Citrix 1Y0-351 NetScaler 10.5 Essentials and Networking Exam Set 1

Which two content types are, by default, compressible content on the NetScaler?


Options are :

  • png
  • css
  • html
  • zip
  • jpeg

Answer : css html

Citrix 1Y0-351 NetScaler 10.5 Essentials and Networking Exam Set 10

What is the purpose of binding Certificate Authority (CA) certificates to a virtual server?


Options are :

  • To provide intermediate certificates to the client
  • For client certificate authentication
  • For SSL Offload
  • To validate the server certificate

Answer : For client certificate authentication

Scenario: A NetScaler Engineer connected a new NetScaler MPX appliance to the network. However, some of the interfaces were blocked on the uplink switch. The engineer needs to perform a network packet trace on the NetScaler appliance. For troubleshooting purposes, the engineer needs to separate trace files for each interface. The engineer executed the following command from the NetScaler CLI: start nstrace -perNIC ENABLED However, NetScaler created a single trace file. What should the engineer do to produce separate trace files for each interface?


Options are :

  • Use the nsconmsg command.
  • Specify the nodes parameter.
  • Use the nstracemerge.sh command.
  • Specify the tcpdump parameter.

Answer : Specify the tcpdump parameter.

A NetScaler Engineer is required to use SNMP v3 on a NetScaler instance and needs to use authentication and encryption for all SNMP v3 communication. What are two places where the engineer could set mandatory authentication and encryption?


Options are :

  • SNMP user properties
  • SNMP manager properties
  • SNMP group propertie
  • SNMP trap properties

Answer : SNMP user properties SNMP group propertie

1Y0-200 Managing Citrix XenDesktop 7 Solutions Exam Set 1

What are the supported protocols for management authentication?


Options are :

  • RADIUS, LDAP and TACACS+
  • LOCAL, LDAP, and SAML
  • CERTIFICATE, LDAP and SAML
  • RADIUS, TACACS+ and CERTIFICATE

Answer : RADIUS, LDAP and TACACS+

As a result of connecting two NetScaler interfaces in the same L2 broadcast domain/VLAN (unless link aggregation is configured), the NetScaler will __________. (Choose the correct option to complete the sentence.)


Options are :

  • restart
  • disable one interface
  • cause a network loop
  • disable both interfaces

Answer : cause a network loop

Which tool could a NetScaler Engineer use to monitor client-side rendering times for a Web application that is load-balanced by NetScaler?


Options are :

  • Tcpdump
  • Insight Center
  • NetScaler Dashboard
  • Command Center

Answer : Tcpdump

1Y0-200 Managing Citrix XenDesktop 7 Solutions Exam Set 2

On a NetScaler system, the __________ timeout value will mark any session that has reached the idle timeout for cleanup. (Choose the correct option to complete the sentence.)


Options are :

  • Server
  • NATPCB
  • Client
  • Zombie

Answer : Zombie

Scenario: A NetScaler Engineer has discovered that the object home.php is NOT found in the cache on the system. Below is the relevant configuration: add cache contentGroup cache_content_group_1 -relExpiry 0 add cache policy cache_pol_1 -rule "http.REQ.URL.CONTAINS(\"home.php\")" -action MAY_CACHE - storeInGroup cache_content_group_1 add cache policy cache_pol_2 -rule "http.REQ.METHOD.EQ(\"GET\")" -action NOCACHE add cache policy cache_pol_3 -rule "HTTP.RES.HEADER(\"Set-Cookie\").EXISTS" -action NOCACHE bind cache global cache_pol_1 -priority 90 -gotoPriorityExpression END -type REQ_OVERRIDE bind cache global cache_pol_2 -priority 100 -gotoPriorityExpression END -type REQ_OVERRIDE bind cache global cache_pol_3 -priority 100 -gotoPriorityExpression END -type RES_OVERRIDE The data from the client and the server are as following: GET /home.php HTTP/1.1 Host: www.website.com User-Agent: Mozilla Firefox/3.0.3 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en- us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 300 Connection: keep-alive Date: Thu, 09 Oct 2014 18:25:00 GMT Cookie: sessionid=100xyz HTTP/1.1 200 OK Date: Thu, 09 Oct 2014 18:25:00 GMT Server: Apache/2.2.3 (Fedora) Last-Modified: Wed, 09 Jul 2014 21:55:36 GMT ETag: "27db3c-12ce- 5e52a600" Accept-Ranges: bytes Cache-Control: private, max-age=0 Set-Cookie: sessionid=100xyz; expires=Thu, 09-Oct-2014 18:30:00 GMT; path=/ Content-Length: 119 Connection: close Content-Type: text/html; charset=UTF-8 Why does the object NOT persist in the cache?


Options are :

  • The content group has been configured with relExpiry 0.
  • The response has Set-Cookie.
  • The request is a GET request.
  • The content group is missing a cache selector.

Answer : The response has Set-Cookie.

