Implementing NetScaler 10 for Networking and Traffic Optimization 1Y0-A28 Exam

Transcription

1 Implementing NetScaler 10 for 1Y0-A28 Exam Preparation Guide January 2013 Citrix Education 2013 Citrix Systems, Inc. All rights reserved.

2 Notice Citrix Systems, Inc. (Citrix) makes no representations or warranties with respect to the content or use of this publication. Citrix specifically disclaims any expressed or implied warranties, merchantability, or fitness for any particular purpose. Citrix reserves the right to make any changes in specifications and other information contained in this publication without prior notice and without obligation to notify any person or entity of such revisions or changes. Copyright 2013 Citrix Systems, Inc. All Rights Reserved. No part of this publication may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording, or information storage and retrieval systems, for any purpose other than the purchaser s personal use, without express written permission of: Citrix Systems, Inc. 851 W. Cypress Creek Road Ft. Lauderdale, FL Marks The following marks are service marks, trademarks or registered trademarks of their respective owners in the United States and other countries. Mark Adobe, Reader, Acrobat, Flash, Macromedia iphone, ipad, Mac, OS X Citrix, Citrix XenApp, Citrix Secure Gateway, Citrix Access Gateway, Citrix NetScaler, Citrix Online Plug-in, Citrix Offline Plug-in, Merchandising Server, Client for Java, Citrix Offline Plug-in, Citrix Receiver, HDX, ICA, MyCitrix, Citrix Provisioning Services, XenDesktop, XenServer, Citrix Desktop Receiver, Citrix Receiver IBM, DB2 Active Directory, Microsoft, Microsoft Internet Explorer, Access, Excel, Outlook, Word, PowerPoint, Office, SQL Server, SQL Express, Windows, Windows Server, Windows Mobile, Windows 7, Windows XP, Visual J#, SharePoint, Windows Vista, Remote Desktop Services, Windows PowerShell, Windows Media Oracle Java UNIX Owner Adobe Systems, Inc. Apple, Inc. Citrix Systems, Inc. International Business Machines, Inc. Microsoft Corporation Oracle Corporation Sun Microsystems, Inc. The Open Group Citrix Education 2013 Citrix Systems, Inc. All rights reserved.

3 Disclaimer Author Item Development Team Subject Matter Experts This exam preparation guide is designed to provide candidates with necessary information about the exam including listing study resources and samples which enable candidates to assess the types of questions that may be asked during the Citrix certification beta exam. Please be aware that the content of this guide in no way ensures a passing score on the certification exam. Alejandra Garcia, Lead Measurement Specialist, Citrix Systems, Inc. Arnaud Pain, Senior Consultant, MTRC-Consulting Bas Dijkuizen, CTO, INISI b.v. Craig Pickford, Solutions Architect, Block Solutions Danny Van Dam, Architect, Atos Denis Gundarev, Senior Consultant, Entisys Solutions Henny Louwers, Senior Solution Specialist, Platani Netherlands BV Johansson, Director of Professional Services, ngenx Huesan Chan, Senior Learning Consultant, QA Jamie Lin, Senior IT Infrastructure Engineer, Savvis, A CenturyLink Company Jo Harder, Senior Network Architect, Compushare, Inc. Joel Donaldson, Senior Citrix Engineer, LPS Integration Juan Pablo Otalvaro, Cloud Orchestration Architect, O4it Inc Ramesh Kumar Boopathi, Software Services Specialist, Gulf Business Machines Robert Zehnder, Chief Technology Officer, Hodgson Consulting & Solutions, Ltd. Sharin Yeoh, Senior Solutions Engineer, Thales Australia Simon Barnes, Senior Consultant, Riverlite Ltd Stuart Souter, Independent Virtualisation Consultant, AptoTek Solutions Ltd Terry Chou, IT Manager at Trend Micro, Inc. Andrew Wood, Technical Architect, Gilwood CS Ltd. Arnaud Pain, Senior Consultant, MTRC-Consulting Bas Dijkuizen, CTO, INISI b.v. Bino Gopal, Senior Systems Engineer, Citrix Systems Craig Pickford, Solutions Architect, Block Solutions Danny Van Dam, Architect, Atos Dave Gunn, Owner, The Dave Gunn Group - LLC Denis Gundarev, Senior Consultant, Entisys Solutions Gregg Anderson, Citrix Solutions Architect, Champion Solutions Group Henny Louwers, Senior Solution Specialist, Platani Netherlands BV Johansson, Director of Professional Services, ngenx Huesan Chan, Senior Learning Consultant, QA Jamie Lin, Senior IT Infrastructure Engineer, Savvis, A CenturyLink Company Jo Harder, Senior Network Architect, Compushare, Inc. Joel Donaldson, Senior Citrix Engineer, LPS Integration John Smith, Cloud Architect, McKesson Corporation Juan Pablo Otalvaro, Cloud Orchestration Architect, O4it Inc Markus Darda, Owner, MD Consultancy Mike Nelson, Owner/Architect, Nelmedia Consulting Ramesh Kumar Boopathi, Software Services Specialist, Gulf Business Machines Richard Todd, Citrix Architect and Engineer, LC9 Robert Zehnder, Chief Technology Officer, Hodgson Consulting & Solutions, Ltd. Citrix Education 2013 Citrix Systems, Inc. All rights reserved.

