Citrix 1Y0-241 問題集

質問 1：
Scenario: A Citrix Administrator would like to grant access to a Junior Citrix Administrator on the Citrix ADC.
The administrator would like to grant full access to everything except the following:
Shell
User configuration
Partition configuration
Which preexisting command policy would meet the needs of this scenario?
A. Operator
B. Sysadmin
C. Network
D. Superuser
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Scenario: A Citrix Administrator is managing a Citrix ADC SDX running eight Citrix ADC instances. The administrator needs to upgrade the firmware on the instances. However, the administrator is concerned that it needs to be done simultaneously.
What upgrading flexibility does SDX provide in this scenario?
A. The Citrix ADC instances can be upgraded on an individual basis, allowing all instances to run independent firmware versions.
B. The Citrix ADC instances can be upgraded from the lights out management (LOM) port and Citrix Cloud services to different firmware versions.
C. The Citrix ADC instances must be upgraded simultaneously.
D. The Citrix ADC instances can be upgraded at the SDX management level, allowing all instances to be upgraded simultaneously.
正解：A

質問 3：
A Citrix Administrator configured an external syslog server but is NOT seeing detailed TCP information?
What could be causing this?
A. Log level is NOT enabled.
B. TCP logging is NOT enabled.
C. Log facility is NOT configured.
D. User-defined audit log is NOT configured.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Scenario: A Junior Citrix Administrator needs to create a content switching vServer on a Citrix ADC high availability (HA) pair. The NSIP addresses are 192.168.20.10 and 192.168.20.11. The junior administrator connects to NSIP address 192.168.20.10 and saves the changes.
The following day, a Senior Citrix Administrator tests the new content switching vServer, but it is NOT working. The senior administrator connects to the HA pair and discovers that everything the junior administrator configured is NOT visible.
Why has the Citrix ADC lost the newly added configurations?
A. The junior administrator connected to the NSIP of the secondary Citrix ADC in the HA pair.
B. Both Citrix ADCs in the HA pair restarted overnight.
C. The junior administrator made the changes and did NOT force a failover to save the configuration.
D. The Citrix ADC appliances have different firmware versions.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 5：
To protect an environment against Hash DoS attacks, which two configurations can a Citrix Administrator use to block all post requests that are larger than 10,000 bytes? (Choose two.)
A. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\") ||
http.REQ.CONTENT_LENGTH.GT(10000)"
> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP
> bind responder global pol_resp_hashdos_prevention 70 END -type REQ_OVERRIDE
B. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\")&&
http.REQ.CONTENT_LENGTH.GT(10000)"
> add rewrite policy drop_rewrite expr_hashdos_prevention DROP
> bind rewrite global drop_rewrite 100 END -type REQ_OVERRIDE
C. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\") ||
http.REQ.CONTENT_LENGTH.GT(10000)"
> add rewrite policy drop_rewrite expr_hashdos_prevention DROP
> bind rewrite global drop_rewrite 70 END -type REQ_OVERRIDE
D. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\") ||
http.REQ.CONTENT_LENGTH.GT(10000)"
> add rewrite policy drop_rewrite expr_hashdos_prevention DROP
> bind rewrite global drop_rewrite 100 END -type REQ_OVERRIDE
E. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\") ||
http.REQ.CONTENT_LENGTH.GT(10000)"
> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP
> bind responder global pol_resp_hashdos_prevention 100 END -type REQ_OVERRIDE
F. > add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\")&&
http.REQ.CONTENT_LENGTH.GT(10000)"
> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP
> bind responder global pol_resp_hashdos_prevention 70 END -type REQ_OVERRIDE
正解：B,F