Citrix.Actualtests.1Y0-250.v by.PKASH.65q. Exam Code: 1Y Exam Name: Implementing Citrix NetScaler 10 for App and Desktop Solutions

Transcription

1 Citrix.Actualtests.1Y0-250.v by.PKASH.65q Number: 1Y0-250 Passing Score: 800 Time Limit: 120 min File Version: Exam Code: 1Y0-250 Exam Name: Implementing Citrix NetScaler 10 for App and Desktop Solutions

2 Exam A QUESTION 1 A company uses various pre-approved user devices in the environment, including mobile devices running ios and Android operating systems. Which two types of policies could an administrator use on the NetScaler Gateway virtual server to allow access to these mobile devices? (Choose two.) A. Rewrite policies, including endpoint analysis scans B. Session policies, excluding the endpoint analysis scans C. Authorization policies, including the endpoint analysis scans D. Pre-authentication policies, excluding the endpoint analysis scans Correct Answer: BD : QUESTION 2 An administrator plans to configure a NetScaler Gateway virtual server to be able to provide SmartAccess, endpoint analysis and network layer tunneling features. Which client option should the administrator use for this scenario? A. Offline plug-in B. Online plug-in C. Citrix Receiver D. Access Gateway plug-in Correct Answer: D : QUESTION 3 An administrator is planning a NetScaler Gateway implementation and must ensure that users are only allowed to access the company resources if a specific file is present on the endpoint device they connect from. Which component should the administrator include within the plan? A. An SSL Offload virtual server B. A double-hop NetScaler Gateway virtual server C. A Basic mode NetScaler Gateway virtual server D. A SmartAccess mode NetScaler Gateway virtual server Correct Answer: D :

3 QUESTION 4 Which information is required to license a NetScaler VPX 1000? A. NSIP B. MAC address C. NetScaler host name D. Citrix License Server host name Correct Answer: B : QUESTION 5 An administrator created a service for a Web Interface server that is encrypted by an SSL certificate. Which command should the administrator run at the command-line interface to create a monitor that will check the Web Interface by logging on to it with a test user's credentials? A. add lb monitor mon-webinterface CITRIX-WI-EXTENDED -sitepath "/Citrix/XenApp" - username user - domain DomainName -password P@ssw0rd -encrypted B. add lb monitor mon-webinterface CITRIX-WI-EXTENDED -sitepath "/Citrix/XenApp" - username user - domain DomainName -password P@ssw0rd -secure YES C. add lb monitor mon-webinterface CITRIX-WI-EXTENDED -sitepath "/Citrix/XenApp" - username user - domain DomainName -password P@ssw0rd -destport 443 D. add lb monitor mon-webinterface CITRIX-WI-EXTENDED -sitepath "/Citrix/XenApp" - username user - domain DomainName -password P@ssw0rd -encrypted -secure YES Correct Answer: B : QUESTION 6 Scenario: An administrator configured a NetScaler Gateway session policy named spol_icap. The administrator needs to bind the policy to ensure that it is evaluated only when users of the ICAP security group log on to the NetScaler Gateway virtual server named vsrv_agee. Which command should the administrator run at the command-line interface to meet the needs of the scenario? A. bind vpn vserver vsrv_agee ICAP B. bind aaa group ICAP -policy spol_icap C. bind aaa group ICAP -policy spol_icap -global OFF

4 D. bind vpn vserver vsrv_agee -policy spol_icap -priority 1 Correct Answer: B : QUESTION 7 An administrator plans to use only Citrix Receiver for XenDesktop remote access through a NetScaler Gateway device. Which type of policy should the administrator configure to meet this requirement? A. Session B. Authentication C. Clientless access D. Pre-authentication Correct Answer: A : QUESTION 8 Which configuration option should an administrator select to pass users' credentials to a file share in a NetScaler Gateway environment? A. Local LAN-Access B. Single sign-on to a domain C. Single sign-on with Windows D. Single sign-on to Web applications : QUESTION 9 Scenario: An administrator has an existing SSL certificate that is installed and used on a Microsoft Windows IIS server. The administrator exported the certificate, including the private key, to a PFX file and now wants to use that certificate for SSL Offloading on NetScaler. Which two methods could the administrator use to import the certificate on NetScaler? (Choose two.) A. Import PKCS#12. B. Change advanced SSL settings. C. Use the Server Certificate Wizard. D. Convert the certificate to PEM format. Correct Answer: AD