4 Sharin Yeoh, Senior Solutions Engineer, Thales Australia Sandeep Mehta, Lead Architect, ResolveIT Consulting Simon Barnes, Senior Consultant, Riverlite Ltd Stuart Souter, Independent Virtualisation Consultant, AptoTek Solutions Ltd Terry Chou, IT Manager at Trend Micro, Inc. Tony Zhang, Independent Consultant, ZT Systems. Inc Citrix Education 2013 Citrix Systems, Inc. All rights reserved.

5 Table of Contents Implementing NetScaler 10 for... i 1Y0-A28 Exam... i 1 The Exam Purpose of the Preparation Guide and Exam Beta Testing an Exam Number of Questions Passing Score Time Limit Registration and Administration Certification Tracks Citrix Exam Retake Policies Commenting During Live Exam The Intended Audience Intended Audience Defining the Role being Tested Preparatory Recommendations for the Exam Introduction Recommended Knowledge and Skills Recommended Product Experience Recommended Course Exam Sections and Weights Introduction Section Titles and Weights Section Weights Relate to Questions on the Exam Exam Objectives and Resources for the Exam Introduction Resources Used to Develop the Exam Exam Objectives Appendix: Practice Citrix Education 2013 Citrix Systems, Inc. All rights reserved.

6 1 The Exam 1.1 Purpose of the Preparation Guide and Exam This guide provides a list of objectives and resources that will help candidates prepare for items on the 1Y0-A28 Implementing NetScaler 10 for exam. Candidates should read this guide carefully before attempting this exam. The A28 exam was written to certify that candidates at least had the minimum knowledge required by employers to perform the job that focuses on networking and traffic optimization with Citrix NetScaler. By passing this exam, candidates can show they have at least the basic knowledge needed to install, administer, and/or operate Citrix NetScaler 10 Enterprise Edition implementations and may include topics on Access Gateway. ever, to perform the job effectively, candidates should also ensure that they have sufficient hands-on experience. This exam does not test knowledge needed to perform server maintenance, advanced configurations, or advanced troubleshooting. It also does not test on features that are unique to NetScaler 10 Platinum Edition. 1.2 Beta Testing an Exam Citrix Education regularly beta tests the content of all high stakes certification exams. Once the questions are developed for an exam, Citrix Education releases them in a beta exam for FREE. Beta exams count toward Citrix Certification but candidates are only allowed to take them once. The Implementing NetScaler 10 for (A28) exam was beta-tested from November 19-December 17, A total of 234 candidates (38% from the Americas, 40% from EMEA, and 22% from APAC) took it and also completed a survey to determine how much experience they had with NetScaler 10. A professional then analyzed the exam and survey results to determine which questions should be kept in the final versions of the exam. This analysis provided the basis for a recommended passing score and time limits for the exam. Once the passing score was determined, beta candidates who obtained that score or higher, received a passing result on the exam. If you are interested in participating in future beta exams, please visit the Citrix Education SME Hub to create a profile and indicate that you are interested in taking beta exams. Citrix Education 2013 Citrix Systems, Inc. All rights reserved. 2

