1Y0-240.exam.67q. Number: 1Y0-240 Passing Score: 800 Time Limit: 120 min File Version: 1. Citrix 1Y

Transcription

1 1Y0-240.exam.67q Number: 1Y0-240 Passing Score: 800 Time Limit: 120 min File Version: 1 Citrix 1Y0-240 Citrix NetScaler Essentials and Traffic Management

2 Exam A QUESTION 1 Scenario: A Citrix Administrator has configured the rewrite action as follows: add rewrite action sync_date replace http.res.date sys.time What is the correct way to interpret this rewrite action? A. The rewrite action replaces the Date header in the http response with the GMT time stamp. B. The rewrite action replaces the Date header in the http response with the NetScaler system time in a conventional date format. C. The rewrite action is invalid, as system time CANNOT be referenced in the system policy. D. The rewrite action replaces the NetScaler system time with the Date header in a conventional date format. Correct Answer: C QUESTION 2 Users are experiencing resets from the Intranet server website, which is load-balanced through the NetScaler. Which NetScaler tool can a Citrix Administrator use to troubleshoot the reset issue? A. Take a packet trace with nstrace and analyze with WireShark. B. View the new nslog from the command-line interface (CLI) to look for packet resets from the NetScaler. C. Look in the Event Viewer for packet resets from the NetScaler. D. Use the nslog to look for packet resets on the NetScaler. Correct Answer: B

3 QUESTION 3 Which policy will allow a Citrix Administrator to modify all the URLs in the response body from to in an SSL offload deployment? A. add rewrite action Act1 replace_all HTTP.RES.BODY(200000) \ " pattern add rewrite policy Pol1 true Act1 NOREWRITE B. add rewrite action Act1 replace_all HTTP.RES.BODY(200000) \ " pattern add rewrite policy Pol1 true Act1 NOREWRITE C. add rewrite action Act1 replace_all HTTP.RES.BODY(200000) \ " pattern add rewrite policy Pol1 true Act1 NOREWRITE D. add rewrite action Act1 replace_all HTTP.RES.BODY(200000) \ " pattern add rewrite policy Pol1 true Act1 NOREWRITE Correct Answer: A QUESTION 4 Scenario: A Citrix Administrator notices user sessions are disconnecting and reconnecting more often this week than last week, signaling a problem. The administrator troubleshoots this issue and prepares to resolve it using persistence. However, the following consideration apply in the environment: It is a multi-proxy environment behind the NetScaler. Use Source IP (USIP) mode is enabled and applied to the services. The session timeout is very short. All users connect from the same location. The administrator can use persistence based on the setting to resolve this issue. (Choose the correct option to complete the sentence.) A. Subnet IP B. HTTP Cookies C. Proximity D. SSL Session IDs

4 Correct Answer: A QUESTION 5 Scenario: A user is attempting to access a web server which is load balanced by the NetScaler using HTTPS. The user received the following message: SSL/TLS error: You have not chosen to trust Certificate Authority the issuer of the server s security certificate. What can a Citrix Administrator do to prevent users from viewing this message? A. Ensure that the intermediate Certificate is linked to the Root Certificate. B. Ensure that the user has the Server Certificate installed. C. Ensure that the user has the Certificate s Public key. D. Ensure that the intermediate Certificate is linked to the Server Certificate. Correct Answer: A QUESTION 6 View the Exhibit.

5 A Citrix Administrator has configured the commands using the command-line interface. Click on the Exhibit button to view the screenshots of the command-line interface. What will be the effect of the rewrite policy, based on the exhibit? A. HTTP Header SSL_parameter: will be inserted in every RESPONSE. B. HTTP Header SSL_parameter: will be inserted in every REQUEST. C. HTTP Header SSL_parameter: C=IN, ST=KA, O=Mylab, will be inserted in every RESPONSE. D. HTTP Header SSL_parameter: C=IN, ST=KA, O=Mylab, will be inserted in every REQUEST. Correct Answer: A