Scenario: A NetScaler Engineer has received complaints from some users stating that their business applications are running slow. The engineer analyzes the application servers and sees the following CPU utilization: ServerA is utilizing 20% CPU ServerB is utilizing 20% CPU ServerC is utilizing 100% CPU The engineer had set the load-balancing method to round robin but decided to change the load-balancing configuration for the business applications. Which load-balancing method could the engineer use to address this issue?


Options are :

  • Custom Load
  • Least Connections
  • Least Response time
  • Least Packets

Answer : Custom Load

1Y0-200 Managing Citrix XenDesktop 7 Solutions Exam Set 3

Scenario: A NetScaler Engineer configures COOKIEINSERT persistence method for an HTTP VServer named 'myApp'. Many clients do NOT allow the persistence cookie to be set and application sessions fail as a result. All clients are behind a network address translation (NAT) gateway, which will insert the client IP address into an HTTP header called X-Forwarded-For. Which command could the engineer execute to provide persistence for clients while still distributing the requests across the bound services?


Options are :

  • set lb vserver myApp -persistenceType COOKIEINSERT -timeout 0 -cookieName X- Forwarded-For
  • set lb vserver myApp -persistenceType NONE -lb method TOKEN -rule "HTTP.REQ.HEADER(\"X-Forwarded-For\").VALUE(0)
  • set lb vserver myApp -persistenceType NONE -lbmethod SRCIPDESTIPHASH
  • set lb vserver myApp -persistenceType SOURCEIP

Answer : set lb vserver myApp -persistenceType NONE -lb method TOKEN -rule "HTTP.REQ.HEADER(\"X-Forwarded-For\").VALUE(0)

Scenario: A NetScaler Engineer has created an SSL virtual server that utilizes SSL services. The engineer needs to configure certificate authentication from the NetScaler to the backend web services. What should the engineer do to meet the requirements outlined in the scenario?


Options are :

  • Bind a CA Certificate to the SSL Services.
  • Bind a Client Certificate to the SSL Services.
  • Enable Client Authentication and set Client Certificate to mandatory on the virtual server.
  • Create an SSL policy to present the Client Certificate to the web services.

Answer : Bind a Client Certificate to the SSL Services.

Which two certificate formats are supported when creating a certificate key pair on the NetScaler?


Options are :

  • PKCS12
  • PEM
  • PKCS7
  • DER

Answer : PEM DER

1Y0-200 Managing Citrix XenDesktop 7 Solutions Practice Exam Set 1

The upgrade script copies the updated NetScaler kernel file to the __________ NetScaler directory.


Options are :

  • /flash/boot
  • /var
  • /flash
  • /nsconfig

Answer : /flash

Scenario: A website that provides hotel bookings lists each hotel through their membership number on the site URL. For example, the Martello Tower member ID is 6754 and its web presence is at There are 20,000 hotels in the database of the website. The website business owner no longer wants to display the hotel sites for hotel numbers 1- 10000, inclusive. A NetScaler Engineer must configure an appropriate responder page to indicate that these sites are unavailable. Which expression will meet the requirements of the business owner?


Options are :

  • HTTP.REQ.URL.AFTER_STR("hotels").TYPECAST_NUM_T(DECIMAL).BETWEEN(0, 10000)
  • HTTP.REQ.URL.BEFORE_STR("index.html").TYPECAST_NUM_T(DECIMAL).BETWEEN(0, 10000)
  • HTTP.REQ.URL.PATH.GET(1).TYPECAST_NUM_T(DECIMAL).GT(0) && HTTP.REQ.URL.PATH.GET(1).TYPECAST_NUM_T(DECIMAL).LT(10000)
  • HTTP.REQ.URL.PATH.GET(2).TYPECAST_NUM_T(DECIMAL).BETWEEN(0, 10000)

Answer : HTTP.REQ.URL.PATH.GET(2).TYPECAST_NUM_T(DECIMAL).BETWEEN(0, 10000)

A NetScaler Engineer plans to deploy a third-party application that will perform scheduled configuration auditing by using NITRO API with a REST interface. Which management protocol should the engineer enable to allow NITRO API access?


Options are :

  • Telnet
  • HTTP
  • SNMP
  • SSH

Answer : HTTP

1Y0-200 Managing Citrix XenDesktop 7 Solutions Practice Exam Set 2

Traffic to which destination is sourced from the NetScaler IP (NSIP) by default?


Options are :

  • Load-balanced web services
  • Clients on the Internet
  • Load-balanced authentication services
  • NTP servers

Answer : NTP servers

A NetScaler Engineer has created a new custom user monitor script and needs to place it in the NetScaler filesystem for use. Where must the engineer place the custom script so that it is available for use?


Options are :

  • /nsconfig/monitors
  • /netscaler/monitors/perl_mod
  • . /var/nstemp/monitors
  • /netscaler/monitors

Answer : /nsconfig/monitors

What should an engineer configure in an environment where two NetScaler appliances are configured in high availability (HA) mode to prevent both nodes from reporting a state of NOT_UP at the same time?


