Question 1

Which two features can a Citrix Administrator use to allow secure external access to a sensitive company web server that is load-balanced by the Citrix ADC? (Choose two.)

Options :

A : Authentication, authorization, and auditing (AAA)

B :
Citrix Web App Firewall

C : ICA proxy

D : AppFlow

E : Integrated caching

Answer: A,B

Question 2

When a Citrix ADC high availability (HA) pair failover occurs, by what method does the Citrix ADC communicate to the network switches and routers that IP-to-MAC address bindings have changed?

Options :

A : Reverse ARP (RARP) to update the network devices

B : Proxy ARP to update the network devices

C : MAC-based forwarding (MBF) to update the routers

D : Gratuitous ARPs (GARPs) to update the network devices

Answer: D

Question 3

Which Citrix ADC Access Control List (ACL) command can a Citrix Administrator use to bridge traffic originating from the IP address 192.168.10.200?

Options :

A : add ns acl6

B : add ns acl

C : add ns simpleacl6

D : add ns simpleacl

Answer: B

Question 4

Scenario: A Citrix Administrator needs to add 10 new web servers to an existing server farm where the default load-balancing method is used. The new servers, which are twice the capacity of the existing ones, are configured to serve the same applications and connections. The administrator wants to ensure that they are being fully utilized.To ensure that only the 10 new servers receive twice the connections as the old servers without changing load balancing, the administrator needs to add a weight of _________ to the services attached to the _____________ servers. (Choose the correct option to complete the sentence.)

Options :

A : 10; new

B : 2; new

C : 10; old

D : 2; old

Answer: B

Question 5

To protect an environment against Hash DoS attacks, which two configurations can a Citrix Administrator use to block all post requests that are larger than 10,000 bytes? (Choose two.)

Options :

A : > add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(\”POST\”) || http. REQ.CONTENT_LENGTH.GT(10000)”

> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP

> bind responder global pol_resp_hashdos_prevention 70 END -type REQ_OVERRIDE

B : > add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(\”POST\”) && http.REQ.CONTENT_LENGTH.GT(10000)”

> add rewrite policy drop_rewrite expr_hashdos_prevention DROP

> bind rewrite global drop_rewrite 100 END -type REQ_OVERRIDE

C : > add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(\”POST\”) && http.REQ. CONTENT_LENGTH.GT(10000)”

> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP

> bind responder global pol_resp_hashdos_prevention 70 END -type REQ_OVERRIDE

D : > add policy expression expr_hashdos_prevention “http. REQ. METHOD.EQ(\”POST\”) || http. REQ.CONTENT_LENGTH.GT(10000)”

> add rewrite policy drop_rewrite expr_hashdos_prevention DROP

> bind rewrite global drop_rewrite 70 END -type REQ_OVERRIDE

E : > add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(\”POST\” || http.REQ.CONTENT_LENGTH.GT(10000)"

> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP

> bind responder global pol_resp_hashdos_prevention 100 END -type REQ_OVERRIDE

F : > add policy expression expr_hashdos_prevention “http. REQ. METHOD.EQ(\”POST\”) || http. REQ.CONTENT_LENGTH.GT(10000)”

> add rewrite policy drop_rewrite expr_hashdos_prevention DROP

> bind rewrite global drop_rewrite 100 END -type REQ_OVERRIDE

Answer: B,E