5 : QUESTION 10 An administrator needs to install a certificate from the NetScaler onto a Microsoft Windows IIS server. Which action should the administrator complete before the certificate can be imported on the IIS server? A. Select Export PKCS#12 and copy the file to Windows. B. Copy the certificate file from /nsconfig/ssl to Windows. C. Copy the certificate file and the key file from /nsconfig/ssl to Windows. D. Manage Certificates / Keys / CSRs and download the certificate file to Windows. Correct Answer: A : QUESTION 11 Scenario: For auditing requirements, NetScaler administrators are required to use their Active Directory accounts to log on to NetScaler. All NetScaler administrators belong to the NSAdmins Active Directory group. Which configuration must an administrator create in NetScaler to meet the requirements of the scenario? A. User accounts B. NSAdmins group C. Authorization policy D. Service Groups policy Correct Answer: B : QUESTION 12 Scenario: An administrator is implementing a two-factor authentication solution with an RSA SecureID product. The administrator already has the server name and port number of the RSA server. Which additional information does the administrator need to configure RSA SecureID? A. LDAP password B. Firewall access rule C. Authentication policy D. RADIUS shared secret Correct Answer: D

6 : QUESTION 13 Scenario: An administrator is creating a NetScaler Gateway virtual server for mobile devices only. The administrator must include two-factor authentication. Which two steps must the administrator take to configure two-factor authentication for this environment? (Choose two.) A. Bind the RSA policy first. B. Bind the LDAP policy first. C. Create an authentication policy. D. Create a pre-authentication policy. Correct Answer: AC : QUESTION 14 Scenario: An administrator implemented RADIUS with NetScaler Gateway as a two-factor authentication solution for a XenDesktop implementation. A planned outage is scheduled in wake of a software upgrade on the RADIUS infrastructure. During the outage, the administrator needs to disable the two-factor authentication on NetScaler Gateway to enable users' continued access to published applications. Which action could the administrator take to meet the needs of the scenario without affecting the connected users? A. Delete the RADIUS authentication policy. B. Set the RADIUS policy to be secondary authentication. C. Disable authentication on the NetScaler Gateway virtual server. D. Unbind the RADIUS authentication policy from the NetScaler Gateway virtual server. Correct Answer: D : QUESTION 15 In which format should an administrator save the AppExpert Template files in order to import and upload to the NetScaler? A. XML B. ASP C. CSV D. HTML Correct Answer: A

7 : QUESTION 16 Scenario: A company had a single datacenter location with a single NetScaler installed. A second datacenter location was added and an administrator installed a second Citrix NetScaler at the second datacenter location. The NetScaler is used for load balancing internal infrastructure solutions. The administrator plans to configure the environment so that it will continue to work even if there is a datacenter failure. Only the primary datacenter location is connected to the Internet. The configuration has to be synchronized automatically so that the configuration of both appliances is always identical. How should the administrator configure the NetScaler devices so that continuity is maintained in the event of a datacenter failure? A. As a GSLB cluster B. In a VRRP configuration C. As a high availability pair D. As standalone appliances : QUESTION 17 An administrator notices that a NetScaler high availability (HA) pair has changed the primary node several times in the past few days due to intermittent issues. What could the administrator configure to ensure that HA failures are alerted? A. SNMP B. Syslog C. Route Monitors D. Failover Interface Set Correct Answer: A : QUESTION 18 Which command-line interface command could an administrator use to display communication between the LDAP server and the NetScaler system? A. cat /etc/krb5.conf B. cat /etc/krb5.keytab C. cat /tmp/aaad.debug D. cat /var/log/aaad.debug E. tail -f /var/log/aaad.debug