6 QUESTION 7 Which command should a Citrix Administrator use to configure a Content Switching virtual server for implementing the Secure Web Gateway in the transparent proxy mode? A. add cs vserver swgvs PROXY Authn401 on authnvsname explicit-auth-vs B. add cs vserver swgvs PROXY ** Authn401 on authnvsname explicit-auth-vs C. add cs vserver swgvs PROXY Authn401 on authnvsname transparent-auth-vs D. add cs vserver swgvs PROXY * 21 Authn401 on authnvsname transparent-auth-vs Correct Answer: C QUESTION 8 Scenario: A Citrix Administrator has configured a Responder policy as follows: add responder action Redirect_Act respond with DIAMETER.NEW_REDIRECT(\ aaa://host.example.com\ ) add responder policy Redirect_Pol diameter.req.avp(264).value.eq(\ host1.example.net\ ) Redirect_Act bind lb vserver vs1 policyname Redirect_Pol priority 10 type REQUEST What will be the effect of this configuration? A. Response originated from host.example.net will be redirected to host1.example.com. B. Request originated from host.example.net will be redirected to host1.example.com. C. Response originated from host1.example.net will be redirected to host.example.com. D. Request originated from host1.example.net will be redirected to host.example.com.

7 Correct Answer: B QUESTION 9 Scenario: A Citrix Administrator of a Linux environment needs to load-balance the web servers in an environment. However, due to budget constraints, the administrator is NOT able to implement a full-scale solution. What can the administrator do to load-balance the web servers in this scenario? A. Purchase a NetScaler SDX. B. Install a NetScaler CPX. C. Purchase a NetScaler MPX. D. Install NetScaler VPX. Correct Answer: B QUESTION 10 Which mode does a Citrix Administrator need to configure in order to allow the NetScaler to forward any packets that are NOT destined for an IP address that is NOT configured on NetScaler? A. USIP B. Layer 3 Mode C. Layer 2 Mode D. MBF Correct Answer: D

8 QUESTION 11 Which NetScaler mode is commonly referred to as inline mode? A. One-Arm Mode B. MAC-based Forwarding C. Two-Arm Mode D. Use Source IP (USIP) Correct Answer: C QUESTION 12 A Citrix Administrator needs to utilize the client IP address as the source IP address for the NetScaler to server connections. Which mode on the NetScaler will the administrator utilize to meet this requirement? A. Layer 2 Mode B. USNIP C. Layer 3 Mode D. USIP Correct Answer: D QUESTION 13 Scenario: A NetScaler appliance is having intermittent issues. A Citrix Administrator is unable to identify the root cause and fix them. The administrator opened a Support ticket and the Engineer assigned to the case requested all the logs and configuration information from the NetScaler. Which technical support tool can the administrator use to gather all the information on the NetScaler to send to the Support Engineer?

9 A. Batch Configuration B. Start New Trace C. Get Back Trace D. Generate Support File Correct Answer: C QUESTION 14 Scenario: A Citrix Administrator is configuring SNMP management on the NetScaler to receive alerts when something fails. The administrator was confident that the Manager, Alarms and SNMP Traps were configured correctly. The following week, there was a NetScaler-related outage and the administrator did NOT get any alerts. What could be the reason for the SNMP alert failure? A. The Community Name was NOT configured on the NetScaler SNMP Trap Destination settings. B. The NetScaler only has Standard licensing. C. The NetScaler is configured for SNMP version 1. D. The NetScaler Application Firewall is blocking the alerts from going out. Correct Answer: A QUESTION 15 What is a recommended practice for managing a NetScaler high availability (HA) pair to ensure that management changes are always made on the Primary NetScaler?

10 A. Connect to both NetScalers to see which one is the Primary. B. Enable Management Access to a SNIP. C. Enable Management Access on the Cluster IP (CLIP) address. D. Connect to the shared HA NSIP. Correct Answer: D QUESTION 16 View the Exhibit.

11 A Citrix Administrator has noticed that the users trying to access are redirected to CAS_vserver_www instead of CAS_vserver_owa. Click on the Exhibit button to view the screenshot of the command-line interface. What should the administrator change to resolve this issue? A. Unbind cs vserver CAS_vserver_cs lbvserver CAS_vserver_www B. Bind cs vserver CAS_vserver_cs policyname CAS_policy_cs_owa priority 120 C. Bind cs vserver CAS_vserver_cs policyname CAS_policy_cs_owa priority 80

12 D. Add cs policy CAS_policy_cs_owa rule HTTP.REQ.URL.SET_TEXT_MODE(IGNORECASE).CONTAINS(\ /owa\ ) action CAS_action_cs_owa Correct Answer: A QUESTION 17 Which feature can a Citrix Administrator use to create a consistent set of front-end SSL parameters across multiple SSL virtual servers? A. SSL Policy B. SSL Profile C. SSL Bridge D. SSL Offload Correct Answer: B QUESTION 18 Scenario: A Citrix Administrator manages an environment that has multiple websites running through a NetScaler MPX The NetScaler meets the needs of the environment throughout the year, except in December, when the capacity doubles. The administrator needs to handle this increased web traffic with a temporary, cost-effective solution. Which action should the administrator recommend in order to handle the increased web traffic? A. Purchase a license to upgrade the MPX 5550 to a MPX B. Purchase a BurstPack License. C. Purchase Universal License. D. Purchase NetScaler Gateway Platform License. Correct Answer: B

