Citrix 1Y0-350 NetScaler 10 Essentials and Networking Exam Set 4

An engineer has configured a DNS virtual server on a NetScaler appliance but the monitors are showing DOWN and DNS resolution is failing. Which of the following should the engineer check?


Options are :

  • That a ADNS_TCP service has been configured on the NetScaler
  • Port 53 between the VIP address and the DNS servers is allowed
  • That the load balancing feature has been enabled on the NetScaler
  • Port 53 between the SNIP address and the DNS servers is allowed (Correct)
  • Port 53 between the NSIP address and the DNS servers is allowed

Answer : Port 53 between the SNIP address and the DNS servers is allowed

Scenario: A network engineer has bound four policies to a virtual server as follows: - PolicyA has a priority of 10 - PolicyB has a priority of 20 - PolicyC has a priority of 30 - PolicyD has a priority of 0 Which policy will be evaluated first?


Options are :

  • PolicyC
  • PolicyD (Correct)
  • PolicyA
  • PolicyB

Answer : PolicyD

1Y0-309 Citrix Access Gateway 8.0 Enterprise Edition Test Set 2

Scenario: A network engineer suspects that there is a duplex mismatch in the network configuration. The NSIP address is 10.10.1.206. How can the administrator verify the configuration in this scenario?


Options are :

  • Check for the interface configuration in the GUI. (Correct)
  • Run the show IP 10.10.1.206 command.
  • Run the start nstrace -level 10 command.
  • Run the 'netstat -r' command.

Answer : Check for the interface configuration in the GUI.

A network engineer is trying to read a nstrace from the NetScaler but can only see encrypted traffic. Which file is required to decrypt the network trace?


Options are :

  • The private key for the server certificate (Correct)
  • The servers root certificate
  • The server certificate
  • The private key for the server root certificate

Answer : The private key for the server certificate

An network engineer is asked to perform an export of the captured trace output files as requested by Citrix Tech support. In which directory could the engineer retrieve the captured log files in the NetScaler system?


Options are :

  • /nsconfig/trace
  • /netscaler/log
  • /var/log
  • /var/nstrace (Correct)

Answer : /var/nstrace

1Y0-256 Citrix MetaFrame Presentation Server Practice Exam Set 1

NSROOT is the only account configured with super user rights. In order to initiate the password recovery procedure, the engineer must __________. (Choose the correct option to complete the sentence.)


Options are :

  • logon using SCP and modify ns.conf
  • connect to the physical NetScaler device (Correct)
  • logon using nsrecover/nsroot and reallocate licenses
  • connect using SSH to the NetScaler device

Answer : connect to the physical NetScaler device

Scenario: An organization has recently been penetration-tested by a security company. The findings have indicated that the NetScaler device is responding to requests revealing web server information within the HTTP response headers. Which NetScaler feature can a network engineer use to prevent this information from being leaked to a potential malicious user?


Options are :

  • Web Logging
  • Rewrite (Correct)
  • URL Transformation
  • Responder

Answer : Rewrite

Which step could a network engineer take to prevent brute force logon attacks?


Options are :

  • Configure the Cache redirection policies.
  • Enable the AAA Application feature.
  • Enable the Rate Limiting feature. (Correct)
  • Configure the Access Gateway policies.

Answer : Enable the Rate Limiting feature.

Scenario: A security test has shown that the NetScaler is forwarding IP packets. Company standard operating procedure is that the routers should be the only devices forwarding packets. Which step should the network engineer take to prevent forwarding packets?


Options are :

  • Enable Layer 2 mode.
  • Disable Layer 3 mode. (Correct)
  • Disable Path MTU Discovery.
  • Enable MAC based forwarding.

Answer : Disable Layer 3 mode.

Citrix 1Y0-351 NetScaler 10.5 Essentials and Networking Exam Set 9

A NetScaler is configured with two-factor authentication. A user reported that authentication failed. How can an engineer determine which factor of the authentication method failed?


Options are :

  • Check NSlog.
  • Use nsconmsg.
  • Use cat aaad.debug command. (Correct)
  • Check the dashboard.

Answer : Use cat aaad.debug command.

What is the purpose of the flash cache option in integrated caching?


Options are :

  • To use the flash memory for storage for a specific cache group to improve performance
  • To answer the client request without checking if the object has expired, objects are checked periodically instead
  • To completely wipe a cache group when the targeted selector is hit in the cache
  • To queue simultaneous requests of an object and answer all with the same response from the server (Correct)

Answer : To queue simultaneous requests of an object and answer all with the same response from the server

An engineer has bound three monitors to a service group and configured each of the monitors with a weight of 10. How should the engineer ensure that the members of the service group are marked as DOWN when at least two monitors fail?


Options are :

  • Configure the service group with a threshold of 21.
  • Configure the service group with a threshold of 20. (Correct)
  • Re-configure the weight of each monitor to 5, and configure the service group threshold to 15.
  • Re-configure the weight of each monitor to 0.

Answer : Configure the service group with a threshold of 20.