8 : QUESTION 19 Scenario: An administrator configured an LDAP authentication policy and bound it globally. The only system group configured on the Netscaler is NS_Admins. After reviewing the security logs, the administrator notices that users in the External_Contractors LDAP group are able to log on to NetScaler using SSH; however, members of the External_Contractors group are NOT authorized to run any commands. Which action could the administrator take to prevent the members of the External_Contractors LDAP Group from logging on to NetScaler using SSH without affecting other users? A. Configure an authorization policy that allows logon only by members of the "External_Contractors" LDAP Group. Bind the new policy globally. B. Specify (memberof="cn=external_contractors, CN=Groups, CN=example, CN=com") as a filter in the properties of the configured LDAP server. C. Specify (!(memberof="cn=external_contractors, CN=Groups, CN=example, CN=com")) as a filter in the properties of the configured LDAP server. D. Create a new command policy with a DENY action. Create a System Group named "External_Contractors" and assign the new command policy to the External_Contractors group. : QUESTION 20 After restarting one node on a two-node NetScaler cluster, an administrator notices that the node that was restarted no longer accepts traffic. Which action could the administrator take to resolve this issue? A. Run the nsconmsg -g feature -d stats from the shell. B. Run the sync cluster files command from the command-line interface. C. Replace the cluster license file and restart the NetScaler software only. D. Restart the NetScaler software and operating system for the failing node. : QUESTION 21 Scenario: An administrator plans to troubleshoot connections to the SSL virtual server configured on the NetScaler by using the WireShark tool. The administrator created a network trace file. What will the administrator need to decrypt the network trace? A. NS-root key B. NS-server key C. Private key of the root certification authority

9 D. Private key of the certificate that is bound to the virtual server Correct Answer: D : QUESTION 22 Scenario: A number of administrators received the following error when they attempted to connect to the Configuration Utility using a secured HTTPS connection: The site's security certificate is not trusted! One of the administrators installed a certificate from a trusted Certificate Authority on the NetScaler and is planning to configure the Configuration Utility to use this certificate. Which NetScaler command must the administrator run at the command-line interface to configure the Configuration Utility with the new certificate? A. set ssl service B. set ssl vserver C. bind ssl service D. bind ssl vserver : QUESTION 23 Scenario: A company currently has a working production XenApp and NetScaler environment. An administrator recently implemented a test NetScaler environment and tried to duplicate the NetScaler Gateway configuration from the production environment in the test environment. When the administrator configured the Secure Ticket Authority in the test environment, the Secure Ticket Authority showed a DOWN state. The administrator verified that the Secure Ticket Authority state shows as UP on the production NetScaler. What should the administrator check to troubleshoot the issue? A. NetScaler route table B. NetScaler Gateway Resources C. NetScaler Gateway Session Profiles D. Secure Ticket Authority server IP address Correct Answer: A : QUESTION 24 When a user launches a published version of Notepad, the user receives the following error message: "Cannot connect to the Citrix XenApp server.ssl Error: The proxy denied access to 10; STA393B6A5D1088;

10 E39D0BEBB0BFC66E9EE146FF4 port 1494." What could be the cause of this error message? A. Web Interface CANNOT reach the XML broker. B. Web Interface CANNOT reach the XenApp server. C. NetScaler Gateway CANNOT reach the XenApp server. D. NetScaler Gateway CANNOT reach the Secure Ticket Authority server. Correct Answer: D : QUESTION 25 Scenario: An administrator configured link load balancing to balance outbound traffic between two Internet Service Providers. When testing the configuration, the administrator notices NetScaler is unable to connect to any external addresses. Which mode should the administrator verify is enabled? A. Layer 3 B. Layer 2 C. Use Subnet IP D. Use Source IP : QUESTION 26 Scenario: After a restart of a single NetScaler, users complain that the logon page has changed. An administrator plans to verify that a startup script exists and contains the necessary command. Where can the administrator find the startup script? A. /etc B. /dev C. /nsconfig D. /netscaler : QUESTION 27 Scenario: An administrator plans to implement NetScaler to load balance Web Interface traffic. The Web Interface servers are using standard non-secure ports. Company policy states that all external traffic must be

