NEW QUESTION 1
Which mode does a Citrix Administrator need to configure in order to allow the NetScaler to forward any packets that are NOT destined for an IP address which is NOT configured on NetScaler?

• A. Layer 3
• B. USIP
• C. Layer 2
• D. MAC-based Forwarding

Answer: C

NEW QUESTION 2
Which two policy types can a Citrix Administrator apply to a NetScaler Gateway virtual server so that only users accessing with corporate laptops that belong to the network domain are allowed? (Choose two.)

• A. Pre-Authentication
• B. Responder
• C. Authorization
• D. Traffic
• E. Session

Answer: AB

NEW QUESTION 3
Which mode on the NetScaler can a Citrix Administrator utilize to avoid asymmetrical packet flows and multiple route/ARP lookups?

• A. USNIP
• B. Layer 3
• C. MAC-based Forwarding
• D. Layer 2

Answer: C

Explanation: MAC-based forwarding can be used to avoid multiple-route/ARP lookups and to avoid asymmetrical packet flows.

NEW QUESTION 4
Scenario: A company recently acquired three smaller companies; this adds more than 1500 employees to the company. The current NetScaller appliance does NOT support adding that many users.
A Citrix Administrator needs to use a Multi-Tenancy solution, giving each newly acquired company its own NetScaler for VPN access, load balancing, and at least 20 GBPS of throughput.
How can the administrator meet the needs of this environment?

• A. Install XenServer and configure a NetScaler VPX 3000 for each newly acquired company.
• B. Purchase a NetScaler MPX appliance for each newly acquired company.
• C. Purchase a NetScaler CPX for each newly acquired company.
• D. Purchase a NetScaler SDX appliance and configure a NetScaler Instance for each newly acquired company.

Answer: D

NEW QUESTION 5
Scenario: A Citrix Administrator entered the command-line interface commands below to prevent IP address 10.10.100 from accessing the NetScaler on port 80.
add simpleacl rule1 DENY- srcIP 10.10.10.100 –TTL 600 add simpleacl rule2 DENY- srcIP 10.10.10.100 –destPort 80 add ns acl rule1 DENY- srcIP 10.10.10.100-priority 10
add ns acl rule2 DENY- srcIP 10.10.10.100-priority 100 apply ns acls
Which Access Control List (ACL) will the NetScaler use to deny the IP address?

• A. add ns acl rule1 DENY-srcIP 10.10.10.100-priority 10
• B. add simpleacl rule1 DENY- srcIP 10.10.10.100 –TTL 600
• C. add simpleacl rule2 DENY- srcIP 10.10.10.100 –destPort 80
• D. add ns acl rule2 DENY- srcIP 10.10.10.100-priority 100

Answer: B

NEW QUESTION 6
A Citrix Administrator receives user complaints about latency while accessing an application that is being load-balanced on the NetScaler.
Which tool can the administrator use to gather information regarding Response time, Client latency and Server-side processing time?

• A. aaad.debug
• B. WAN Insight
• C. NetScaler Management and Analytics System (MAS)
• D. HDX Insight

Answer: D

NEW QUESTION 7
TCP multiplexing is a technique that enables the reuse of existing TCP connections
Which NetScaler hardware or software platform offers a Multi-Tenant solution?

• A. VPX
• B. CPX
• C. MPX
• D. SDX

Answer: D

NEW QUESTION 8
Scenario: A Citrix Administrator suspects an attack on a load-balancing virtual server. The administrator needs to restrict access to the load-balancing virtual server (192.168.100.25) for 10 minutes.
Which Access Control List (ACL) will help to accomplish this requirement?

• A. add ns acl rule1 DENY –destIP 192.168.100.25- TTL 600000
• B. add simpleacl rule1 DENY- srcIP 192.168.100.25- TTL 600
• C. add ns acl rule1 DENY –destIP 192.168.100.25- TTL 600
• D. add simpleacl rule1 DENY- srcIP 192.168.100.25- TTL 600000

Answer: C

NEW QUESTION 9
A Citrix Administrator is configuring a NetScaler high availability (HA) pair and needs to ensure that one NetScaler is UP and primary at all times to ensure the business websites are always available.
What does the administrator need to do ensure that the NetScalers still handle web traffic in the event that both nodes become unavailable or fail a health check?