7 1.3 Number of Questions The A28 exam is a 70-question exam written in English. 1.4 Passing Score The passing score for this exam is 60%. 1.5 Time Limit Type of Candidate Time Limits Allowed Notes Native English 90 minutes Speakers Non-native English speakers who take exam in countries where English is a foreign language 90 minutes +30 minutes (time extension) Non-native English speakers who take exam in countries where English is NOT a foreign language 90 minutes +30 minutes Time extension granted automatically Must call Pearson VUE or register in person to explicitly request the time extension A $7 USD surcharge will be added to phone registrations. 1.6 Registration and Administration This exam is administered at Pearson VUE testing centers worldwide. To learn more about the rules and process of taking an exam, please visit the exam page on our website. Worldwide, visit the Pearson VUE website ( to locate a testing center in your area and register for an exam. To register in the United States and Canada, you may also register in person at any Pearson VUE testing center or call Note: A $7 USD surcharge will be added to phone registrations. 1.7 Certification Tracks The A28 exam is a requirement for the Citrix Certified Administrator (CCA) in NetScaler 10 track. This exam may also fulfill requirements for advanced certification tracks. For the most up-to-date certification information visit Citrix Education 2013 Citrix Systems, Inc. All rights reserved. 3

8 1.8 Citrix Exam Retake Policies If a candidate fails an exam on the first attempt, he or she must wait 24 hours from their original appointment time before they can register to retake the exam. If a candidate fails on a second attempt, and any attempt thereafter, he or she must wait 14 calendar days after a failed attempt to retake the exam. Beta exams may only be taken once. Citrix Education monitors retake activity for breaches of this policy. Breach of this policy can result in sanctions up to and including a temporary ban from taking Citrix exams and/or decertification. To learn more about the Citrix Education Exam policies, see this page on the Citrix Education website. All candidates of Citrix Certifications must agree and be bound to the Citrix Candidate Conduct Policy. For the most current copy of this policy please visit the candidate conduct page on the Citrix Training website. 1.9 Commenting During Live Exam Citrix Education is committed to continually monitoring and updating our exams as needed. As a practice, Citrix Education regularly reviews and revises exams even after closing the beta period. Comments typed into the exam interface during an exam are considered when making decisions about revising questions. Candidates are encouraged to use the commenting feature to provide feedback to Citrix Education. ever, candidates should be mindful of the time used to provide comments on an exam as it will be subtracted from the allocated time of the test. Candidates can refer to the time clock at any time to view and be cognizant of the test time remaining. Citrix Education 2013 Citrix Systems, Inc. All rights reserved. 4

9 2 The Intended Audience 2.1 Intended Audience The A28 exam is focused on those topics that were most important to those who perform the role that focuses on networking and traffic optimization with Citrix NetScaler. Citrix Education selected these topics based on feedback from subject matter experts (SMEs) who perform this role in the field. Those who serve in this role may hold various job titles such as: Network Administrators Network Engineers Citrix Administrators Operations engineer Systems Engineers /Systems Administrators Cloud Administrators/Engineers 2.2 Defining the Role being Tested Field experts discussed the duties of the role being tested during an analysis workshop referred to as a DACUM workshop. Depending on the job title, individuals in this role could have different responsibilities. The experts who participated in the DACUM, arrived at a consensus on which tasks were the most important for administrators and selected those as objectives for this test. Citrix Education 2013 Citrix Systems, Inc. All rights reserved. 5

