1Y0-231 · Question #147
Which Citrix ADC monitor can a Citrix Administrator use to check the authentication service of the Active Directory (AD) domain controller?
The correct answer is A. A ping monitor with the IP address of the AD domain controller in the special parameters. Note: The provided answer key lists A as correct, but this appears to be an error in the question bank. A ping (ICMP) monitor only verifies network reachability - it cannot check whether the LDAP authentication service on an AD domain controller is actually functioning. Option…
Question
Which Citrix ADC monitor can a Citrix Administrator use to check the authentication service of the Active Directory (AD) domain controller?
Options
- AA ping monitor with the IP address of the AD domain controller in the special parameters
- BA TCP monitor with the LDAP Base DN configured in the basic parameters
- CAMYSQL-ECV monitor with the Base DN, Bind DN, Filter, Attribute, and Password parameters
- DAn LDAP monitor with the LDAP Script Name, Configured Base DN, Bind DN, Filter, Attribute, and
How the community answered
(46 responses)- A91% (42)
- B2% (1)
- C4% (2)
- D2% (1)
Explanation
Note: The provided answer key lists A as correct, but this appears to be an error in the question bank. A ping (ICMP) monitor only verifies network reachability - it cannot check whether the LDAP authentication service on an AD domain controller is actually functioning.
Option D is the technically correct answer. An LDAP monitor is specifically designed for this purpose: it performs an actual LDAP bind operation against the AD domain controller using parameters like Base DN, Bind DN, Filter, Attribute, and Password, confirming that the authentication service is alive and responding correctly - not just that the server is pingable.
Why the distractors are wrong:
- A (Ping): Only confirms the server responds to ICMP - the AD auth service could be down while ping still succeeds.
- B (TCP monitor with LDAP Base DN): A TCP monitor checks port connectivity only; Base DN is an LDAP-specific parameter meaningless to a TCP check.
- C (AMYSQL-ECV): This is a MySQL Extended Content Verification monitor, completely unrelated to Active Directory.
Memory tip: Think "match the protocol to the service" - AD uses LDAP for authentication, so use the LDAP monitor to verify it. If you see options involving Base DN, Bind DN, and Filter together, that's your LDAP monitor signature for AD.
If your exam source consistently marks A as correct, flag it - it's likely a bad question.
Topics
Community Discussion
No community discussion yet for this question.