Service should be as dependable as the study material, and at CertkingdomPDF your 1Y0-440 order carries Citrix Architecting a Citrix Networking Solution quality checks, instant delivery, 365 days of free updates, and support reachable by email or online chat at any hour.
Citrix 1Y0-440 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Networking Methodology and Assessment | 11% | - Project Planning and Methodology
|
| Global Server Load Balancing | 11% | - Multi-Datacenter Design
|
| SSL and TLS | 11% | - Certificate Management
|
| Content Switching | 11% | - Traffic Routing
|
| Citrix Gateway | 11% | - Remote Access Design
|
| Load Balancing | 11% | - Traffic Distribution
|
| AppExpert | 11% | - Application Optimization
|
| Citrix ADC Security | 12% | - Security Design
|
| High Availability | 11% | - Resiliency Architecture
|
1Y0-440 Exam Facts and Modern Study Formats
- Load Balancing (11%)
- Citrix ADC Security (12%)
- Citrix Gateway (11%)
Citrix Architecting a Citrix Networking Solution Sample Questions:
Scenario: A Citrix Architect needs to design a hybrid Citrix Virtual App and Citrix Virtual Desktop environment which will include Citrix Cloud as well as resource locations in on-premises datacenter and Microsoft Azure.
Organizational details and requirements are as follows:
Active Citrix Virtual App and Citrix Virtual Desktop Service subscription No existing NetScaler deployment About 3,000 remote users are expected to regularly access the environment Multi-factor authentication should be used for all external connections Solution must provide load balancing for backend application servers Load-balancing services must be in Location B Click the Exhibit button to view the conceptual environment architecture.
The architect should use ________ in Location A, and should use _________ in Location B. (Choose the correct option to complete the sentence.)
- A. No Citrix products; Citrix Gateway appliance
- B. No Citrix products, Citrix ADC (BYO)
- C. No Citrix products, Citrix ICA Proxy (cloud-licensed)
- D. Citrix Gateway as a Service, no Ctrix products
- E. Citrix Gateway as a Service, Citrix ADC (BYO)
- F. Citrix Gateway as a Service, Citrix ICA Proxy (cloud-licensed)
Correct Answer: E 🗳️
Scenario: A Citrix Architect has met with a team of Workspacelab members for a design discussion They have captured the following requirements for the Citrix ADC design project:
The authentication must be deployed for the users from the workspacelab com and vendorlab com domains.
The workspacelab users connecting from the internal (workspacelab) network should be authenticated using LDAP The workspacelab users connecting from the external network should be authenticated using LDAP and RADIUS.
The vendorlab users should be authenticated using Active Directory Federation Service The user credentials must NOT be shared between workspacelab and vendorlab Single Sign-on must be performed between StoreFront and Citrix Gateway A domain drop down list must be provided if the user connects to the Citrix Gateway virtual server externally Which method must the architect utilize for user management between the two domains?
- A. Create shadow accounts for the users of the Vendorlab domain in the Workspacelab domain
- B. Create a two-way trust between the Vendorlab and Workspacelab domains
- C. Create a global catalog containing the objects of Vendorlab and Workspacelab domains.
- D. Create shadow accounts for the users of the Workspacelab domain in the Vendorlab domain
Correct Answer: A 🗳️
Scenario: A Citrix Architect needs to design a new multi-datacenter Citrix ADC deployment. The customer wants Citrix ADC to provide access the various backend resources by using Global Server Load Balancing (GSLB) in an Active-Active deployment.
Click the Exhibit button to view additional requirements identified by the architect.
Which GSLB algorithm or method should the architect use for the deployment based on the stated requirements?
- A. Least packets
- B. Static proximity
- C. Dynamic round trip time (RTT)
- D. Least response time
- E. Source IP hash
- F. Least connections
Correct Answer: C 🗳️
Scenario: Based on a discussion between a Citrix Architect and team of Workspacelab has been created across three (3) sites.
They captured the following requirements during the design discussion held for NetScaler design projects:
All three (3) Workspacelab sites (DC, NDR, and DR) will have similar NetScaler configuration and design.
Both external and internal NetScaler MPX appliances will have Global Server Load balancing (GSLB) configured and deployed in Active/Passive mode.
GSLB should resolve both A and AAA DNS queries.
In the GSLB deployment, the NDR site will act as backup for the DC site. whereas the DR site will act as backup for the NDR site.
When the external NetScaler replies to DNS traffic coming in through Cisco Firepower IPS, the replies should be sent back through the same path.
On the internal NetScaler, both front-end VIP and back-end SNIP will be part of the same subnet.
USIP is configured on the DMZ NetScaler appliances.
The external NetScaler will act default gateway for back-end servers.
All three (3) sites (DC, NDR, and DR) will have two (2) links to the Internet from different service providers configured in Active/Standby mode.
Which design decision must the architect make to meet the design requirements above?
- A. The SNIP of the external NetScaler must be configured as default gateway on the back-end servers.
- B. Policy-Based Route with next hop as CISCO IPS must be configured on the external NetScaler.
- C. Interface 0/1 must be used for DNS traffic.
- D. ADNS service must be used with IPv6 address.
Correct Answer: A 🗳️
Explanation: Only visible for CertkingdomPDF members. You can sign-up / login (it's free).
Scenario: A Citrix Architect has deployed an authentication setup for the load balancing virtual server for the SAP application. The authentication is being performed using RADIUS and LDAP. RADIUS is the first factor, and LDAP is the second factor in the authentication. The Single Sign-on with SAP application should be performed using LDAP credentials. Which session profile should be used to perform the Single Sign-on?
- A. add tm sessionAction prof -sessTimeout 30 -defaultAuthorizationAction ALLOW -SSO ON -ssoCredential SECONDARY -httpOnlyCookie NO
- B. add tm sessionAction prof -sessTimeout 30 -defaultAuthorizationAction ALLOW -SSO ON -ssoCredential PRIMARY -httpOnlyCookie NO
- C. add vpn sessionAction prof -sessTimeout 30 -defaultAuthorizationAction ALLOW -SSO ON -ssoCredential PRIMARY -httpOnlyCookie NO
- D. add vpn sessionAction prof-sessTimeout 30 -defaultAuthorizationAction ALLOW -SSO ON -ssoCredential SECONDARY -httpOnlyCookie NO
Correct Answer: A 🗳️
Viewing page 1 out of 31 pages.
Viewing questions 1-5 out of 153 questions.