10 3 Preparatory Recommendations for the Exam 3.1 Introduction Citrix Education recommends that prior to taking this exam candidates have the knowledge, skills and abilities required to install, administer and support an environment that contains at least two NetScaler devices. 3.2 Recommended Knowledge and Skills Specifically, candidates should have the following knowledge and skills prior to taking this exam: Intermediate knowledge of TCP/IP, HTTP protocols and understanding of the OSI model Experience with network devices (e.g. routers, switches), various networking protocols, and aspects of application and site architecture (e.g. DMZ, VLANS) Moderate exposure to UNIX (particularly BSD variants) Exposure to basic systems administration concepts, including logging, software upgrade procedures and high availability operations Familiarity with web server software (e.g. Apache, IIS, WebSphere) Familiar with Windows and Linux Server administration Basic knowledge of DNS, SSL, and compression concepts Understanding of concepts related to server load balancing and content switching Knowledge of network security threats and site protection concepts (e.g. firewalls, worms, DDoS attacks) Familiarity with regular expressions Knowledge of Active Directory Knowledge of virtualization Knowledge of application optimization Familiar with basic concepts of cloud computing Citrix Education 2013 Citrix Systems, Inc. All rights reserved. 6

11 3.3 Recommended Product Experience We recommend that candidates have about six months of experience with the following tasks in a NetScaler 10 environment: Assisting in architecting NetScaler environment for Enterprises Implementing NetScaler with networking in mind Installing and configuring production networks and network hardware Maintaining networking and security hardware and software Optimizing the performance of applications Managing high availability features Configuring and managing security modules of NetScaler Monitoring network Configuring load balancing Managing and configuring SSL Troubleshooting NetScaler device and configurations Managing network routing and protocols 3.4 Recommended Course Citrix Education recommends that candidates have hands-on experience with NetScaler 10 prior to taking this exam. One of the best ways to do this is by taking formal Citrix training courses. The following courses provide basic training on administrative tasks. CNS 205-2: Citrix NetScaler 10 Essentials and Networking (instructor-led training course or self-study) CNS-102-1W Citrix NetScaler 10 Overview (self-paced online training course) As with all Citrix exams, it is recommended that candidates get hands-on experience by working directly with the products covered on the exam. This includes setting up a NetScaler 10 environment with at least two NetScaler devices, multiple load balancing virtual servers, at two Web Interface sites, and using Access Gateway for some access scenarios. While this hands-on experience can be done on the job, Citrix Education official courses offer a safe and robust environment to learn these tasks. Thus they are one of the best ways to prepare for the exam. Citrix Education 2013 Citrix Systems, Inc. All rights reserved. 7

12 4 Exam Sections and Weights 4.1 Introduction 4.2 Section Titles and Weights The 1Y0-A28 exam is divided into nine (9) sections. Each section of the exam is weighted as follows, totaling 100%. Section Weight Configuring basic NetScaler settings 9% Configuring network-related settings of the 14% NetScaler implementation Securing the NetScaler implementation and traffic 11% Configuring Load Balancing on NetScaler for 11% backend servers and traffic Configuring SSL Offloading 9% Configuring acceleration and optimization of traffichandling 9% Customizing NetScaler traffic-handling 10% Monitoring of network-related activities and 7% performance Troubleshooting issues on NetScaler 20% Total 100% 4.3 Section Weights Relate to Questions on the Exam The section weights included in this guide are intended to help you in understanding how much of the exam is devoted to the topics listed. In fact, the percentages directly map to the number of questions on the exam. For example, if an exam has 60 questions, and Section 1 is weighted at 50%, then 30 of the questions on the exam will relate to Section 1 (60*50% = 30). Please be warned that section weights are NOT used to calculate your score. Scoring is far more complicated as exam questions may be given different weights based on their overall importance. Because some questions may have different point values assigned to them, section weights and exam scores do not always have a one to one correlation. For more information on how scoring works in Citrix exams read the blog The Scoring Secrets for Citrix Exams - Divulged. Citrix Education 2013 Citrix Systems, Inc. All rights reserved. 8

