Citrix 1Y0-351 NetScaler 10.5 Essentials and Networking Exam Set 9

Scenario: A network engineer would like to prevent blacklisted remote clients from accessing NetScaler hosted application services. An IP address blacklist database is maintained by an external company and available to query over the Internet. The engineer would like to reject any connections from IP addresses that are contained in the blacklist. What could the engineer configure to achieve this goal?


Options are :

  • SSL certification revocation list check
  • URL transformation
  • SSL offload
  • HTTP callout

Answer : HTTP callout

Citrix 1Y0-371 Designing Deploying Managing Citrix Exam Set 1

Scenario: A network engineer plans to configure an Active Directory Server as the default authentication for a NetScaler deployment and provide users with the option to change their password if it is expired. Which two actions should the engineer take to configure this authentication requirement on the NetScaler system?


Options are :

  • Configure a pre-authentication policy.
  • Configure Authentication server with allow password change option.
  • Select security type as SSL on Authentication policy.
  • Configure Authentication server with SSO name attribute.

Answer : Configure Authentication server with allow password change option. Select security type as SSL on Authentication policy.

A network engineer wants to configure a NetScaler for load balancing Voice over IP traffic (VoIP). Which hash method is the best fit for VoIP traffic?


Options are :

  • Domain name
  • Source IP
  • Call ID
  • Destination IP

Answer : Call ID

A network engineer is trying to read a nstrace from the NetScaler but can only see encrypted traffic. Which file is required to decrypt the network trace?


Options are :

  • The private key for the server certificate
  • The private key for the server root certificate
  • The server certificate
  • The servers root certificate

Answer : The private key for the server certificate

1Y0-200 Managing Citrix XenDesktop 7 Solutions Exam Set 1

Scenario: A network engineer configured a new NetScaler MPX appliance without any VLANs and with a single interface connected to the network. The engineer has not completed any other configurations. The interface is then accidentally disabled and contact is lost with the appliance. Which two actions can the network engineer take to restore communications to the appliance?


Options are :

  • Connect another of the unused interfaces.
  • Use the serial port to connect and then bring the disabled interface online.
  • Connect a crossover cable to the port that has been disabled and connect to the NSIP.
  • Connect to the SNIP instead of the NSIP.

Answer : Connect another of the unused interfaces. Use the serial port to connect and then bring the disabled interface online.

Scenario: A NetScaler engineer configured a service and server for RADIUS authentication.To ensure that the RADIUS service is available and responding to authentication requests, the engineer has added the NetScaler built-in monitor to the service. On inspecting the RADIUS sevice the engineer notices it is marked as DOWN. What cold be causing this issue?


Options are :

  • There is no built-in monitor available to monitor RADIUS.
  • RADIUS accounting must be enabled under the server.
  • The built-in monitor has been changed.
  • The NetScaler-owned IP address has not been added to the RADIUS database.

Answer : The NetScaler-owned IP address has not been added to the RADIUS database.

A network engineer selected the option on a SSL certificate to provide notification upon expiration of the certificate; however when a certificate expires, NO notification is sent to the engineer. Which step could the engineer take to enable notification?


Options are :

  • Ensure that the certificate is linked to a Root certificate.
  • Configure SNMP.
  • Enable the SSL offload feature.
  • Create a SSL policy.

Answer : Configure SNMP.

1Y0-200 Managing Citrix XenDesktop 7 Solutions Exam Set 2

A NetScaler engineer generates a techsupport archive to be sent to Technical Support.Which three of the following pieces of information will be included in the archive file?


Options are :

  • Model Number
  • Certificate Revocation List
  • SSL Private Keys
  • Hardware Boot sequence
  • Webpage Customizations
  • Old Configuration Files

Answer : Model Number Hardware Boot sequence Old Configuration Files

Which two compression actions could a NetScaler engineer use?


Options are :

  • bzip2
  • compress
  • deflate
  • pack200-gzip

Answer : compress deflate

A network engineer has been tasked with identifying the cause of intermittent network connectivity issues. Which command should the engineer use to generate the necessary network information required to diagnose the connectivity issues?


Options are :

  • nslog
  • nstrace
  • nsumon
  • nsconmsg

Answer : nstrace

1Y0-200 Managing Citrix XenDesktop 7 Solutions Exam Set 3

A security test has been completed on an SSL offload implementation and it has been determined that the certificate key length is too short and must be increased. Which two steps must the network engineer complete to resolve this?


Options are :

  • Bind the certificate to an SSL Offload virtual server.
  • Use the "Server certificate wizard" to generate a CSR, request a certificate and import.
  • Bind the certificate to an SSL service group.
  • Add a new SSL policy to the SSL offload virtual server.
  • Use the "Client certificate wizard" to generate a CSR, request a certificate and import.

