NEW QUESTION 1
Scenario: A Citrix Administrator has given permissions to team members to access their own admin partition, so they can add resources for different departments and manage them without making changes to the default NetScaler partition and configuration.
One team member was trying to use the command-line interface to trouble an authentication issue and could NOT use aaad.debug. However, the team member has full permissions on the admin partition.
What can be the cause of this issue?

• A. The team member needs to troubleshoot the issue form the GUI.
• B. The team member does NOT have Shell access by design.
• C. The team member does NOT have permission to use the CLI.
• D. The team member is NOT using the CLI correctly.

Answer: C

NEW QUESTION 2
Scenario: A NetScaler Gateway provides ICA Proxy to an internal XenDesktop site in an environment. The security team wants the Citrix Administrator to configure the NetScaler to block client drives if the client device fails a security scan.
Which NetScaler feature allows the administrator to satisfy the security team’s requirements without making changes to the XenDesktop configuration?

• A. Traffic Policy
• B. Smart Access
• C. SmartControl
• D. Authorization Policy

Answer: D

NEW QUESTION 3
Which type of policy should a Citrix Administrator configure to ensure that only users who have data antivirus protection can connect to the environment?

• A. Traffic
• B. Pre-Authentication Scan
• C. Smart Control
• D. SmartAccess

Answer: B

NEW QUESTION 4
Scenario: A NetScaler MPX appliance has become unresponsive while using the GUI. A Citrix Administrator needs to restart the appliance and force a core dump for analysis.
What can the administrator do to accomplish this?

• A. Use the NMI button on the back of the appliance.
• B. Connect to the USB port to issue a restart command.
• C. Use the reset button on the front of the appliance.
• D. Turn off the appliance using the power button.

Answer: A

NEW QUESTION 5
Scenario: A Citrix Administrator found that whenever a NetScaler VPX high availability (HA) pair of
appliances fails over, the load-balanced websites are NOT accessible. The administrator investigated the issue and found that the router and switches do NOT support gratuitous ARP (GARP). However, the administrator cannot immediately afford to upgrade the network infrastructure.
What can the administrator do immediately to resolve the issue and prevent a future outage?

• A. Migrate the VPX pair to different hypervisor hosts.
• B. Replace the NetScaler VPX appliances with NetScaler MPX appliances
• C. Configure a Virtual MAC (VMAC) on the NetScaler.
• D. Utilize IPv6 instead of IPv4.

Answer: D

NEW QUESTION 6
What are two pre-requisites for configuring SmartAccess policies on a NetScaler Gateway virtual server? (Choose two.)

• A. Universal License
• B. Pre- or Post-Endpoint Analysis configuration policy
• C. Smart card configuration policy
• D. Standard License

Answer: AB

Explanation: Make sure the Prerequisites are completed. This includes: ICA Only unchecked, Gateway Universal licenses installed, Callback URL configured at StoreFront, and Trust XML enabled on Delivery Controllers.
If you are using a Preauthentication Policy to run an Endpoint Analysis scan: References:

NEW QUESTION 7
Which reason would account for uneven user connections on a back-end server using the default load-balancing method?

• A. Persistence is enabled
• B. Application resource utilization is uneven
• C. Incorrect load-balancing method is selected
• D. Multiplexing is disabled

Answer: A

NEW QUESTION 8
Which two actions must be true for a client to connect to a SSL offload virtual server without any SSL errors? (Choose two.)

• A. The Root Certificate is installed on the client’s device
• B. The Server Certificate is bound to the load-balancing virtual server
• C. The Server Certificate is from a private certificate authority (CA)
• D. The Root Certificate is installed on the NetScaler

Answer: AC

NEW QUESTION 9
Which two options should a Citrix Administrator consider when adding a secondary device in a high availability (HA) pair? (Choose two.)

• A. The Independent Network Configuration (INC) mode should be enabled.
• B. Both the devices should have different SNIP addresses.
• C. The nsroot password should be the same on both nodes.
• D. HA Monitoring should be disabled on all the unused interfaces.
• E. Configure the HA status of the Primary Node as STAYPRIMARY.