• A. Disable HA Fail-safe mode on the Secondary NetScaler.
• B. Configure HA Fail-safe mode on each NetScaler independently.
• C. Disable HA Fail-safe mode on the Primary NetScaler only.
• D. Configure HA Fail-safe mode on the Primary NetScaler only.

Answer: D

NEW QUESTION 10
Scenario: User authentication is failing through the NetScaler. A Citrix Administrator checked the Authentication, Authorization and Auditing (AAA) policy, action and virtual server and verified that the correct configuration was in place. The administrator bypassed the NetScaler and the authentication worked.
Which NetScaler utility can the administrator use to troubleshoot the access issue?

• A. nslog file
• B. aaad.debug
• C. nscon message
• D. Dashboard

Answer: B

NEW QUESTION 11
While troubleshooting an SSL issue on one of the SSL-based virtual servers, a Citrix Administrator noticed that the data captured from the TCP dump was showing in plain text.
What could be the cause of this issue?

• A. No SSL cipher suite was selected
• B. The SSL Certificate expired
• C. The selected cipher suite is obsolete
• D. Misconfiguration of the TCP profile

Answer: A

NEW QUESTION 12
Scenario: A Citrix Administrator needs to add 10 new servers to an existing server farm. The new servers are configured to serve the same applications and connections and are twice the capacity of the existing servers. The administrator wants to ensure that they are being fully utilized. Currently in the environment, the default load-balancing method is being used.
To ensure that only the 10 new servers are receiving twice the connections of the old servers without changing the load balancing to the rest of the environment, the administrator needs to add a weight of to the services attached to the servers. (Choose the correct option to complete the sentence.)

• A. 2; new
• B. 2; old
• C. 50; old
• D. 50; new

Answer: B

NEW QUESTION 13
Which type of entity can a Citrix Administrator configure to support the use of an SSL rewrite policy?

• A. Global server load balancing virtual server
• B. Content Switching virtual server
• C. SSL load balancing virtual server
• D. SSL_Bridge balancing virtual server

Answer: B

NEW QUESTION 14
Scenario: A Citrix Administrator deployed a NetScaler in one-arm mode. Currently, the VLANs 20, 30 and 40 are tagged on the interface with the option of ‘tagall’ on the interface.
What is true regarding the VLANs, when ‘tagall’ is enabled on the interface?

• A. VLANS 1, 20, 30, 40 and HA packets are tagged on the interface
• B. VLANS 20, 30 and 40 are tagged on the interface
• C. VLANS 20, 30, 40 and HA packets are tagged on the interface
• D. VLANS 1, 20, 30 and 40 are tagged on the interface

Answer: B

NEW QUESTION 15
Scenario: A Citrix Administrator notices user sessions are disconnecting and reconnecting more often this week than last week, signaling a problem.
The administrator troubleshoots this issue and prepares to resolve it using persistence. However, the following considerations apply in the environment:
-It is a multi-proxy environment behind the NetScaler.
-USIP mode is enabled and applied to the services.
-The session timeout is very short.
-All users connect from the same location.
The Administrator can use persistence based on the setting to resolve this issue. (Choose the correct option to complete the sentence.)

• A. HTTP Cookies
• B. Proximity
• C. SSL Session IDs
• D. Subnet IP

Answer: A

NEW QUESTION 16
Scenario: A NetScaler has two interfaces as 1/1 and 1/2 with MAC-based Forwarding enabled. Below are the specifications:
-Interface 1/1 and IP 192.168.10.10 is bound to VLAN 10.
-On Interface 1/2 VLAN 20 and VLAN 30 are tagged.
-VLAN 20 is bound to IP 192.168.20.10 and VLAN 30 is bound to 192.168.30.10 The NetScaler receives a packet for VIP 192.168.30.30 on interface 1/1.
Which interface of NetScaler will send a reply back in this environment?

• A. Interface 1/1
• B. NetScaler will drop the packet received on interface 1/1
• C. Interface 1/2
• D. Netscaler will reply on interfaces 1/1 and 1/2

Answer: D

NEW QUESTION 17
What does a Citrix Administrator need to do on NetScaler Gateway to ensure that users accept the terms and conditions before they can log on using NetScaler Gateway?

• A. Configure a Responder policy.
• B. Upload an HTML file to the NetScaler appliance.
• C. Create an end user license agreement (EULA).
• D. Configure a Rewrite policy.

Answer: C