11 secure. The administrator has added the servers for the Web Interface under Load Balancing. In order to load balance the Web Interface traffic and comply with company policy, the administrator should add services for and create an. (Choose the correct set of options to complete the sentence.) A. SSL; SSL virtual server B. SSL; HTTP virtual server C. HTTP; SSL virtual server D. HTTP; HTTP virtual server : QUESTION 28 An administrator needs to prevent a single point of failure for the Secure Ticket Authority servers configured on NetScaler Gateway. Which method could the administrator use to accomplish this? A. Create a DNS round robin for the Secure Ticket Authority servers. B. Add Secure Ticket Authority servers individually to the virtual server. C. Create a virtual server to load balance the Secure Ticket Authority servers. D. Configure Windows Network Load Balancing for the Secure Ticket Authority servers. Correct Answer: B : QUESTION 29 Scenario: An administrator needs to configure secure remote access and load balancing on NetScaler for a XenDesktop implementation. The XenDesktop environment has two Desktop Delivery Controllers (DDCs) and two Web Interface servers. Which action must the administrator take to configure the Secure Ticket Authority in NetScaler Gateway? A. Bind individual DDCs as Secure Ticket Authorities on the NetScaler Gateway virtual server. B. Bind individual Web Interface servers as Secure Ticket Authorities on the NetScaler Gateway virtual server. C. Configure a load balancing virtual server for the DDC servers and configure the load balanced Secure Ticket Authority on the NetScaler Gateway virtual server. D. Configure a load balancing virtual server for the Web Interface servers and configure the load balanced Web Interface virtual server as the Secure Ticket Authority for the NetScaler Gateway virtual server. Correct Answer: A

12 : QUESTION 30 Which protocol could an administrator apply with rate-based monitor? A. FTP B. ARP C. DNS D. HTTPS Correct Answer: A : QUESTION 31 Scenario: After an infrastructure service review, an administrator needs to improve the availability of core Web applications for customers. The administrator needs to place two recently purchased NetScalers in two different datacenters on two different subnets. Which two options could the administrator configure for the two NetScaler devices? (Choose two.) A. GSLB B. VRRP C. Cluster D. Virtual MAC address E. High availability INC pair Correct Answer: AE : QUESTION 32 Scenario: An administrator must implement NetScaler Gateway. The solution must allow users to be able to change their Active Directory password from the NetScaler Gateway logon page. Which two actions must the administrator perform to meet the requirements of this scenario? (Choose two.) A. Configure LDAP authentication. B. Configure LDAPS authentication. C. Add a RADIUS authentication server. D. Enable the 'Allow password change' option for the LDAP authentication server. Correct Answer: BD :

13 QUESTION 33 Scenario: An administrator needs to configure a NetScaler to provide access to users on an Exchange platform. The users will only use the IMAP4 protocol. Which three features should the administrator configure for this scenario? (Choose three.) A. SSL Offload B. Compression C. Load balancing D. Health monitoring E. Integrated caching F. Route health injection Correct Answer: ACD : QUESTION 34 Scenario: An administrator configures load balancing in an environment to load balance a Web server. The administrator needs to enhance availability in the case that the virtual server goes down. Which two options could the administrator configure to meet the load balancing needs for this environment? (Choose two.) A. Redirect URL B. Reverse monitoring C. Backup virtual server D. Content Switching virtual server Correct Answer: AC : QUESTION 35 Scenario: An Internal_Web virtual server is configured with two services named wserv1 and wserv2. The services have the default weight settings. A new company policy requires that the weight ratio between wserv1 and wserv2 be 10:1. Which action could an administrator take to adjust the weight settings? A. Add wserv1 and wserv2 servers in the Servers tab. B. Modify Internal_Web virtual server in the Services tab. C. Modify wserv1 and wserv2 services in the Services tab. D. Add a metric table with wserv1 and wserv2 metrics in the Metric Tables tab. Correct Answer: B

14 : QUESTION 36 Scenario: Management has requested monthly detailed performance reports for an online Web application. Management has also requested real-time monitoring of the environment with the possibility of exporting historical reports. Which type of reporting or monitoring tool should an administrator use to meet the requirements of this scenario? A. SNMP B. Syslog C. Citrix Command Center D. NetScaler Insight Center Correct Answer: D : QUESTION 37 An administrator could generate a trace file using the and the. (Choose the two correct options to complete the sentence.) A. "nstrace.sh" command at the NetScaler shell B. Diagnostics option in the Configuration Utility GUI C. "start nstrace" command at the command-line interface D. "nstcpdump.sh" command at the command-line interface Correct Answer: BC : QUESTION 38 An administrator maintains a NetScaler environment that includes Secure Ticket Authority servers configured with custom ports. Which two Secure Ticket Authority address formats could the administrator configure when using custom ports on the NetScaler Gateway virtual server? (Choose two.) A. B. C. D. Correct Answer: BC :