13 5 Exam Objectives and Resources for the Exam 5.1 Introduction All the questions on this exam were developed based on the tasks identified by SMEs and the aspect of the task identified by SMEs. For EXAMPLE, a task could be configuring GSLB and the aspect to be tested could be how to configure GSLB or it could be determine what scenario requires the configuration of GSLB. The exam tasks and testing aspects in this test are based on the feedback provided by field experts who perform the duties of a XenApp administrator on the job. Exam objectives can be found in section 5.3. In this guide we list all of the exam objectives and provide you with suggested reading material to help prepare for the test. In some cases, the testing aspects require that candidates have field experience including hands-on experience installing, administering, supporting and troubleshooting NetScaler 10 in production environments. By obtaining this experience, candidates are more likely to pass this exam. 5.2 Resources Used to Develop the Exam The following resources were used to develop this exam: Resource to Obtain* Citrix Knowledge Base Articles: Knowledge Base articles to Upgrade Software of the NetScaler are available at: Appliances in a High Availability Setup (CTX127455) to Set the Time on a NetScaler Appliance if the Date Command does not Work (CTX121356) NetScaler 10 Networking Guide (CTX132369) to Configure and Use the - denysslreneg Parameter (CTX123680) FAQ: Updating or Replacing an SSL Certificate (CTX109711) to Convert PFX Certificate to PEM Format for Use with Citrix Access Gateway (CTX106028) to Configure the Rate Limiting Feature of a NetScaler Appliance to Mitigate a DDoS Attack (CTX127917) to Take a Network Trace on a NetScaler or Citrix Access Gateway Enterprise Edition Appliance (CTX114018) to Troubleshoot Authentication with Aaad.debug (CTX114999) Citrix Education 2013 Citrix Systems, Inc. All rights reserved. 9

14 Troubleshooting Access Gateway Enterprise Edition/NetScaler License Issues (CTX116444) Data Collection Procedure for Troubleshooting NetScaler Issues (CTX109304) to Record a Network Packet Trace on a NetScaler Appliance (CTX128655) Citrix edocs: Forcing the Primary Node to Stay Primary Forcing the Secondary Node to Stay Secondary Configuring High Availability Nodes in Different Subnets Configuring the Communication Intervals Configuring Fail-Safe Mode Configuring Users and Groups Creating or Modifying a VLAN Configuring VLANs on a Single Subnet Configuring Multiple Untagged VLANS across Multiple Subnets Synchronizing Configuration Files in a High Availability Setup Monitoring the Extended ACL Renumbering the priority of Extended ACLs Choosing and Configuring Persistence Settings Viewing Persistence Sessions Configuring Persistence Groups Configuring Load Balancing in Direct Server Return Mode Configuring a Backup Load Balancing Virtual Server Redirecting Client Requests to an Alternate URL Configuring Access Gateway Settings with the Remote Access Wizard Converting the Format of SSL Certificates for Import or Export Specifying a TCP Buffer Size Configuring TCP Window Scaling Configuring TCP Profiles the Integrated Cache Works Improving Cache Performance edoc articles are available at: oddocs/topic/infocenter/ichow-to-use.html Citrix Education 2013 Citrix Systems, Inc. All rights reserved. 10

15 Monitoring TCP-based Applications Configuring Call Home Generating the Tar Archive of Configuration Data of NetScaler Devices Citrix NetScaler Administration Guide (CTX132357) Citrix NetScaler Traffic Management Guide (CTX132359) Citrix NetScaler Application Security Guide (CTX132366) Citrix NetScaler Command Reference Guide - Release 10 (CTX132384) Brief Troubleshooting Guide (CTX106727) Deliver Your Existing Applications to IPv6 Clients ( Product guides are available at: /product/nsad/v10/doc/ The Citrix Blog blogs are available at: *Links are subject to change Citrix Education 2013 Citrix Systems, Inc. All rights reserved. 11

16 5.3 Exam Objectives For all sections, some hands-on experience administering a Citrix NetScaler 10 Enterprise Edition implementation is recommended. In particular, candidates should have hands-on experience: Assisting in architecting NetScaler environment for Enterprises Implementing NetScaler with networking in mind Installing and configuring production networks and network hardware Maintaining networking and security hardware and software Optimizing the performance of applications Managing high availability features Configuring and managing security modules of NetScaler Monitoring network Configuring load balancing Managing and configuring SSL Troubleshooting NetScaler device and configurations Managing network routing and protocols Citrix Education 2013 Citrix Systems, Inc. All rights reserved. 12