13 QUESTION 19 Which two configurations can a Citrix Administrator use to block all the post requests that are larger than 10,000 bytes in order to protect the environment against HashDoS attacks? (Choose two.) A. add policy expression expr_hashdos_prevention http.req.method.eq(\ POST\ ) && http.req.content_length.gt(10000) add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP bind responder global pol_resp_hashdos_prevention 70 END type REQ_OVERRIDE B. add policy expression expr_hashdos_prevention http.req.method.eq(\ POST\ ) && http.req.content_length.gt(10000) add rewrite policy drop_rewrite expr_hashdos_prevention DROP bind rewrite global drop_rewrite 100 END type REQ_OVERRIDE C. add policy expression expr_hashdos_prevention http.req.method.eq(\ POST\ ) http.req.content_length.gt(10000) add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP bind responder global pol_resp_hashdos_prevention 70 END type REQ_OVERRIDE D. add policy expression expr_hashdos_prevention http.req.method.eq(\ POST\ ) http.req.content_length.gt(10000) add rewrite policy drop_rewrite expr_hashdos_prevention DROP bind rewrite global drop_rewrite 100 END type REQ_OVERRIDE Correct Answer: AC QUESTION 20 After being audited, a Citrix Administrator was notified that additional enhancements should be made of the virtual servers. Which two options can the administrator take to make the additional enhancements? (Choose two.) A. Enable RC4 cipher suite B. Create SHA1 key C. Enable TLSv1.2 D. Disable SSLv3 Correct Answer: BC

14 QUESTION 21 Scenario: A Citrix Administrator is running applications on thousands of load-balanced backend servers in a large infrastructure. It is difficult to track and troubleshoot problems due to the large volume of traffic received. Which feature of NetScaler Management and Analytics System (NetScaler MAS) can the administrator configure to monitor and troubleshoot in detail for an environment of this size? A. AppFlow Analytics B. Advanced Analytics with Telemetry Node installed C. Application Performance Analytics D. Application Security Analytics Correct Answer: B QUESTION 22 A user needs to resolve the domain training.citrix.com, and the information is NOT available in resolver cache and Local Domain Name Server (DNS). Where will the request be forwarded next? A. Root server B. Authoritative Name server C. Top-level Domain server D. Second-level Domain server Correct Answer: A

15 QUESTION 23 View the Exhibit. A Citrix Administrator has implemented the HTTP Callout. Click on the Exhibit button to view the screenshot of the command-line interface. Which part of the configuration is responsible for triggering the call to HTTP Callout server? A. parameters cip(client.ip.src) B. sys.http_callout(mycallout1) C. urlstemexpr \ /cgi-bin/check_clnt_from_database.pl\ D. headers Request( Callout Request ) Correct Answer: D

16 QUESTION 24 A Citrix Administrator needs to configure the Lights Out Management (LOM) port. Which statement is applicable to LOM? A. LOM is accessed using Command-Line Interface (CLI). B. LOM IP address should be in the same subnet as NSIP. C. LOM firmware is included in the NetScaler upgrade package. D. LOM port can be used to remotely monitor and manage the appliance. Correct Answer: A QUESTION 25 POLICY 1: add rewrite action ACT_1 corrupt_http_header Accept-Encoding add rewrite policy POL_1 HTTP.REQ.IS_VALID ACT_1 POLICY 2: add rewrite action ACT_2 insert_http_header Accept-Encoding \ identity\ add rewrite policy POL_2 HTTP.REQ.IS_VALID ACT_2 How can a Citrix Administrator bind the rewrite policies to the LB vserver lb_vsrv such that POL_2 is evaluated after POL_1 is evaluated successfully? A. bind lb vserver lb_vsrv policyname POL_1 priority 110 gotopriorityexpression NEXT type REQUEST bind lb vserver lb_vsrv policyname POL_2 priority 100 gotopriorityexpression END type REQUEST B. bind lb vserver lb_vsrv policyname POL_1 priority 90 type REQUEST bind lb vserver lb_vsrv policyname POL_2 priority 100 type REQUEST C. bind lb vserver lb_vsrv policyname POL_1 priority 90 gotopriorityexpression NEXT type REQUEST bind lb vserver lb_vsrv policyname POL_2 priority 100 gotopriorityexpression END type REQUEST D. bind lb vserver lb_vsrv policyname POL_1 priority 90 gotopriorityexpression END type REQUEST bind lb vserver lb_vsrv policyname POL_2 priority 80 gotopriorityexpression NEXT type REQUEST