Options are :

  • Fail-Safe Mode
  • Route Monitors
  • Configuration Synchronization
  • Command Propagation

Answer : Fail-Safe Mode

1Y0-200 Managing Citrix XenDesktop 7 Solutions Practice Exam Set 3

What is the purpose of the SSL Certificate Authority (CA) root certificate during an SSL connection?


Options are :

  • Session Key Exchange
  • Pre Shared Master Secret Generation
  • Server Certificate Signature Verification
  • SSL Cipher Exchange

Answer : SSL Cipher Exchange

Scenario: A web server needs to be load-balanced but the content for the web page is retrieved from different server pools. There is a server pool for images, another for text files, and another for documents. Which NetScaler feature would allow a user to retrieve content from all pools through a single IP address by leveraging the ability of NetScaler to forward traffic based on the incoming request?


Options are :

  • Content Switching
  • Content Filtering
  • Global Server Load Balancing
  • Load Balancing

Answer : Load Balancing

On a load-balancing virtual server with multiple bound services, Redirect URL will be invoked when __________.


Options are :

  • a backup virtual server has been configured
  • the load-balancing virtual server is marked as DOWN
  • one of the bound services is marked as DOWN
  • Health Based Spillover has been configured

Answer : the load-balancing virtual server is marked as DOWN

1Y0-200 Managing Citrix XenDesktop 7 Solutions Practice Exam Set 4

Which feature could a Network Engineer configure in order to restrict client connections to a specific bandwidth limit?


Options are :

  • Rate Limiting
  • Spillover
  • SureConnect
  • Filter Policies

Answer : Rate Limiting

Scenario: NetScaler is configured with a Subnet IP (SNIP) 192.168.1.10/24 on VLAN 1 and a SNIP 172.168.1.50/24 on VLAN 100. VLAN 100 has been properly associated with interface 1/1 and SNIP 172.168.1.50. A user on VLAN 100 is attempting to access a virtual server on 192.168.1.25 and NOT getting a response. After troubleshooting the network, an engineer identifies that asymmetric packet flows are NOT using the right interfaces on the return path to the client. Which NetScaler setting must be enabled to avoid this behavior?


Options are :

  • Layer 2 Mode
  • Layer 3 Mode
  • Direct Route Advertisement
  • MAC-based forwarding (MBF)

Answer : MAC-based forwarding (MBF)

Scenario: A NetScaler Engineer has been tasked with reconfiguring an existing NetScaler deployment. The engineer is currently running a high-availability (HA) pair of NetScaler 10.5 appliances, but the Vice President of IT has requested a more efficient way of preserving and balancing network resources and throughput while having a single point of management for the NetScaler appliances. What should the engineer configure to satisfy the requirements outlined by the Vice President of IT?


Options are :

  • Leave HA enabled and increase bandwidth to both NetScaler nodes.
  • Switch from traditional HA to -INC mode HA.
  • None
  • Break the HA pair and configure three standalone NetScaler nodes.
  • Break the HA pair and configure clustering instead.

Answer : Break the HA pair and configure clustering instead.

1Y0-200 Managing Citrix XenDesktop 7 Solutions Practice Test Set 1

Server Name Indication (SNI) is required when __________. (Choose the correct option to complete the sentence.)


Options are :

  • configuring a content switching SSL VServer with a single domain certificate
  • multiple certificates are used on multiple domains on the same VServer
  • TLS 1.1/1.2 is enabled exclusively
  • a SAN extension certificate is used

Answer : multiple certificates are used on multiple domains on the same VServer

Which service setting would a NetScaler Engineer use in the command-line interface to limit connections to server resources?


Options are :

  • #NAME?
  • #NAME?
  • #NAME?
  • #NAME?

Answer : #NAME?

Scenario: A NetScaler Engineer has enabled the HTTP Compression feature on an existing production NetScaler. The engineer is using the built-in policies. The engineer reviews the HTTP Compression statistics but does NOT see any compression statistic data. What is the likely reason?


Options are :

  • SSL protocol is being used for encryption.
  • Responses with the Content-Length or Chunked header are being sent from the server.
  • "Allow Server side compression" is checked on the NetScaler.
  • The Compression Policy engine is set to default.

Answer : "Allow Server side compression" is checked on the NetScaler.

1Y0-200 Managing Citrix XenDesktop 7 Solutions Practice Test Set 2

Which setting must an engineer ensure is configured before a Subnet IP (SNIP) could be used to communicate with servers on the same network segment?


Options are :

  • USIP mode is enabled
  • USNIP mode is enabled
  • Default gateway is defined
  • Static route is defined

Answer : USNIP mode is enabled

Which statement is true about interface link-state on the NetScaler?


Options are :

  • Interface link-state is controlled by ifconfig in BSD.
  • Interface link-state on both appliances is unaffected by the force failover command.
  • Interface link-state CANNOT be brought down from the NetScaler.
  • Interface link-state is dependent on the HAMON setting.

Answer : Interface link-state CANNOT be brought down from the NetScaler.

Comment / Suggestion Section
Point our Mistakes and Post Your Suggestions