Citrix ADC MPX pair, the data and management traffic will be sent over the same interface.
The DMZ Citrix ADC MPX pair will have three interfaces available.
The users from the DMZ should NOT have access to servers in the internal zone Which deployment mode should the architect use to deploy the Citrix ADC pair in the DMZ?
There will be a pair of Citrix ADC MPX appliances deployed in the DMZ and another pair deployed in the internal network High availability will be accessible for each Citrix ADC MPX appliance in both the DMZ (external) and LAN (internal) networks DMZ Citrix ADC MPX appliances will have GSLB configured and deployed in Active/Passive mode Load balancing for the internal Microsoft Exchange servers will be configured on the internal Citrix ADC appliances Load balancing for SAP application servers in the DMZ will be configured on the DMZ Citrix ADC appliances For the DMZ Citrix ADC MPX pair, the data and management traffic will be sent over the same interface.
The DMZ Citrix ADC MPX pair will have three interfaces available.
The users from the DMZ should NOT have access to servers in the internal zone Which deployment mode should the architect use to deploy the Citrix ADC pair in the DMZ?
Correct Answer: D
Vote an answer
Scenario: A Citrix Architect needs to design a hybrid Citrix Virtual App and Citrix Virtual Desktop environment which will include Citrix Cloud as well as resource locations in on-premises datacenter and Microsoft Azure.
Organizational details and requirements are as follows:
Active Citrix Virtual App and Citrix Virtual Desktop Service subscription No existing NetScaler deployment About 3,000 remote users are expected to regularly access the environment Multi-factor authentication should be used for all external connections Solution must provide load balancing for backend application servers Load-balancing services must be in Location B Click the Exhibit button to view the conceptual environment architecture.
The architect should use ________ in Location A, and should use _________ in Location B. (Choose the correct option to complete the sentence.)
Organizational details and requirements are as follows:
Active Citrix Virtual App and Citrix Virtual Desktop Service subscription No existing NetScaler deployment About 3,000 remote users are expected to regularly access the environment Multi-factor authentication should be used for all external connections Solution must provide load balancing for backend application servers Load-balancing services must be in Location B Click the Exhibit button to view the conceptual environment architecture.
The architect should use ________ in Location A, and should use _________ in Location B. (Choose the correct option to complete the sentence.)
Correct Answer: C
Vote an answer
A Citrix Architect can execute a configuration job using a DeployMasterConfiguration template on a Citrix ADC____deployed________. (Choose the correct option to complete sentence:
Correct Answer: C
Vote an answer