Citrix 1Y0-992 Meta Frame Presentation Server Feature Exam Set 1

Scenario: A NetScaler engineer is on the phone with Technical Support to troubleshoot an issue. The NetScaler engineer generated a support archive and needs to send the file to the Technical Support Specialist to help resolve the problem with the appliance. In which directory could the engineer retrieve the information?


Options are :

  • /var/tmp/support (Correct)
  • /nsconfig
  • /var/crash
  • /var/nstrace

Answer : /var/tmp/support

How could a network engineer gather detailed network information?


Options are :

  • System node -> Diagnostics -> Start new trace (Correct)
  • System node -> Diagnostics -> Show running vs saved config
  • System node -> Diagnostics -> Call home
  • System node -> Diagnostics -> Show techsupport

Answer : System node -> Diagnostics -> Start new trace

Scenario: Company Inc. wants to tag incoming requests with a header that indicates which browser is being used on the connection. This helps the server keep track of the browsers after the NetScaler has delivered the connections to the back end. The engineer should create __________ actions to __________. (Choose the correct set of options to complete the sentence.)


Options are :

  • responder; separate the client requests
  • responder; filter the browser type on the client header
  • rewrite; insert tags on the client header (Correct)
  • rewrite; insert tags on the server response

Answer : rewrite; insert tags on the client header

1Y0-309 Citrix Access Gateway 8.0 Enterprise Edition Test Set 2

What type of protocol does AppFlow use for reporting?


Options are :

  • UDP (Correct)
  • SSL_TCP
  • TCP
  • HTTP

Answer : UDP

Scenario: A NetScaler environment uses two-factor authentication and the second authentication method is AD. A user logs in to the environment but does NOT receive access to the resources that the user should have access to. How can an engineer determine the AD authentication issue on the NetScaler?


Options are :

  • Use the cat aaad.debug command. (Correct)
  • Check the authorization configuration.
  • Use nsconmsg.
  • Check NSlogs.

Answer : Use the cat aaad.debug command.

A network engineer should enable the Rate Limiting feature of a NetScaler system to mitigate the threat of __________ attack. (Choose the correct option to complete the sentence.)


Options are :

  • source code disclosure
  • Java decompilation
  • brute force logon attacks (Correct)
  • reverse proxying

Answer : brute force logon attacks

Citrix 1Y0-351 NetScaler 10.5 Essentials and Networking Exam Set 6

A network engineer has noted that the primary node in an HA pair has been alternating as many as three times a day due to intermittent issues. What should the engineer configure to ensure that HA failures are alerted?


Options are :

  • LACP
  • SNMP (Correct)
  • Failover Interface Set
  • Route monitors

Answer : SNMP

Scenario: A network engineer monitoring an HTTP service-related issue needs to view only the relevant data pertaining to the service being monitored. The IP address of the back-end service being monitored is 10.10.1.99. The NSIP address is 10.10.1.230. Which command should the engineer execute to monitor data relevant to this issue only in realtime?


Options are :

  • telnet
  • traceroute
  • nsconmsg
  • nstcpdump (Correct)

Answer : nstcpdump

An engineer has bound a policy to a test virtual server. How could the engineer verify that the policy is being applied?


Options are :

  • Monitor the number of hits for the policy (Correct)
  • Ensure the policy has a greater priority value than other policies bound to the test virtual server.
  • Monitor the number of hits for the virtual server.
  • Enable the AppFlow logging option for the virtual server.

Answer : Monitor the number of hits for the policy

Citrix 1Y0-327 Password Manager 4.5 Administration Test Set 5

Scenario: A NetScaler high availability (HA) pair has the following interfaces connected: 1/1 - Test network 1/2 - Production network The network engineer needs to re-cable the test network and wants to ensure that, when the cable is removed, HA fail over does NOT occur unless the production network also goes down. Which step should the engineer take to meet these requirements?


Options are :

  • Set the throughput to 0 for interface 1/1.
  • Bind interfaces 1/1 and 1/2 into a channel, then disable HA monitoring.
  • Configure LACP for interface 1/1.
  • Disable HA monitoring on interface 1/1. (Correct)

Answer : Disable HA monitoring on interface 1/1.

A network engineer is troubleshooting a situation where ARP requests for IPs in other subnets (for example 10.192.12.80) are appearing in the 10.192.8.0/24 subnet. Which command could the engineer run on the NetScaler to verify IP to VLAN bindings?


Options are :

  • show arp
  • show vlan (Correct)
  • show ip
  • netstat -r

Answer : show vlan

Citrix 1Y0-731 Netscaler 8.0 Administration Practice Test Set 3

A network engineer is testing a new load balancing virtual server "test" that has the service group "test-grp" bound to it. Which command could the engineer run to show connection details for the new virtual server?


Options are :

  • show server
  • show services
  • show connectiontable (Correct)
  • show servicegroups

Answer : show connectiontable

A network engineer should use a HTTP-ECV monitor type to control the status of a load balanced web server resource when __________. (Choose the correct option to complete the sentence.)