15 QUESTION 39 An administrator needs to use the command-line interface to create a load-balanced virtual server for a Web server listening on port 80. Which command could the administrator run at the command-line interface to accomplish this task? A. add vserver vserver-lb B. add lb vserver vserver-lb C. add vserver vserver-lb-1 HTTP D. add lb vserver vserver-lb-1 HTTP Correct Answer: D : QUESTION 40 An administrator needs to allow remote users to access their locally-installed corporate applications over a secure connection. In order to meet this requirement, the administrator could configure on the NetScaler. (Choose the correct option to complete the sentence.) A. SSL VPN B. ICA Proxy C. SSL Offload D. Clientless Access Correct Answer: A : QUESTION 41 An administrator must configure a NetScaler system to be compliant with security policies that require the Security Team to have the ability to provide the identity of all the connected users. Which action could the administrator take to meet this requirement? A. Configure SNMP. B. Generate a Trace file. C. Configure an audit policy. D. Generate a Custom Report. Correct Answer: B :

16 QUESTION 42 Which two actions should an administrator take to ensure the first NetScaler node configured in a high availability (HA) pair remains the primary node after a second node is added? (Choose two.) A. Set Stay Primary on the first node. B. Configure Stay Secondary on the second node. C. Enable HA Sync before adding the second node. D. Create a Route Monitor to ensure proper synchronization. E. Ensure that INC mode is enabled during creation of the HA pair. Correct Answer: AB : QUESTION 43 An administrator needs to implement a solution to provide users with remote access to applications from tablet devices using Citrix Receiver. Which component is required to fulfill these requirements? A. Citrix Web Interface B. Citrix Single Sign-on C. Citrix Provisioning Services D. Citrix Merchandising Server Correct Answer: D : QUESTION 44 Scenario: Several users in an environment connect to corporate network resources through NetScaler Gateway. Sometimes these users only need to connect to the corporate XenDesktop environment. Some of the users do NOT need a VPN connection. How could an administrator configure access using NetScaler Gateway for this scenario? A. Enable Client Choices. B. Set Clientless Access to Allow. C. Configure a virtual server in Basic mode. D. Configure the Plug-in Type as Windows/Mac OS X. Correct Answer: A : QUESTION Exhibit

17 -- Exhibit -- Which command should an administrator run at the command-line interface to show all the IPv6 static routes in the attached Exhibit? Click the Exhibit button to view the IPv6 static routes. A. show route6 B. show route6 -ALL C. show route ipv6 all D. show route6::/0 fe80::/67 Correct Answer: A : QUESTION 46 An administrator must configure SmartAccess policies within an existing NetScaler Gateway implementation. Which action must the administrator perform to meet the objectives of this implementation? A. Upgrade Citrix XenApp from 6.0 to 6.5. B. Upgrade Web Interface from 5.3 to 5.4. C. Configure a next hop NetScaler Gateway virtual server. D. Configure the mode of the NetScaler Gateway virtual server. Correct Answer: D : QUESTION 47 Scenario: NetScaler is used to load balance Microsoft SharePoint for internal users. An administrator needs to configure the NetScaler device to allow for external access to the SharePoint site. Which action could the administrator take to meet the requirements of the scenario? A. Bind the SharePoint certificate to the virtual server. B. Add the Microsoft SharePoint server to a Web Interface site. C. Configure an Authentication, Auditing and Authorization server. D. Enable 'ICA proxy only' on the NetScaler Gateway virtual server.

18 : QUESTION 48 Scenario: An administrator configured a AAA virtual server. The AAA virtual server is NOT yet bound to a traffic management virtual server. Which two virtual servers could the administrator configure as traffic management virtual servers? (Choose two.) A. GSLB B. Load balancing C. Content switching D. NetScaler Gateway Correct Answer: BC : QUESTION 49 Scenario: NetScaler Gateway is implemented to provide Web Resources, including Outlook Web Access and an SAP portal, to users. Marketing and Sales department employees normally work from outside the office location and should be able to access Web Resources from different types of devices that are NOT maintained by the company. Which user access connection method should an administrator configure to meet the needs of this scenario? A. Citrix Receiver B. PN Agent plug-in C. Clientless access D. Access Gateway plug-in : QUESTION 50 A company plans to deploy secure LDAP authentication to their existing NetScaler Gateway implementation. What should an administrator enable to support secure LDAP? A. SSL security on the virtual server B. Secure LDAP in a pre-authentication policy C. SSL security type in an authentication policy D. Secure LDAP in the NetScaler Gateway Global settings