Answer : Bind the certificate to an SSL Offload virtual server. Use the "Server certificate wizard" to generate a CSR, request a certificate and import.

What should a network engineer do to prevent unauthorized users from using the root user account?


Options are :

  • Reset the nsroot account.
  • Bind a policy to the root user account.
  • Create an authorization policy.
  • Change the nsroot password.

Answer : Change the nsroot password.

When binding a certificate to a virtual server, which two certificate formats are supported by NetScaler?


Options are :

  • P7B
  • PFX
  • PEM
  • DER

Answer : PEM DER

1Y0-200 Managing Citrix XenDesktop 7 Solutions Practice Exam Set 1

When configuring NetScaler authentication to access a web site, which two things should a network engineer verify in the environment?


Options are :

  • One DNS server exists.
  • AAA is enabled.
  • A Keytab file is available.
  • A traffic management virtual server exists.
  • An authentication virtual server exists.

Answer : AAA is enabled. An authentication virtual server exists.

Scenario: Company Inc. wants to modify the HTTP Server header so that unauthorized users and malicious code CANNOT use the header to identify the software that the HTTP server uses. Which two actions can the engineer take to meet the needs of the scenario?


Options are :

  • Add an HTTP Server Type on the Client Request.
  • Delete the HTTP Server Type on the Server Response.
  • Mask the HTTP Server Type on the Server Response.
  • Replace the HTTP Server Type on the Client Request.

Answer : Delete the HTTP Server Type on the Server Response. Mask the HTTP Server Type on the Server Response.

Scenario: A NetScaler appliance currently has a manually configured channel containing four interfaces; however, the engineer has been told that the NetScaler must now only use a single interface for this network. The engineer removes the channel and immediately notices a decrease in network performance.How could the engineer resolve this issue?


Options are :

  • Disable HA monitoring on the three interfaces that are no longer required
  • Disable the unused interfaces
  • Enable flow control on all interfaces
  • Reset the unused interfaces

Answer : Disable the unused interfaces

1Y0-200 Managing Citrix XenDesktop 7 Solutions Practice Exam Set 2

Scenario: An engineer has a NetScaler system with NSIP 192.168.10.1 with subnet mask 255.255.0.0. The company changed the IP network to use subnet mask 255.255.255.0. Which two commands could the engineer run to modify the subnet mask of the NSIP?


Options are :

  • set ns ip
  • add ns ip
  • ifconfig
  • configns

Answer : set ns ip configns

An network engineer is asked to perform an export of the captured trace output files as requested by Citrix Tech support. In which directory could the engineer retrieve the captured log files in the NetScaler system?


Options are :

  • /var/nstrace
  • /netscaler/log
  • /var/log
  • /nsconfig/trace

Answer : /var/nstrace

Scenario: The NetScaler has been connected to two external networks provided by different Internet Service Providers (ISPs). Dynamic routing is not enabled. Traffic is expected to use the first ISP (through the 10.50.1.1 router) if possible and the second, slower ISP (through the 10.51.1.1 router) only if the Primary ISP fails. Which two commands could the network engineer execute to configure the routes?


Options are :

  • add route 0.0.0.0 0.0.0.0 10.50.1.1 -cost 15 -msr ENABLED
  • add route 0.0.0.0 0.0.0.0 10.51.1.1 -cost 3 -monitor PING-DEFAULT
  • add route 0.0.0.0 0.0.0.0 10.51.1.1 -cost 10 -monitor arp
  • add route 0.0.0.0 0.0.0.0 10.50.1.1 -cost 5 -monitor PING

Answer : add route 0.0.0.0 0.0.0.0 10.51.1.1 -cost 10 -monitor arp add route 0.0.0.0 0.0.0.0 10.50.1.1 -cost 5 -monitor PING

1Y0-200 Managing Citrix XenDesktop 7 Solutions Practice Exam Set 3

Scenario: A network engineer needs to re-configure the NetScaler to utilize two new VLANs - VLAN2 and VLAN3. VLAN2 is an untagged VLAN and VLAN3 will require a .1q compliant tag. Interface 1/1 is the only interface that will be used on the NetScaler. How could the engineer configure the NetScaler so that it can communicate with both networks?