17 Section Configuring basic NetScaler settings Configuring networkrelated settings of the NetScaler implementati on Securing the NetScaler implementati on and traffic Configuring Load Balancing on NetScaler for backend servers and traffic Configuring SSL Offloading Configuring acceleration and optimization EXAM PREPARATION GUIDE Implementing NetScaler 10 for Objectives Set initial Hostname, NetScaler IP, subnet and gateway [to do firmware updates on NetScaler Upgrade Firmware appliance] Set up high availability Change NetScaler root password and add users Configure date, time zone and Network Time Protocol (NTP) Obtain a new NetScaler license Enable feature and configure mode advance (Mac based forwarding (MBF) and edge configuration) Configure Interfaces Set up IPs, subnet IPs, IPv6 and configure management on Ips Set up vlans (Virtual Lans) and bind them to interfaces with IPs Set up/configure TCP profiles Set up/configure NAT/RNAT Set up basic routes Configure SSL options Set up authentication Disable unwanted protocols Configure Access Control List (ACL) Choose method of Load Balancing Configure persistence Configure GSLB (Global Server Load Balancing) Configure monitors Configure load balancing advanced tab Create, verify and import certificates and link certificate chains Create SSL virtual server (vserver) plus services Bind certificates to SSL virtual server Configure SSL parameters Configure SSL ciphers on virtual server (vserver) Enable and configure compression Set up TCP buffer and why Citrix Education 2013 Citrix Systems, Inc. All rights reserved. 13 When When/Why [to bind to an interface] When and Why When and Why and When and what [to consider for configuring these options] /When [to use which type of load balancing] /When [to use certain types of persistence] /When and When [to use what type of monitor] When and Why AND Why Why What [TCP buffer is], When and Why to set it up

18 of traffichandling Customizing NetScaler traffichandling Monitoring of networkrelated activities and performance Troubleshoot ing issues on NetScaler Enable and set up Caching Configure Rewrite/Responder/URL Transform Configure Content Switching Set up "filter" (under protection feature) (formerly content filtering) Enable rate limiting Configure HTTP callout Configure monitoring Set up ECV monitoring Configure SNMP Traps Monitor NetScaler traffic with AppFlow Capture traffic Troubleshoot Authentication, Authorization and Access (AAA) issues Troubleshoot licensing issues Show connection table and routes Read and interpret logs Troubleshoot High Availability (HA) Use "show techsupport" command Use telnet or monitors to check the ports Conduct packet tracing in GUI and CLI Troubleshoot traffic management issues with NetScaler Verify the network settings Determine the root cause of network failures Troubleshoot SSL, SSL Offload, SSL Bridge Troubleshoot policies What [to configure] and Why When Why Why When/Why/ When/Why When What [Appflow] is and Why [to use] What [does it mean] What [is causing the issue] AND to resolve issue What [info to collect] What [is causing the issue] Citrix Education 2013 Citrix Systems, Inc. All rights reserved. 14

19 6 Appendix: Practice Question 1 When performing the initial configuration from the command line, which set of commands is valid? A. set ns config IPAddress netmask add route set ns hostname ns add ns ip type SNIP B. add ns ip add route set ns hostname ns add ns ip type SNIP C. set ns config IPAddress netmask add route set ns hostname ns add ns ip type NSIP D. set ns config IPAddress netmask add route set ns hostname ns add ns ip type SNIP Answer: A Set initial Hostname, NetScaler IP, subnet and gateway Question 2 Scenario: A network engineer has connected interface 1/1 from a NetScaler MPX to a test network. The test network will be used for testing load balancing of an SSL application. What must the engineer do to ensure that if the interface goes down then high availability does not force a fail over? A. Enable LACP on interface 1/1. B. Enable INC mode on interface 1/1. C. Disable HA monitoring on interface 1/1. D. Bind a monitor to the virtual server and set the Reverse option. Answer: C Configure Interfaces Citrix Education 2013 Citrix Systems, Inc. All rights reserved. 15

