[2022年07月]更新の1Y0-440問題集には100%厳密検証された問題と解答で合格保証もしくは全額返金 [Q66-Q81]

質問 66
Which three parameters must a Citrix Architect designate when creating a new session policy? (Choose three.)

質問 67
Scenario: A Citrix Architect needs to deploy SAML integration between NetScaler (Identity Provider) and ShareFile (Service Provider). The design requirements for SAML setup are as follows:
* NetScaler must be deployed as the Identity Provider (IDP).
* ShareFile server must be deployed as the SAML Service Provider (SP).
* The users in domain workspacelab.com must be able to perform Single Sign-on to ShareFile after authenticating at the NetScaler.
* The User ID must be UserPrincipalName.
* The User ID and Password must be evaluated by NetScaler against the Active Directory servers SFO-ADS-001 and SFO-ADS-002.
* After successful authentication, NetScaler creates a SAML Assertion and passes it back to ShareFile.
* Single Sign-on must be performed.
* SHA 1 algorithm must be utilized.
The verification environment details are as follows:
* Domain Name: workspacelab.com
* NetScaler AAA virtual server URL https://auth.workspacelab.com
* ShareFile URL https://sharefile.workspacelab.com
Which SAML IDP action will meet the design requirements?

質問 68
Scenario: A Citrix Architect has configured two MPX devices in high availability mode with version
12.0.53.13 nc. After a discussion with the security team, the architect enabled the Application Firewall feature for additional protection.
In the initial deployment phase, the following security features were enabled:
* IP address reputation
* HTML SQL injection check
* Start URL
* HTML Cross-site scripting
* Form-field consistency
After deployment in pre-production, the team identifies the following additional security features and changes as further requirements:
* Application Firewall should retain the response of form field in its memory When a client submits the form in the next request. Application Firewall should check for inconsistency in the request before sending it to the web server
* All the requests dropped by Application Firewall should receive a pre-configured HTML error page with appropriate information.
* The Application Firewall profile should be able to handle the data from the RSS feed and an ATOM-based site.
Click the Exhibit button to view an excerpt of the existing configuration.

What should the architect do to meet these requirements?

質問 69
Scenario: A Citrix Architect needs to assess an existing NetScaler configuration. The customer recently found that certain user groups were receiving access to an internal web server with an authorization configuration that does NOT align with the designed security requirements.
Click the Exhibit button view the configured authorization settings for the web server.

Which item should the architect change or remove to align the authorization configuration with the security requirements of the organization?

質問 70
Scenario: A Citrix Architect needs to design a hybrid XenApp and XenApp and XenDesktop environment which will include Citrix Cloud as well as resource locations in on-premises datacenter and Microsoft Azure.
Organizational details and requirements are as follows:
* Active XenApp and XenDesktop Service subscription
* No existing NetScaler deployment
* About 3,000 remote users are expected to regularly access the environment
* Multi-factor authentication should be used for all external connections
* Solution must provide load balancing for backend application servers
* Load-balancing services must be in Location B
Click the Exhibit button to view the conceptual environment architecture.

The architect should use ________ in Location A, and should use _________ in Location
B. (Choose the correct option to complete the sentence.)

質問 71
Scenario: A Citrix Architect needs to design a new NetScaler Gateway deployment to provide secure RDP access to backend Windows machines.
Click the Exhibit button to view additional requirements collected by the architect during the design discussions.

To meet the customer requirements, the architect should deploy the RDP proxy through _______, using a
_________ solution. (Choose the correct option to complete the sentence.)

質問 72
Which two NetScaler cookies indicate the validity of the Authentication, Authorization and Accounting (AAA) session for users? (Choose two.)

質問 73
Which parameter must a Citrix Architect configure to ensure that HDX Proxy Connection terminates upon AAA Session TimeOut?