17 Correct Answer: C QUESTION 26 Which VLAN(S) will be bound to an interface, if VLAN 20 is bound to the interface as tagged in an environment where NetScaler is configured with the default settings? A. VLAN 20 untagged only B. VLAN 1 tagged, VLAN 20 tagged C. VLAN 1 untagged, VLAN 20 tagged D. VLAN 20 tagged only Correct Answer: D QUESTION 27 Which two options should a Citrix Administrator consider when adding a secondary device in a high availability (HA) pair? (Choose two.) A. Configure the HA status of the Primary Node as STAYPRIMARY. B. HA Monitoring should be disabled on all the unused interfaces. C. Both the devices should have different SNIP addresses. D. The nsroot password should be the same on both nodes. E. The Independent Network Configuration (INC) mode should be enabled. Correct Answer: AE

18 QUESTION 28 Scenario: External users are currently experiencing delays while accessing XenApp and XenDesktop through the NetScaler. A Citrix Administrator needs to monitor the ICA connections to gather the performance information from the NetScaler Management and Analytics System (MAS). Which two tools can the administrator use to gather information about WAN Latency, DC Latency and Host Delay? (Choose two.) A. HDX Insight B. Gateway Insight C. Web Insight D. TCP Insight Correct Answer: AC QUESTION 29 Scenario: A Citrix Administrator has configured the following Access Control List (ACL) to block traffic from the IP address add simpleacl rule1 DENY srcip A week later, the administrator found that the ACL is no longer present on the NetScaler. What could be the reason for this? A. The administrator did NOT run the apply ACL command. B. The NetScaler has been restarted without saving the configurations. C. The Simple ACLs remain active for only 600 seconds. D. The Simple ACLs remain active for only 60 seconds. Correct Answer: A

19 QUESTION 30 Scenario: A Citrix Administrator has configured an Authentication, Authorization, and Auditing (AAA) action policy to allow users access through the NetScaler. The administrator bound the policy to a specific virtual server. Which policy expression will allow all users access through the virtual server? A. ns_disallow B. ns_false C. ns_allow D. ns_true Correct Answer: C QUESTION 31 View the Exhibit. A Citrix Administrator has executed the commands in the screenshot on the NetScaler using the command-line interface. Click on the Exhibit button to view the screenshot of the command-line interface.

20 Which two replacements will be the outcome of executing these commands? (Choose two.) A. will be replaced by in the HTTP RESPONSE B. will be replaced by in the HTTP RESPONSE C. will be replaced by in the HTTP REQUEST D. will be replaced by in the HTTP REQUEST Correct Answer: BD QUESTION 32 Scenario: A Citrix Administrator needs to add 10 new web servers to an existing server farm. The new servers are configured to serve the same applications and connections and are twice the capacity of the existing servers. The administrator wants to ensure that they are being fully utilized. Currently in the environment, the default load-balancing method is being used. To ensure that only the 10 new servers are receiving twice the connections of the old servers without changing the load balancing to the rest of the environment, the administrator needs to add a weight of to the services attached to the servers. (Choose the correct option to complete the sentence.) A. 50; new B. 50; old C. 2; new D. 2; old Correct Answer: C QUESTION 33 Scenario: A Citrix Administrator is executing the following commands on the NetScaler: add policy dataset Admin_group ipv4 bind policy dataset Admin_group index 11