19 : QUESTION 51 Scenario: An administrator manages a single NetScaler appliance. A Network IT Administrator has prohibited access to VLAN1 and is requesting that the NetScaler Administrator change the management IP address of the appliance. Which IP address should the NetScaler Administrator change? A. VIP B. MIP C. NSIP D. SNIP : QUESTION 52 An administrator plans to configure single sign-on with smart card on NetScaler. What should the administrator configure to use smart cards in the environment? A. Smart Card middleware B. Delegation on Active Directory C. Secure LDAP on the Domain Controller D. Web Interface on the Domain Controller Correct Answer: B : QUESTION 53 Scenario: Multiple virtual servers are configured in a NetScaler Gateway implementation. Corporate policy requires that an administrator restrict the number of users who can log on through each virtual server. What could the administrator specify to meet the needs of this scenario? A. Max Users in a session policy B. Max Users on the virtual server C. Max Connections on the virtual server D. Allowed users to logon in the Access Gateway Global Settings Correct Answer: B

20 : QUESTION 54 Scenario: Two NetScaler Gateway virtual servers are configured on a NetScaler appliance. Each NetScaler Gateway virtual server is used to enable secure remote access to dedicated XenDesktop sites for separate divisions: Division A: NetScaler Gateway: NG-A XenDesktop Controller: DDC-A Division B: NetScaler Gateway: NG-B XenDesktop Controller: DDC-B Each XenDesktop site is placed in its own Active Directory. Firewalls prevent any communication between the divisions. An administrator should configure the Secure Ticket Authority on the NetScaler for Division B, without causing any configuration issues for NG-A, by binding. (Choose the correct option to complete the sentence.) A. DDC-B to NG-A B. DDC-B to NG-B C. DDC-B to NG-A and DDC-A D. DDC-A and DDC-B to a load-balancing virtual server Correct Answer: B : QUESTION 55 Scenario: An administrator has configured several load balancing virtual servers on a NetScaler to accelerate the Web content. After an update on the Web content platform, all the servers need the client IP address to perform tracking operations. Which two tasks should the administrator complete to pass the client IP address to all the load balancing virtual servers? (Choose two.) A. Activate the Source-IP feature on the service. B. Configure a rewrite policy, then bind it globally. C. Activate the Client-IP Header insertion on the services. D. Configure a responder policy, then bind it to all servers. Correct Answer: BC

21 : QUESTION 56 Scenario: A virtual server has been configured in the Content Switching node to provide multiple Web services using the full website path location. This website contains details that can only be displayed using a specific Web browser such as Internet Explorer. Which two actions must an administrator perform to ensure that users are informed of the browser requirements? (Choose two.) A. Configure Advanced Expression policies to determine the type of browser used. B. Create a backup server to display a website that informs users of the browser requirements. C. Configure a redirect URL to redirect users to a website that informs them of the browser requirements. D. Configure a default policy to redirect users to a website that informs them of the browser requirements. Correct Answer: AD : QUESTION 57 Which action could an administrator take to configure auditing of logon events for all the employees who connected through the NetScaler Gateway for the current day? A. Run "df -h" from the NetScaler command-line interface. B. Configure a Syslog policy to send events to a remote server. C. Run "cat aaa.debug" from the NetScaler command-line interface. D. Review logon events through Reporting > Access Gateway > AAA > AAA Sessions. Correct Answer: B : QUESTION 58 An administrator is reviewing the following output: VIP( :80:UP:WEIGHTEDRR): Hits( , 18/sec) Mbps(1.02) Pers(OFF) Err(0) Pkt(186/sec, 610 bytes) actsvc(4) DefPol(NONE) override(0) Conn: Clt(253, 1/sec, OE[252\]) Svr(3)