Options are :

  • checking for multiple HTTP response codes
  • checking for a specific pattern in the HTTP Response header
  • checking for a specific pattern in the HTTP Response body (Correct)
  • wanting to use a customized HTTP Request

Answer : checking for a specific pattern in the HTTP Response body

A network engineer wants to collect performance statistics regarding the traffic between different points in the connection, specifically from client-to-NetScaler and from NetScaler to back-end server, and be able to present this to different analysis tools. Which feature on the NetScaler could the engineer use for this?


Options are :

  • nstrace
  • nsconmsg
  • Syslog
  • AppFlow (Correct)

Answer : AppFlow

Citrix 1Y0-351 NetScaler 10.5 Essentials and Networking Exam Set 9

Scenario: Primary NetScaler (NS1) is licensed for 10000 Maximum ICA users and 305 Access Gateway users. Secondary NetScaler (NS2) is licensed for 10000 Maximum ICA users and five Access Gateway users. From where and which command should a network engineer run to display diagnostics on the licenses?


Options are :

  • From the shell, run 'view license'.
  • From the command-line interface, run 'show license'.
  • From the command-line interface, run 'cat /var/log/license.log'.
  • From the shell, run 'more /var/log/license.log'. (Correct)

Answer : From the shell, run 'more /var/log/license.log'.

Scenario: A network engineer has created and bound an UDP-ECV monitor to identify the status of a UDP service. However, no matter what the response is, the service is always marked as UP. A possible cause of this behavior is that the network engineer __________. (Choose the correct option to complete the sentence.)


Options are :

  • forgot to add a receive string (Correct)
  • added a string that is always part of the UDP handshake
  • added a string that is invalid and thus skipped
  • added the string ns_true as receive string

Answer : forgot to add a receive string

How could an engineer configure a monitor to ensure that a server is marked as DOWN if the monitor test is successful?


Options are :

  • Disable Down state flush for the service group
  • Enable the Reverse option for the monitor (Correct)
  • Disable the Health monitoring option for the service group
  • Enable the LRTM option for the monitor

Answer : Enable the Reverse option for the monitor

Citrix 1Y0-327 Password Manager 4.5 Administration Test Set 1

A client is trying to reach a back-end server with an IP address of 10.192.31.5 given the following routing table: Which route would the NetScaler use for this client?


Options are :

  • 7
  • 6 (Correct)
  • 5
  • 1

Answer : 6

A network engineer has been tasked with identifying the cause of intermittent network connectivity issues. Which command should the engineer use to generate the necessary network information required to diagnose the connectivity issues?


Options are :

  • nslog
  • nsconmsg
  • nsumon
  • nstrace (Correct)

Answer : nstrace

Scenario: A network engineer has installed a NetScaler system into their corporate DMZ and would like to provide access to a web server on the internal LAN. The web server will be accessed by external users through the NetScaler. The firewall administrator has opened the relevant ports required on the external and the internal firewall. The engineer notices that the virtual server and services representing the web server are down and the internal web server does NOT appear accessible from the NetScaler. What could be the cause of this?


Options are :

  • A SNIP address has not been added.
  • A URL rewrite policy is not created. (Correct)
  • USIP is not enabled.
  • Client IP Insertion is not enabled.

Answer : A URL rewrite policy is not created.

1Y0-201 Managing Citrix XenDesktop 7.6 Solutions Exam Set 4

Scenario: An engineer has a NetScaler system with NSIP 192.168.10.1 with subnet mask 255.255.0.0. The company changed the IP network to use subnet mask 255.255.255.0. Which two commands could the engineer run to modify the subnet mask of the NSIP?


Options are :

  • ifconfig
  • add ns ip
  • set ns ip (Correct)
  • configns (Correct)

Answer : set ns ip configns

Scenario: An engineer needs to configure a monitor to ensure that each server is tested every 10 seconds and requires that the server pass the test four consecutive times before marking a server as UP. If the test fails, the server should be marked as down for 60 seconds. To configure the monitor, the engineer should configure an interval of 10 seconds, down-time of 60 seconds; __________ as 4; and retries as __________. (Choose the correct set of options to complete the sentence.)


Options are :

  • failure retries; 1
  • success retries; 4
  • failure retries; 4
  • success retries; 1 (Correct)

Answer : success retries; 1

Scenario: A network engineer has configured an HTTP application to be load balanced using a virtual server named Svr1. Users have reported intermittent errors and the engineer has been given the client IP address of an affected user and asked to determine which back end service they are connected to. Using the command-line interface, how could the engineer find this information?


Options are :

  • Show lb vServer Svr1
  • Show lb vServer Svr1 -Summary
  • Show lb persistentSessions Svr1 (Correct)
  • Show system session

Answer : Show lb persistentSessions Svr1

Citrix 1Y0-731 Netscaler 8.0 Administration Practice Exam Set 1

A network engineer should use the Advanced tab when configuring load balancing to enable __________. (Choose the correct option to answer the question.)


Options are :

  • EdgeSight Monitoring
  • SSL offloading
  • Direct Server Return Mode (Correct)
  • Integrated caching

Answer : Direct Server Return Mode

Comment / Suggestion Section
Point our Mistakes and Post Your Suggestions