質問 74
Scenario: A Citrix Architect needs to assess an existing on-premises NetScaler deployment which includes Advanced Endpoint Analysis scans. During a previous security audit, the team discovered that certain endpoint devices were able to perform unauthorized actions despite NOT meeting pre-established criteria.
The issue was isolated to several endpoint analysis (EPA) scan settings.
Click the Exhibit button to view the endpoint security requirements and configured EPA policy settings.

Which setting is preventing the security requirements of the organization from being met?

質問 75
Scenario: A Citrix Architect needs to assess an existing on-premises NetScaler deployment which includes Advanced Endpoint Analysis scans. During a previous security audit, the team discovered that certain endpoint devices were able to perform unauthorized actions despite NOT meeting pre-established criteria.
The issue was isolated to several endpoint analysis (EPA) scan settings.
Click the Exhibit button to view the endpoint security requirements and configured EPA policy settings.

Which setting is preventing the security requirements of the organization from being met?

質問 76
Scenario: A Citrix Architect has configured NetScaler Gateway integration with a XenApp environment to provide access to users from two domains: vendorlab.com and workslab.com. The Authentication method used is LDAP.
Which two steps are required to achieve Single Sign-on StoreFront using a single store? (Choose two.)

質問 77
Scenario: The Workspacelab team has configured their NetScaler Management and Analytics (NMAS) environment. A Citrix Architect needs to log on to the NMAS to check the settings.
Which two authentication methods are supported to meet this requirement? (Choose two.)

質問 78
Which statement is applicable to Citrix Gateway split tunneling?

質問 79
Scenario: A Citrix Architect has deployed an authentication setup with a ShareFile load-balancing virtual server. The NetScaler is configured as the Service Provider and Portalguard server is utilized as the SAML Identity Provider. While performing the functional testing, the architect finds that after the users enter their credentials on the logon page provided by Portalguard, they get redirected back to the Netscaler Gateway page at uri /cgi/samlauth/ and receive the following error.
“SAML Assertion verification failed; Please contact your administrator.” The events in the /var/log/ns.log at the time of this issue are as follows:
Feb 23 20:35:21 <local0.err> 10.148.138.5 23/02/2018:20:35:21 GMT vorsb1 0-PPE-0 : default AAATM Message 3225369 0 : “SAML : ParseAssertion:
parsed attribute NameID, value is nameid”
Feb 23 20:35:21 <local0.err> 10.148.138.5 23/02/2018:20:35:21 GMT vorsb1 0-PPE-0 : default AAATM Message 3225370 0 : “SAML verify digest:
algorithms differ, expected SHA1 found SHA256″
Feb 23 20:35:44 <local0.err> 10.148.138.5 23/02/2018:20:35:44 GMT vorsb1 0-PPE-0 : default AAATM Message 3225373 0 : “SAML : ParseAssertion:
parsed attribute NameID, value is named
Feb 23 20:35:44 <local0.err> 10.148.138.5 23/02/2018:20:35:44 GMT vorsb1 0-PPE-0 : default AAATM Message 3225374 0 : “SAML verify digest:
algorithms differ, expected SHA1 found SHA256″
Feb 23 20:37:55 <local0.err> 10.148.138.5 23/02/2018:20:37:55 GMT vorsb1 0-PPE-0 : default AAATM Message 3225378 0 : “SAML : ParseAssertion:
parsed attribute NameID, value is nameid”
Feb 23 20:37:55 <local0.err> 10.148.138.5 23/02/2018:20:37:55 GMT vorsb1 0-PPE-0 : default AAATM Message 3225379 0 : “SAML verify digest:
algorithms differ, expected SHA1 found SHA256″
What should the architect change in the SAML action to resolve this issue?

質問 80
Scenario: A Citrix Architect needs to design a new multi-datacenter NetScaler deployment. The customer wants NetScaler to provide access to various backend resources by using Global Server Load Balancing (GSLB) in an Active-Active deployment.
Click the Exhibit button to view additional requirements identified by the architect.

Which GSLB algorithm or method should the architect use for the deployment, based on the stated requirements?

質問 81
Which two options should a Citrix Architect evaluate during a capabilities assessment? (Choose two.)