Answer: CD

NEW QUESTION 10
Scenario: A Citrix Administrator is looking into adopting NetScaler to handle application delivery for an environment.
The administrator would like to start with these services:
IIS and Apache Web Servers
Microsoft SQL AlwaysON Database Availability Groups
Which two NetScaler features can the administrator use to achieve this goal? (Choose two.)

• A. Load Balancing
• B. Content Switching
• C. Data Stream
• D. Cloud Bridge Integration

Answer: BD

NEW QUESTION 11
To which three bind points can a Citrix Administrator bind a session policy, to enable Clientless access? (Choose three.)

• A. Group
• B. Service
• C. Service Group
• D. User
• E. Virtual server

Answer: BDE

NEW QUESTION 12
Scenario: A Junior Citrix Administrator needs to create a Content Switching virtual server on a NetScaler high availability (HA) pair. The NSIP addresses are 192.168.20.10 and 192168.20.11. The junior administrator connects to NSIP address 192.168.20.10 and saves the changes.
The following day, a Senior Citrix Administrator tries to test the new Content Switching virtual server, but it is NOT working. The senior administrator connects to the HA pair and everything the junior administrator configured is gone.
Why did the NetScalers lose the newly added configurations?

• A. The NetScaler appliances are NOT at the same firmware version
• B. The junior administrator connected to the NSIP of the secondary NetScaler in the HA pair
• C. Both NetScalers in the HA pair restarted overnight, losing the configuration
• D. The junior administrator made the changes and did NOT force a failover to save the configuration

Answer: C

NEW QUESTION 13
Which three services can the StoreFront monitor probe to determine the state of the StoreFront server? (Choose three.)

• A. Default Domain
• B. Discovery
• C. Authentication
• D. Subscription
• E. Account

Answer: BCE

NEW QUESTION 14
How can a Cirtix Administrator configure session policies for the Authentication, Authorization and Auditing Traffic Management (AAA-TM) sessions if the authentication virtual server is specified in a Unified Gateway setup?

• A. The session policies can be defined only for the NetScaler Gateway virtual server.
• B. The AAA-TM session policies are bound to the virtual server.
• C. The AAA-TM sessions inherit the NetScaler Gateway session policies.
• D. The AAA-TM policies need to be bound as default global.

Answer: B

NEW QUESTION 15
How can a Citrix Administrator provide two-factor authentication with tokens in a XenDesktop with NetScaler Gateway environment?

• A. Create a SAML IDP policy and bind it to the existing virtual server.
• B. Configure a TACACS authentication policy and bind it to the existing virtual server.
• C. Configure a RADIUS authentication policy and bind it to the existing virtual server.
• D. Create an authorization policy and bind it to the existing virtual server.

Answer: C

NEW QUESTION 16
In which two ways can a Citrix Administrator configure SmartAccess? (Choose two.)

• A. Enable Workspace Control within StoreFront.
• B. Update XML Service Trust to set-BrokerSite-TrustRequestsSentToTheXMLServicePort $True
• C. Update the XML Service trust in the XenDesktop database manually.
• D. Ensure that the SmartAccess filter name on the Delivery Group matches the NetScaler Gateway policies.

Answer: BD

NEW QUESTION 17
Scenario: A Citrix Administrator is managing a NetScaler SDX running eight NetScaler instances. The administrator first needs to upgrade the firmware on the instances. However, the administrator is concerned that it needs to be done all at once.
What upgrading flexibility does SDX provide in this scenario?

• A. The NetScaler instance can be upgraded at the SDX management level, allowing all instances to be upgraded at once.
• B. The NetScaler instances have to be upgraded at the same time.
• C. The NetScaler instance can be upgraded on an individual basis, allowing all instances to run different firmware versions.
• D. It is NOT possible to upgrade the NetScaler instances to different firmware versions.

Answer: A