21 bind policy dataset Admin_group index 12 bind policy dataset Admin_group index 13 add responder policy POL_1!(CLIENT.IP.SRC.TYPECAST_TEXT_T.CONTAINS_ANY(\ Admin_group\ )) RESET bind lb vserver ln_vsrv_www policyname POL_1 priority 100 gotopriorityexpression END type REQUEST What will be the effect of these commands? A. All the traffic from users with a source IP address of , , or will be blocked through the NetScaler. B. Only the users with a source IP address of , , or will be allowed to connect to vserver lb_vsrv_www. C. Only the users with a source IP address of , , or will be blocked when attempting to connect to vserver lb_vsrv_www. D. Only the users with a source IP address of or will be allowed to connect to the virtual server. Correct Answer: B QUESTION 34 Which three statements are true when comparing a Simple Access Control List (ACL) to an Extended ACL? (Choose three.) A. Simple ACLs can be modified. B. Extended ACLs have priorities. C. Simple ACLs apply first. D. Extended ACLs apply first. E. Simple ACLs are based on the Source IP address only. F. Simple ACLs can bridge traffic. G. Simple ACLs can be based on the Source and Destination IP address. Correct Answer: BCE

22 QUESTION 35 Scenario: A Citrix Administrator manages an environment that has a NetScaler high availability (HA) pair running on two MPX appliances. The administrator notices that the state of the Secondary NetScaler is Unknown and moves the Secondary NetScaler to a new switch as a result. Also, the administrator captured a packet trace on both NetScalers. Both sent traffic on secure port 3009 and were routing back and forth to each other. What is causing the Secondary state to be Unknown? A. The firewall is blocking communication between the switches. B. The administrator made both NetScalers Primary. C. The Secondary NetScaler CANNOT communicate in HA when moved to a new switch. D. The remote procedure call (RPC) nodes are NOT configured correctly. Correct Answer: A QUESTION 36 Which three authentication types can a Citrix Administrator use for NetScaler AAA dual-factor authentication? (Choose three.) A. TACACS+ B. RADIUS C. ADFS D. LINUX E. LDAP Correct Answer: ABE

23 QUESTION 37 Scenario: A Citrix Administrator has configured an HTTP load-balancing virtual server with Least Response Time as the load-balancing algorithm. The administrator notice that requests to the virtual server appear to be using the Round Robin load-balancing algorithm. What could be causing the virtual server to use Round Robin load-balancing algorithm? A. The services that are bound to the HTTP virtual server are using the PING monitor. B. The virtual server is in startup round robin mode. C. Least Response Time CANNOT be used as a load-balancing algorithm on an HTTP virtual server. D. The NetScaler configuration has NOT been saved yet. Correct Answer: B QUESTION 38 Scenario: A NetScaler is configured with the following modes: MBF USIP USNIP Layer 3 mode A Citrix Administrator configured a new router and now requires some of the incoming and outgoing traffic to take different paths through the new router. However, the administrator notices that this is failing and takes a network trace. After a short monitoring period, the administrator notices that the packets are still NOT getting to the new router from the NetScaler. Which mode should the administrator disable on the NetScaler to facilitate the addition of the new router and successfully route the packets? A. Layer 3 mode B. USIP C. MAC-based Forwarding D. USNIP Correct Answer: B

24 QUESTION 39 A Citrix Administrator notices that the NetScaler is sending the IP addresses of all the active services in the DNS response. The administrator can use the set gslb vserver<name> parameter to avoid this behavior. (Choose the correct option to complete the sentence.) A. EDR DISABLED B. EDR ENABLED C. MIR ENABLED D. MIR DISABLED Correct Answer: D QUESTION 40 A Citrix Administrator needs to configure a rate limiting policy for the DNS requests to a threshold of 1000 DNS requests per second. Which set of commands does the administrator need to run to correctly configure the rate limiting policy? A. add stream selector DNSSelector1 client.udp.dns.domain add ns limitidentifier DNSLimitIdentifier1 threshold 5 timeslice 1000 selectorname DNSSelector1 add dns policy DNSLimitPolicy1 sys.check_limit(\ DNSLimitIdentifier1\ ) preferredlocation North America.US.TX.Dallas.. bind dns global DNSLimitPolicy1 5 B. add stream selector DNSSelector1 client.udp.dns.domain add ns limitidentifier DNSLimitIdentifier1 threshold 5 timeslice 1000 selectorname DNSSelector1

