Citrix 1Y0-350 NetScaler 10 Essentials and Networking Exam Set 1

Scenario: A network engineer configured a new NetScaler MPX appliance without any VLANs and with a single interface connected to the network. The engineer has not completed any other configurations. The interface is then accidentally disabled and contact is lost with the appliance. Which two actions can the network engineer take to restore communications to the appliance?


Options are :

  • Connect to the SNIP instead of the NSIP.
  • Connect a crossover cable to the port that has been disabled and connect to the NSIP.
  • Use the serial port to connect and then bring the disabled interface online.
  • Connect another of the unused interfaces.

Answer : Use the serial port to connect and then bring the disabled interface online. Connect another of the unused interfaces.

Citrix 1Y0-350 NetScaler 10 Essentials and Networking Exam Set 2

During a recent security penetration test, several ports on the management address were identified as providing unsecured services. Which two methods could the network engineer use to restrict these services?


Options are :

  • Create Access Control Lists (ACLs).
  • Create Content Filtering policies.
  • Configure options on the Management IP addresses.
  • Configure Auditing policies.

Answer : Create Access Control Lists (ACLs). Configure options on the Management IP addresses.

Scenario: A network engineer adds a secondary node for high availability (HA) purposes. To confirm the implementation is working, the engineer initiates a fail over; however when this is complete, some virtual servers are un-reachable. What is a possible cause of this issue?


Options are :

  • The network configuration is mismatched on the nodes.
  • SSL has not been enabled as a feature.
  • The nsroot password has been changed on the new node.
  • HA sync does not propagate network settings by default.

Answer : The network configuration is mismatched on the nodes.

Which two response codes and pages can be cached on the NetScaler using Integrated Caching?


Options are :

  • 302 Found pages
  • 400 Bad request
  • 500 Internal server error
  • 401 Unauthorized
  • 404 Not found pages

Answer : 302 Found pages 404 Not found pages

1Y0-200 Managing Citrix XenDesktop 7 Solutions Exam Set 1

cenario: A NetScaler engineer has received an SSL certificate and bound it to the vServer. However, users are unable to browse to the website using HTTPS. When the NetScaler engineer browses to the site using HTTPS, the engineer notices that the certificate chain is incomplete. Which two steps should the administrator take to fix the virtual server?


Options are :

  • Link the SSL Certificate to the Intermediate Certificate.
  • Install the Intermediate Certificate from the CA
  • Install a new Certificate Authority (CA).
  • Generate a new CSR
  • Link the Intermediate Certificate to the virtual server.

Answer : Link the SSL Certificate to the Intermediate Certificate. Install the Intermediate Certificate from the CA

When binding a certificate to a virtual server, which two certificate formats are supported by NetScaler?


Options are :

  • DER
  • PEM
  • P7B
  • PFX

Answer : DER PEM

When configuring an advanced HTTP callout based on attributes, what are two valid parameters?


Options are :

  • SSL cipher type
  • URL stem expression
  • Gateway address
  • IP address and port
  • Down state flush

Answer : URL stem expression IP address and port

1Y0-200 Managing Citrix XenDesktop 7 Solutions Exam Set 2

A security test has been completed on an SSL offload implementation and it has been determined that the certificate key length is too short and must be increased. Which two steps must the network engineer complete to resolve this?


Options are :

  • Add a new SSL policy to the SSL offload virtual server.
  • Bind the certificate to an SSL service group.
  • Use the “Client certificate wizard” to generate a CSR, request a certificate and import.
  • Use the “Server certificate wizard” to generate a CSR, request a certificate and import.
  • Bind the certificate to an SSL Offload virtual server.

Answer : Use the “Server certificate wizard” to generate a CSR, request a certificate and import. Bind the certificate to an SSL Offload virtual server.

An engineer should use the filter (content filtering) feature to prevent __________ and __________. (Choose the two correct options to complete the sentence.)


Options are :

  • a client from a specific VLAN ID to access resources on the NetScaler
  • a client from accessing a specific IP on the back-end
  • inappropriate MSSQL commands from being sent to your SQL server
  • the use of unauthorized HTTP methods
  • inappropriate HTTP headers from being sent to your Web server

Answer : the use of unauthorized HTTP methods inappropriate HTTP headers from being sent to your Web server

Scenario: A network engineer has created an SSL offload virtual server. The virtual server shows as a DOWN state. Which two scenarios could cause the virtual server showing as DOWN?


Options are :

  • The protocol should be SSL_TCP.
  • A responder policy has been bound.
  • No SSL certificate is bound to the virtual server.
  • Persistence is set to NONE.
  • The service is not bound to the virtual server.

Answer : No SSL certificate is bound to the virtual server. The service is not bound to the virtual server.

1Y0-200 Managing Citrix XenDesktop 7 Solutions Exam Set 3

Which two compression actions could a NetScaler engineer use?