20 Question 3 A network engineer is managing an environment that uses smart card with single sign-on configured on NetScaler Access Gateway to secure the ICA communications. could the engineer prevent users from receiving the second PIN prompt? A. Configure the virtual server and filter by certificate authentication policy. B. Configure the virtual server and disable client certificate authentication requirement. C. Configure session policy on the virtual server and disable client certificate authentication requirement. D. Configure the second virtual server for ICA SSL relay and disable client certificate authentication requirement. Answer: D Set up authentication Question 4 Scenario: A network engineer needs to create a new GSLB service for an HTTPS application on a server with an IP of The service will run in the GSLB site named London. Using the command-line interface, which command must the engineer run to add the GSLB service? A. add gslb site London B. add service GSLB SSL_TCP 443 C. add service SVC-GSLB-WEBSSL SSL 443 D. add gslb service SVC-GSLB-WEBSSL SSL 443 sitename London Answer: D Configure GSLB (Global Server Load Balancing) /When Citrix Education 2013 Citrix Systems, Inc. All rights reserved. 16

21 Question 5 Scenario: A NetScaler engineer has received an SSL Certificate from a public certificate authority and bound it to an external facing virtual server. On connecting to the virtual server from a web browser, users receive an error indicating the certificate is NOT trusted. What should the engineer do to resolve this issue? A. Regenerate the CSR. B. Restart the NetScaler. C. Convert the key format to PEM. D. Link the intermediate CA certificate. Answer: D Create, verify and import certificates and link certificate chains AND Why Question 6 A network engineer should configure rate limiting on a NetScaler system to mitigate against a attack. (Choose the correct option to complete the sentence.) A. DDoS B. SQL Injection C. Buffer Overflow D. Cross-side scripting Answer: A Configure HTTP callout Why Citrix Education 2013 Citrix Systems, Inc. All rights reserved. 17

22 Question 7 Scenario: To correctly monitor a web site and it s connection to the backend database, a network engineer has created an HTTP-ECV monitor type to look for a specific pattern. The engineer notices that intermittently the monitor is showing the back-end servers as DOWN even when they appear to be working. Why is this behavior occurring? A. The web site is using javascript and the monitor does not support javascript B. The monitor only inspects the first 24K bytes of the response body and the pattern occurs randomly in the result. C. The monitor only inspects the first 24K bytes of the full response and the pattern occurs randomly in the result. D. The monitor only inspects the first 100K bytes of the full response and the pattern occurs randomly in the result. E. The web site is using SSL and the engineer forgot to check the Secure button in the monitor configuration. Answers: B Set up ECV monitoring When/Why Question 8 Scenario: The hostname (US-NS1) in the Access Gateway Platform license file matches the hostname shown in the header of the GUI. ever, the license is missing on the License pane after restarting. Which file should be verified to ensure that the hostname entry is present? A. rc.conf B. ns.conf C. ntp.conf D. snmpd.conf Answer: A Troubleshoot licensing issues Citrix Education 2013 Citrix Systems, Inc. All rights reserved. 18

23 Question 9 A network engineer sees the output displayed below: VIP( :80:UP:WEIGHTEDRR): Hits( , 17/sec) Mbps(2.03) Pers(OFF) Err(0) Pkt(186/sec, 610 bytes) actsvc(4) DefPol(NONE) override(0) Conn: Clt(253, 1/sec, OE[252\]) Svr(3) S( :80:UP) Hits( , 4/sec, P[ , 0/sec\]) ATr(5) Mbps(1.02)BWlmt(100 kbits) RspTime( ms) Other: Pkt(36/sec, 712 bytes) Wt(10000) RHits(31555) Conn: CSvr(42, 0/sec) MCSvr(20) OE(16) RP(11) SQ(0) much traffic is being passed through the public IP? A. 100kbits B. 1.02Mbps C. 2.03Mbps D ms Answer: C Read and interpret logs What [does it mean] Question 10 A network engineer has configured monitoring for a RADIUS service group and notices that the RADIUS servers are discarding all packets required to monitor. In order to troubleshoot this issue, the engineer should check if the. (Choose the correct option to complete the sentence.) A. VIP address is in the RADIUS database B. NSIP address is in the RADIUS database C. SNIP address is in the RADIUS database D. RADIUS server sends a process_radius radius rejects error E. RADIUS server sends an access-reject response with code 3 Answers: C Troubleshoot traffic management issues with NetScaler Citrix Education 2013 Citrix Systems, Inc. All rights reserved. 19