25 add dns policy DNSLimitPolicy1 sys.check_limit(\ DNSLimitIdentifier1\ ) preferredlocation North America.US.TX.Dallas.. C. add stream selector DNSSelector1 client.udp.dns.domain add ns limitidentifier DNSLimitIdentifier1 threshold 1000 timeslice 1000 selectorname DNSSelector1 add dns policy DNSLimitPolicy1 sys.check_limit(\ DNSLimitIdentifier1\ ) preferredlocation North America.US.TX.Dallas.. D. add stream selector DNSSelector1 client.udp.dns.domain add ns limitidentifier DNSLimitIdentifier1 threshold 1000 timeslice 1000 selectorname DNSSelector1 add dns policy DNSLimitPolicy1 sys.check_limit(\ DNSLimitIdentifier1\ ) preferredlocation North America.US.TX.Dallas.. bind dns global DNSLimitPolicy1 5 Correct Answer: C QUESTION 41 Scenario: An organization has a bring your own device (BYOD) policy, so it is NOT feasible to set up proxy settings on each device in the network. They need to implement NetScaler Secure Web Gateway to intercept all the traffic to block access to URLs serving harmful/insecure content or the URLs that are identified as social networking sites, career, and job search portals. Which proxy mode of the Secure Web Gateway should be used in this case? A. Transparent B. Explicit C. Advanced D. HTTP Correct Answer: A QUESTION 42 What is the effect of the set cmp parameter cmpbypasspct 70 command if compression is enabled on the NetScaler? A. Compression will be bypassed if the NetScaler bandwidth consumption is more than 70%.

26 B. Compression will be bypassed if the NetScaler CPU load is 70%. C. Compression will be bypassed if the NetScaler bandwidth consumption is less than 70%. D. Compression will be bypassed if the NetScaler Memory utilization is 70%. Correct Answer: B QUESTION 43 Scenario: A Citrix Administrator is managing a NetScaler SDX running eight NetScaler instances. The administrator first needs to upgrade the firmware on the instances. However, the administrator is concerned that it needs to be done all at once. What upgrading flexibility does SDX provide in this scenario? A. The NetScaler instance can be upgraded at the SDX management level, allowing all instances to be upgraded at once. B. It is NOT possible to upgrade the NetScaler instances to different firmware versions. C. The NetScaler instance can be upgraded on an individual basis, allowing all instances to run different firmware versions. D. The NetScaler instances have to be upgraded at the same time. Correct Answer: D QUESTION 44 How does the NetScaler communicate that IP-to-MAC address bindings have changed to the switches and routers on the network, when a NetScaler high availability (HA) pair failover occurs? A. The NetScaler uses Gratuitous ARPs (GARPs) to update the devices on the network. B. The NetScaler uses MAC-based Forwarding to update the routers. C. The NetScaler uses Proxy ARP to update the devices on the network. D. The NetScaler uses Reverse ARP (RARP) to update the devices on the network. Correct Answer: B

27 QUESTION 45 What is the effect of the set gslb parameter IdnsprobeOrder DNS PING TCP command in an Active/Active Global Server Load Balancing (GSLB) setup? A. The order to calculate the Empty Domain Service (EDS) for Dynamic proximity will be the DNS UDP query followed by the PING and then TCP. B. The order to calculate the Round-trip time (RTT) for Dynamic proximity will be the DNS UDP query followed by the PING and then TCP. C. The order to calculate the Time to live (TTL) proximity will be the DNS UDP query followed by the PING and then TCP. D. The order to calculate the Multiple IP responses (MIR) for Dynamic proximity will be the DNS UDP query followed by the PING and then TCP. Correct Answer: C QUESTION 46 Which NetScaler Access Control List (ACL) command can a Citrix Administrator use to bridge traffic originating from ? A. add ns acl B. add ns acl6 C. add ns simpleacl D. add ns simpleacl6 Correct Answer: A QUESTION 47 Click the Exhibit button to view the screenshot.

28 How will the HTTP request be redirected based on the screenshot? A. The request will be sent to LB_vserver1. B. The request will be sent to lb_vsrv_www. C. The request will be dropeed at the CS vserver. D. The request will be sent to LB_vserver2. Correct Answer: A QUESTION 48 A Citrix Administrator receives complaints from some users that authentication for the NetScaler Gateway site fails, Which tool can the administrator use to find data regarding time of failure and a list of users facing this issue? A. HDX Insight

29 B. Web Insight C. Security Insight D. Gateway Insight Correct Answer: D QUESTION 49 Scenario: A Citrix Administrator configured NetScaler with multiple admin partitions, with different resources running one each. The administrator receives an SNMP alert stating a Load Balanced Virtual Server is down. When the administrator checks the NetScaler, the resource on the partition that was usually managed is NOT there. Now, the administrator has to check each partition to find the load balanced virtual server that is down. What can the administrator do to add the partition information to the SNMP traps to avoid this from happening in the future? A. Configure the SNMP Manager to send the partition information. B. Configure additional SNMP trap listeners. C. Add the partition information to the SNMP traps. D. Change SNMP trap options. Correct Answer: A QUESTION 50 A Citrix Administrator has configured the NetScaler as a DNS Proxy Server. The administrator executed the following commands on the NetScaler using commandline interface: add rewrite action Act_1 replace_dns_header_field dns.res.header.flags.set(aa) add rewrite policy Pol_1 true Act_1 bind rewrite global Pol_1 100 type dns_res_override

