1Y0-301 · Question #43
Scenario: A Citrix Engineer needs to configure load balancing for two StoreFront servers. Traffic must be encrypted between client machines and the StoreFront servers and the health of the stores…
The correct answer is A. Create an SSL service group containing the StoreFront servers listening on port 443. C. Create and configure a new monitor with type=STOREFRONT and select the Secure checkbox. To load balance StoreFront with end-to-end SSL encryption and store health monitoring, the engineer must create an SSL service group on port 443 and a STOREFRONT monitor with the Secure option enabled.
Question
Scenario: A Citrix Engineer needs to configure load balancing for two StoreFront servers. Traffic must be encrypted between client machines and the StoreFront servers and the health of the stores must be monitored. The StoreFront servers are already configured properly using the default ports for encrypted traffic. Which two steps does the engineer need to take before creating the load-balancing virtual server to use traffic encryption between client machines and the StoreFront servers? (Choose two.)
Options
- ACreate an SSL service group containing the StoreFront servers listening on port 443.
- BCreate an SSL_TCP service group containing the StoreFront servers listening on port 443.
- CCreate and configure a new monitor with type=STOREFRONT and select the Secure checkbox.
- DCreate an SSL_DIAMETER service group containing the StoreFront servers listening on port 443.
- ECreate and configure a new monitor with type=STOREFRONT and select the IP Tunnel
- FCreate and configure a new monitor with type=CITRIX-AG and select the LRTM (Least Response
How the community answered
(16 responses)- A50% (8)
- B13% (2)
- D6% (1)
- E25% (4)
- F6% (1)
Why each option
To load balance StoreFront with end-to-end SSL encryption and store health monitoring, the engineer must create an SSL service group on port 443 and a STOREFRONT monitor with the Secure option enabled.
An SSL service group configured with the StoreFront servers on port 443 instructs Citrix ADC to use SSL/TLS when forwarding traffic to the back-end StoreFront servers, providing the required encryption between client machines and StoreFront.
SSL_TCP service groups handle raw SSL-wrapped TCP streams and are not appropriate for HTTP-based StoreFront traffic, which requires an SSL (HTTP over TLS) service group instead.
The built-in STOREFRONT monitor type checks the availability of specific Citrix stores; selecting the Secure checkbox tells the monitor to communicate with the StoreFront servers over HTTPS (port 443), matching the servers' default encrypted configuration.
SSL_DIAMETER is a protocol-specific service group type for the Diameter AAA protocol over SSL and has no applicability to StoreFront web-based traffic.
The IP Tunnel option on a monitor is used for monitoring through an IP tunnel and is not a relevant setting for STOREFRONT monitor health checks over HTTPS.
The CITRIX-AG monitor type is designed for Citrix Access Gateway endpoints, not StoreFront stores, so it would not correctly validate StoreFront store health.
Concept tested: Citrix ADC SSL load balancing and StoreFront health monitoring
Source: https://docs.citrix.com/en-us/citrix-adc/current-release/load-balancing/load-balancing-builtin-monitors/monitor-storefront.html
Topics
Community Discussion
No community discussion yet for this question.