Options are :

  • Change the NSVLAN to 3 Add VLAN 2 and bind interface 1/1 as untagged
  • Add VLAN2 and bind interface 1/1 as untagged Add VLAN3 and bind interface 1/1 as tagged
  • Enable the Tag all VLANs option on interface 1/1.
  • Add a SNIP for each VLAN Enable management access on the SNIP for VLAN3

Answer : Add VLAN2 and bind interface 1/1 as untagged Add VLAN3 and bind interface 1/1 as tagged

Scenario: A company has three HTTP servers that are load balanced using NetScaler. When users connect to the HTTP application they often receive inconsistent data or are advised that they need to log on again. Which step should the engineer take to correct this?


Options are :

  • Configure persistence with appropriate timeouts.
  • Change the global TCP Client Idle Time-Out value.
  • Remove Down State Flush.
  • Change the idle timeout value for the service.

Answer : Configure persistence with appropriate timeouts.

Which two parameters in the TCP buffering settings can be controlled by a network engineer?


Options are :

  • destination IP range
  • buffering size
  • memory size for buffering
  • source IP range

Answer : buffering size memory size for buffering

1Y0-200 Managing Citrix XenDesktop 7 Solutions Practice Exam Set 4

An engineer should use the filter (content filtering) feature to prevent __________ and __________.


Options are :

  • a client from a specific VLAN ID to access resources on the NetScaler
  • the use of unauthorized HTTP methods
  • inappropriate HTTP headers from being sent to your Web server
  • inappropriate MSSQL commands from being sent to your SQL server
  • a client from accessing a specific IP on the back-end

Answer : the use of unauthorized HTTP methods inappropriate HTTP headers from being sent to your Web server

Scenario: A network engineer needs to implement high availability (HA) for a pair of NetScaler appliances. The existing appliance was recently restarted and the new appliancehas been rack mounted and turned on for several weeks waiting to be configured. The engineer needs to create an HA pair, but is concerned that his original appliance will geterased when the HA pair is created.Which two tasks could the engineer do before the creation of the HA pair to ensure that theexiting unit stays the main appliance?


Options are :

  • Enable HA Sync before adding the second node.
  • Configure StaySecondary on the new node.
  • Set StayPrimary on the existing node.
  • Create a Route Monitor to ensure proper synchronization.
  • Ensure that INC mode is enabled during creation of HA Pair.

Answer : Configure StaySecondary on the new node. Set StayPrimary on the existing node.

The network engineer is investigating issues and suspects that one of the administrators recently changed the NetScaler configuration. Which command could the engineer run to check the logs that will contain such details?


Options are :

  • nsconmsg -K /var/nslog/newnslog -d event
  • nsconmsg -K /var/nslog/newnslog -d consmsg
  • nsconmsg -K newnslog -d stats -d current
  • nsconmsg -K newnslog -d stats

Answer : nsconmsg -K /var/nslog/newnslog -d event

1Y0-200 Managing Citrix XenDesktop 7 Solutions Practice Test Set 1

When configuring an advanced HTTP callout based on attributes, what are two valid parameters?


Options are :

  • IP address and port
  • URL stem expression
  • SSL cipher type
  • Gateway address
  • Down state flush

Answer : IP address and port URL stem expression

What are two ways in which the NetScaler TCP buffering feature improves application performance?


Options are :

  • Buffers the server response
  • Buffers the client request
  • Forwards the response to the client at the speed of the client network
  • Forwards the request to the server at the speed of the server network

Answer : Buffers the server response Forwards the response to the client at the speed of the client network

Scenario: A network engineer adds a secondary node for high availability (HA) purposes. To confirm the implementation is working, the engineer initiates a fail over; however when this is complete, some virtual servers are un-reachable. What is a possible cause of this issue?


Options are :

  • HA sync does not propagate network settings by default.
  • The nsroot password has been changed on the new node.
  • SSL has not been enabled as a feature.
  • The network configuration is mismatched on the nodes.

Answer : The network configuration is mismatched on the nodes.

1Y0-200 Managing Citrix XenDesktop 7 Solutions Practice Test Set 2

Scenario: When the NetScaler was set up, compression was enabled. The network engineer would like to disable compression ONLY for a particular virtual server. How could the engineer accomplish this?


Options are :

  • Disable compression on the services or service groups bound to the virtual server.
  • Uncheck Compression in the system basic features.
  • Create a policy with a NOCOMPRESS action, bound to the global request point.
  • Create a policy with a NOCOMPRESS action, bound the virtual server Compression (request) point.

Answer : Disable compression on the services or service groups bound to the virtual server.

Which type of authentication server could an engineer configure in order to provide the use of RSA token authentication as a permitted authentication method to access a AAA Virtual Server?


Options are :

  • LDAP
  • Negotiate
  • RADIUS
  • SAML

Answer : RADIUS

Comment / Suggestion Section
Point our Mistakes and Post Your Suggestions