30 What will be the effect of executing the above commands? A. Set the AA bit of DNS Response B. Unset the AA bit of DNS Response C. Unset the AA bit of DNS Request D. Set the AA bit of DNS Request Correct Answer: A Reference: QUESTION 51 Which tool can a Citrix Administrator utilize to verify that a policy is bound and showing the number of hits? A. nscollect B. nstrace.sh C. nstcpdump.sh D. nsconmsg Correct Answer: D Reference: QUESTION 52 Which two options would provide an end-to-end encryption of data, while allowing the NetScaler to optimize the responses? (Choose two.) A. SSL Bridge protocol for the services B. HTTP protocol for the virtual server C. HTTP protocol for the services

31 D. SSL protocol for the services E. SSL Bridge protocol for the virtual server F. SSL protocol for the virtual server Correct Answer: CF QUESTION 53 Scenario: A Citrix Administrator needs to create local user accounts for other administrators with limited privileges. The other administrators will need only: Read-only access The ability to enable and disable services and servers Which built-in Command Policy permission level can the administrator use? A. Read-Only B. Network C. Sysadmin D. Operator Correct Answer: D Reference: QUESTION 54 A Citrix Administrator needs to confirm that all the client certificates presented to the authentication virtual server are valid until year 2020.

32 Which expression can the administrator use to meet this requirement? A. CLIENT.SSL.CLIENT_CERT.VALID_NOT_BEFORE.EQ(GMT2020) B. CLIENT.SSL.CLIENT_CERT.VALID_NOT_AFTER.EQ(GMT2020) C. CLIENT.SSL.ORIGIN_SERVER_CERT.VALID_NOT_AFTER.EQ(GMT2020) D. CLIENT.SSL.CLIENT_CERT.DAYS_TO_EXPIRE.EQ(2020) Correct Answer: B Reference: QUESTION 55 What is the effect of the set csv server vserver-cs-1 redirecturl command? A. If the status of vserver-cs-1 is DOWN, then users will be redirected to B. All the requests without url path /mysite/ will be redirected to C. If the vserver-cs-1 encounters high connection rate, then users will be redirected to D. All the requests to vserver-cs-1will be redirected to Correct Answer: D Reference: Citrix_NetScaler_10_5_Traffic_Management_Guide.pdf (124) QUESTION 56 Scenario: A Citrix Administrator has configured a NetScaler active-passive high availability (HA) pair. When the HA pair fails over, customers are unable to access the hosted websites. After some troubleshooting, the administrator found that the upstream router was NOT uodating its ARP table. What can the administrator configure to resolve this issue? A. Virtual MAC

33 B. Route Monitor C. Independent Network Configuration (INC) mode D. HA monitor Correct Answer: A QUESTION 57 Scenario: A Citrix Administrator has executed the following command: set httpcallout1 cacheforsecs 120 What will be the effect of this command? A. The cache duration of the HTTP callout response is set to 120 seconds. B. The cache duration of the HTTP request is set to 120 seconds. C. The cache duration of the HTTP response is set to 120 seconds. D. The cache duration of the HTTP callout request is set to 120 seconds. Correct Answer: A Reference: (99) QUESTION 58 Scenario: A Citrix Administrator has executed the following command: set csv server Vserver-CS-1 casesensitive ON add cs action CS_Act_1 targetlbvserver MYVPN_http add cs policy CS_Pol_1 rule http.req.hostname.contains (\ server.citrix.lab\ ) action CS_Act_1 bind csv server CS-vserver1 policyname CS_Pol_1 priority 100 What will be the outcome of this configuration?