Options are :

  • compress
  • bzip2
  • pack200-gzip
  • deflate

Answer : compress deflate

Scenario: A network engineer needs to implement high availability (HA) for a pair of NetScaler appliances. The existing appliance was recently restarted and the new appliance has been rack mounted and turned on for several weeks waiting to be configured. The engineer needs to create an HA pair, but is concerned that his original appliance will get erased when the HA pair is created. Which two tasks could the engineer do before the creation of the HA pair to ensure that the exiting unit stays the main appliance?


Options are :

  • Ensure that INC mode is enabled during creation of HA Pair.
  • Enable HA Sync before adding the second node.
  • Set StayPrimary on the existing node.
  • Create a Route Monitor to ensure proper synchronization.
  • Configure StaySecondary on the new node.

Answer : Set StayPrimary on the existing node. Configure StaySecondary on the new node.

A network engineer has enabled BGP routing. Which two additional features should the network engineer enable for BGP routing to function?


Options are :

  • MAC based forwarding
  • Dynamic routing
  • Layer 3 mode
  • Layer 2 mode

Answer : Dynamic routing Layer 3 mode

1Y0-200 Managing Citrix XenDesktop 7 Solutions Practice Exam Set 1

Which two virtual server types could have a compression policy bound to them?


Options are :

  • HTTP
  • SSL
  • DNS
  • SSL_TCP

Answer : HTTP SSL

Which two parameters in the TCP buffering settings can be controlled by a network engineer?


Options are :

  • buffering size
  • source IP range
  • destination IP range
  • memory size for buffering

Answer : buffering size memory size for buffering

A NetScaler engineer generates a techsupport archive to be sent to Technical Support. Which three of the following pieces of information will be included in the archive file?


Options are :

  • Old Configuration Files
  • Webpage Customizations
  • Hardware Boot sequence
  • Model Number
  • Certificate Revocation List
  • SSL Private Keys

Answer : Old Configuration Files Hardware Boot sequence Model Number

1Y0-200 Managing Citrix XenDesktop 7 Solutions Practice Exam Set 2

A network engineer wants to hide the IP address of the outgoing packets by changing it to the IP of the VIP. Which feature should the administrator use?


Options are :

  • ACL
  • Rewrite
  • PBR
  • RNAT

Answer : RNAT

A network engineer needs to configure Citrix NetScaler to provide Access Gateway services to VLAN 2 using interface 1/1 only, while also using interface 1/2 to provide load balancing services to VLAN 3. How could this result be achieved?


Options are :

  • Enable Layer 3 mode Create a Channel Interface using Interface 1/1 and 1/2 Create 2 VMACs Bind a VMAC to interface 1/1 and 1/2
  • Configure policy-based routing using the Interface option as a filter.
  • Disable layer 2 mode Create 2 untagged VLANs - VLAN 2 and VLAN 3 Bind VLAN 2 to Interface 1/1 Bind VLAN 3 to Interface 1/
  • Disable static route advertisement.

Answer : Disable layer 2 mode Create 2 untagged VLANs - VLAN 2 and VLAN 3 Bind VLAN 2 to Interface 1/1 Bind VLAN 3 to Interface 1/

Scenario: Company Inc. wants to modify the HTTP Server header so that unauthorized users and malicious code CANNOT use the header to identify the software that the HTTP server uses. Which two actions can the engineer take to meet the needs of the scenario?


Options are :

  • Mask the HTTP Server Type on the Server Response.
  • Replace the HTTP Server Type on the Client Request.
  • Add an HTTP Server Type on the Client Request.
  • Delete the HTTP Server Type on the Server Response.

Answer : Mask the HTTP Server Type on the Server Response. Delete the HTTP Server Type on the Server Response.

1Y0-200 Managing Citrix XenDesktop 7 Solutions Practice Exam Set 3

What are two valid ways of checking that a back-end web server is reachable from the NetScaler SNIP address using port 80?


Options are :

  • Bind a HTTP monitor to a service group containing the web server.
  • Run the ping command between the NetScaler and the web server.
  • Run traceroute.
  • Run telnet using the -srcip option.
  • Bind a DNS monitor to a service group containing the web server.

Answer : Bind a HTTP monitor to a service group containing the web server. Run telnet using the -srcip option.

What are two ways in which the NetScaler TCP buffering feature improves application performance?


Options are :

  • Buffers the client request
  • Buffers the server response
  • Forwards the response to the client at the speed of the client network
  • Forwards the request to the server at the speed of the server network

Answer : Buffers the server response Forwards the response to the client at the speed of the client network

The network engineer is investigating issues and suspects that one of the administrators recently changed the NetScaler configuration. Which command could the engineer run to check the logs that will contain such details?