22 S( :80:UP) Hits( , 4/sec, P[ , 0/sec\]) ATr(5) Mbps(0.23)BWlmt(100 kbits) RspTime( ms) Other: Pkt(36/sec, 712 bytes) Wt(10000) RHits(31555) Conn: CSvr(42, 0/sec) MCSvr(20) OE(16) RP(11) SQ(0) How much traffic is being passed through the public IP address based on the output displayed above? A. 100 kbits B Mbps C Mbps D ms Correct Answer: B : QUESTION 59 Scenario: An administrator has configured LDAPS authentication, but users are unable to log on to the NetScaler Gateway virtual server. The same users are able to log on to other systems. Which action could the administrator take to troubleshoot this issue? A. Run "telnet ldapsrv.example.com 389" from a PC. B. Run telnet from a LDAPS server to the NSIP address. C. Run "telnet ldapsrv.example.com 636" from the NetScaler shell. D. Run "telnet ldapsrv.example.com:636" from the NetScaler command-line interface. : QUESTION 60 Scenario: An administrator needs to deliver production applications to users. Encryption must be maintained between the users' managed devices. Which two certificates could the administrator use to meet this requirement? (Choose two.) A. Public B. Private C. Trusted D. Intermediate Correct Answer: AB

23 : QUESTION 61 Scenario: An administrator plans to publish 2010 Outlook Web Access through Citrix NetScaler AAA and allow users to authenticate using domain credentials and their RSA tokens. Users must also have the ability to change the password when it has expired. The administrator should configure for user authentication and for RSA token authentication. (Choose the correct set of options to complete the sentence.) A. LDAP; LDAPS B. SAML; RADIUS C. LDAPS; RADIUS D. RADIUS; RADIUS : QUESTION 62 An administrator is setting up two-factor authentication, using Active Directory and RSA SecurID. Which actions could the administrator take to protect the environment from a brute force attack? A. Bind Active Directory as Primary authentication priority 100. Bind RSA SecurID as Primary authentication priority 110. B. Bind Active Directory as Primary authentication priority 110. Bind RSA SecurID as Primary authentication priority 100. C. Bind Active Directory as Secondary authentication priority 100. Bind RSA SecurID as Primary authentication priority 100. D. Bind Active Directory as Primary authentication priority 100. Bind RSA SecurID as Secondary authentication priority 100. : QUESTION 63 Scenario: An administrator notices that each time the secondary node of a high availability (HA) pair is restarted, the primary node shifts to a non-working state. The administrator runs a command and collects the information displayed below: 1) Node ID. 0 IP: Node StatE. NOT UP Master StatE. Secondary

24 INC StatE. DISABLED Sync StatE. DISABLED Propagation: ENABLED Enabled Interfaces : 1/5 1/1 1/2 1/4 0/1 Disabled Interfaces : 1/3 HA MON ON Interfaces : 1/4 1/1 0/1 Interfaces on which heartbeats are not seen : 1/4 1/1 1/2 1/5 0/1 Interfaces causing Partial FailurE. 1/4 SSL Card Status: UP Hello Interval: 200 msecs Dead Interval: 3 secs Node in this Master State for: 0:0:0:35 (days:hrs:min:sec) 2) Node ID. 1 IP: Node StatE. UNKNOWN/DOWN Master StatE. UNKNOWN INC StatE. UNKNOWN Sync StatE. UNKNOWN Propagation: UNKNOWN Enabled Interfaces : UNKNOWN Disabled Interfaces : UNKNOWN HA MON ON Interfaces : UNKNOWN SSL Card Status: UNKNOWN What could be the cause of this issue? A. Synchronization is disabled. B. The Hello Interval is set too high. C. One of the interfaces is disabled. D. One of the HA Monitoring interfaces is failing. Correct Answer: D :

25 "Pass Any Exam. Any Time." Citrix 1Y0-250 Exam QUESTION 64 Which two methods could an administrator use to ensure that all HTTP traffic will be redirected to the NetScaler Gateway virtual server after configuring a NetScaler Gateway virtual server? (Choose two.) A. Configure a URL transformation policy, then bind it globally. B. Configure a rewrite policy to change all the HTTP requests, then bind it to the NetScaler Gateway virtual server. C. Configure a responder policy based on the FQDN pointing to the NetScaler Gateway virtual server,then bind it globally. D. Configure an HTTP virtual server with the same NetScaler Gateway virtual server IP address, then configure a redirect URL on it. D : QUESTION 65 Scenario: An administrator is planning to implement NetScaler Gateway. The administrator must ensure that users are able to change their passwords when the passwords have expired. To meet the needs of the scenario, the administrator must ensure that is included in the plan. A. LDAP authentication B. RADIUS authentication C. nested groups (enabled) D. the nsroot username added to Active Directory Correct Answer: A