34 A. The users trying to access will be connected to CS Vserver Vserver-CS-1. B. The users trying to access HHTP://SERVER.CITRIX.LAB will be connected to the Vserver MYVPN_http. C. The users trying to access will NOT be connected to the Vserver MYVPN_http. D. The users trying to access will be connected to CS Vserver Vserver-CS-1. Correct Answer: B QUESTION 59 Scenario: A Citrix Administrator has configured the NetScaler as a DNS Proxy Server. The administrator executed the commands in the screenshot on the NetScaler using the command-line interface. Click on the Exhibit button to view the screenshot of the command-line interface. What will be the effect of this configuration? A. Set TC bit and rcode as NOERROR in the DNS Response from DNS server B. Set TC bit and rcode as NOERROR in the DNS Request from Client C. Create a DNS Response with TC bit set and rcode as NOERROR D. Create a DNS Request with TC bit set and rcode as NOERROR Correct Answer: D

35 QUESTION 60 Scenario: A Citrix Administrator configured the rewrite policies below. bind Ib vserver VPN_http policyname POL_1 priority 120 gotopriorityexpression END type REQUEST bind Ib vserver VPN_http policyname POL_2 priority 90 gotopriorityexpression NEXT type REQUEST bind Ib vserver VPN_http policyname POL_3 priority 100 gotopriorityexpression NEXT type REQUEST bind Ib vserver VPN_http policyname POL_4 priority 110 gotopriorityexpression NEXT type REQUEST In which order will the policies be evaluated? A. POL_2, POL_3 B. POL_2 C. POL_2, POL_3, POL_4, POL_1 D. POL_2, POL_3, POL_4 Correct Answer: C QUESTION 61 Scenario: A Citrix Administrator is configuring a NetScaler high availability (HA) pair with an existing Primary NetScaler with all resources configured. The administrator added the Secondary NetScaler in high availability and found that the configuration on the existing primary was removed. It is now the Secondary NetScaler in the HA pair. Which two configurations could the administrator have made to prevent this from happening? (Choose two.) A. Set the Primary NetScaler to STAY PRIMARY in the Configure HA Node settings. B. Set the Secondary Netscaler to STAY SECONDARY in the Configure HA Node settings. C. Enable HA monitoring on all the interfaces of the PRIMARY device. D. Enable HA monitoring on all the interfaces of the SECONDARY device. Correct Answer: AC

36 Reference QUESTION 62 Which log records detailed information such as statistics, metrics and debug information on the NetScaler in a proprietary binary format? A. Syslog B. Nslog C. Nsconfig D. Nstrace Correct Answer: B QUESTION 63 Click the Exhibit button to view the screenshots.

37 Which Front-End Optimization (FEO) action can a Citrix Administrator use to achieve the results shown in the screenshots?

38 A. Move CSS to head B. Inline CSS C. Rearrange CSS D. Truncate CSS Correct Answer: B Reference: QUESTION 64 Which two actions must be true for a client to connect to an SSL offload virtual server without any SSL errors? (Choose two.) A. The Server Certificate is bound to the load-balancing virtual server. B. The Server Certificate is from a private certificate authority (CA). C. The Root Certificate is installed on the client s device. D. The Root Certificate is installed on the NetScaler. Correct Answer: AC QUESTION 65 Scenario: The Director of network security in a financial organization wants to protect the enterprise network from any external malware threats. To do this, the director needs to gain visibility into otherwise-bypassed traffic and control access to malicious web sites. The director is required to do the following: Intercept and examine all the traffic, including SSL/TLS (encrypted traffic), coming in, and going out of the enterprise network. Block access to URLs identified as serving harmful or insecure content.

39 Identify users (employees) in the enterprise who are accessing malicious websites. Which NetScaler deployment mode should a Citrix Administrator use to achieve this requirement? A. Unified Gateway B. Secure Web Gateway C. NetScaler Gateway D. Access Gateway Correct Answer: B QUESTION 66 Scenario: A Citrix Administrator needs to ensure that a user request is redirected to the next available data center in order to ensure the best user experience based upon location. Below are the Global Server Load Balancing (GSLB) virtual server settings. sh gslb vserver gslb.outscale.cloud gslb.outscale.cloud SSlState: UP DNS Record Type: A Last state change was at Tue May 16 23:47: Time since last state change: 16 days, 16:13:23:390 Configured Method: RTT BackupMethod: LEASTCONNECTION No. of Bound Services : 2 (Total)1 (Active) Persistence: NONE Disable Primary Vserver on Down: DISABLED Site Persistence: ConnectionProxy To which setting should the administrator change the configured method? A. StaticProximity B. LeastBandwidth C. LeastConnection D. RoundRobin

40 Correct Answer: C QUESTION 67 Which three options are allowed when using Classic policies? (Choose three.) A. CLIENT B. SERVER C. IP D. HTTP E. DNS F. TCP Correct Answer: CDE