Options are :

  • nsconmsg -K newnslog -d stats
  • nsconmsg -K newnslog -d stats -d current
  • nsconmsg -K /var/nslog/newnslog -d event
  • nsconmsg -K /var/nslog/newnslog -d consmsg

Answer : nsconmsg -K /var/nslog/newnslog -d event

1Y0-200 Managing Citrix XenDesktop 7 Solutions Practice Exam Set 4

Scenario: A network engineer plans to configure an Active Directory Server as the default authentication for a NetScaler deployment and provide users with the option to change their password if it is expired. Which two actions should the engineer take to configure this authentication requirement on the NetScaler system?


Options are :

  • Select security type as SSL on Authentication policy.
  • Configure a pre-authentication policy.
  • Configure Authentication server with allow password change option.
  • Configure Authentication server with SSO name attribute.

Answer : Select security type as SSL on Authentication policy. Configure Authentication server with allow password change option.

Scenario: A network engineer deployed a new NetScaler MPX appliance on the network and all interfaces are connected to the core switch. The network engineer notices the CPU utilization has become very high on the switch since the NetScaler deployment. Which two actions could the engineer perform on the NetScaler to resolve this issue?


Options are :

  • Utilize static routing
  • Configure a channel
  • Connect a single interface only
  • Configure VMAC

Answer : Configure a channel Connect a single interface only

Scenario: The NetScaler has been connected to two external networks provided by different Internet Service Providers (ISPs). Dynamic routing is not enabled. Traffic is expected to use the first ISP (through the 10.50.1.1 router) if possible and the second, slower ISP (through the 10.51.1.1 router) only if the Primary ISP fails. Which two commands could the network engineer execute to configure the routes?


Options are :

  • add route 0.0.0.0 0.0.0.0 10.51.1.1 -cost 10 -monitor arp
  • add route 0.0.0.0 0.0.0.0 10.50.1.1 -cost 5 -monitor PING
  • add route 0.0.0.0 0.0.0.0 10.50.1.1 -cost 15 -msr ENABLED
  • add route 0.0.0.0 0.0.0.0 10.51.1.1 -cost 3 -monitor PING-DEFAULT

Answer : add route 0.0.0.0 0.0.0.0 10.51.1.1 -cost 10 -monitor arp add route 0.0.0.0 0.0.0.0 10.50.1.1 -cost 5 -monitor PING

1Y0-200 Managing Citrix XenDesktop 7 Solutions Practice Test Set 1

When configuring NetScaler authentication to access a web site, which two things should a network engineer verify in the environment?


Options are :

  • One DNS server exists.
  • AAA is enabled.
  • A traffic management virtual server exists.
  • A Keytab file is available.
  • An authentication virtual server exists.

Answer : AAA is enabled. An authentication virtual server exists.

Scenario: A network engineer is managing a NetScaler environment that has two NetScaler devices running as a high availability pair. The engineer must upgrade the current version from NetScaler 9 to NetScaler 10. Which action must the engineer take?


Options are :

  • Upgrade the primary node and perform HA sync.
  • Upgrade the primary node and then upgrade the secondary node
  • Upgrade the secondary node and then upgrade the primary node.
  • Break the high availability pair, upgrade each NetScaler device, and then reconfigure high availability.

Answer : Upgrade the secondary node and then upgrade the primary node.

1Y0-200 Managing Citrix XenDesktop 7 Solutions Practice Test Set 2

A company wants to implement a policy where all passwords should be encrypted while transiting the network. Where in the GUI would the network engineer prevent access to unsecured management protocols?


Options are :

  • Protection Features -> Filter
  • System -> Auditing
  • Network -> IPs
  • AppExpert -> Pattern Sets

Answer : Network -> IPs

Scenario: A NetScaler engineer needs to enable access to some web servers running on an IPv6-only network. The clients connecting the services are on an IPv4 network. The engineer has already enabled IPv6 on the NetScaler. What does the engineer need to do in order to provide access to the services on the IPv6 network?


Options are :

  • Create a IPv4 virtual server and bind the service group to it.
  • Create an IPv6 tunnel and a IPv4 virtual server.
  • Configure an IPv6 VLAN and bind the required interface.
  • Create an IPv6 ACL and a IPv4 virtual server and bind the ACL to the virtual server.

Answer : Create a IPv4 virtual server and bind the service group to it.

Some SSL certificate files may be missing from a NetScaler appliance. Which directory should an engineer check to determine which files are missing?


Options are :

  • /nsconfig/ssl
  • /nsconfig/ssh
  • /var/netscaler/ssl/
  • flash/nsconfig/

Answer : /nsconfig/ssl

1Y0-200 Managing Citrix XenDesktop 7 Solutions Practice Test Set 3

Comment / Suggestion Section
Point our Mistakes and Post Your Suggestions