NEW QUESTION 1
Scenario: User authentication is failing through the NetScaler. A Citrix Administrator checked the Authentication, Authorization and Auditing (AAA) policy, action and virtual server and verified that the correct configuration was in place. The administrator bypassed the NetScaler and the authentication worked.
Which NetScaler utility can the administrator use to troubleshoot the access issue?

• A. aaad.debug
• B. Dashboard
• C. nscon message
• D. nslog file

Answer: A

NEW QUESTION 2
Scenario: A Citrix Administrator notices user sessions are disconnecting and reconnecting more often this week than last week, signaling a problem.
The administrator troubleshoots this issue and prepares to resolve it using persistence. However, the following consideration apply in the environment:
The administrator can use persistence based on the ___ setting to resolve this issue. (Choose the correct option to complete the sentence.)

• A. Subnet IP
• B. HTTP Cookies
• C. Proximity
• D. SSL Session IDs

Answer: A

NEW QUESTION 3
Which two options should a Citrix Administrator consider when adding a secondary device in a high availability (HA) pair? (Choose two.)

• A. Configure the HA status of the Primary Node as STAYPRIMARY.
• B. HA Monitoring should be disabled on all the unused interfaces.
• C. Both the devices should have different SNIP addresses.
• D. The nsroot password should be the same on both nodes.
• E. The Independent Network Configuration (INC) mode should be enabled.

Answer: AE

NEW QUESTION 4
Scenario: A Citrix Administrator observes that when the client gets redirected to the URL www.citrix.com/owa/search?q-userbame, an HTTP 503 response is received from the Content Switching vServer.
The relevant configuration is as follows:

How will the administrator correct the issue?

• A. Unbind CS_POL_2
• B. Unbind CS_POL_1
• C. Bind Policy Unbind CS_POL_2 with priority 90
• D. Bind Policy Unbind CS_POL_3 with priority 90

Answer: C

NEW QUESTION 5
Which command should a Citrix Administrator use to configure a Content Switching virtual server for implementing the Secure Web Gateway in the transparent proxy mode?

• A. add cs vserver swgVS PROXY 192.168.10.1 80 –Authn401 on –authnVsName explicit- auth-vs
• B. add cs vserver swgVS PROXY ** –Authn401 on –authnVsName explicit-auth-vs
• C. add cs vserver swgVS PROXY 192.168.10.1 –Authn401 on –authnVsName transparent- auth-vs
• D. add cs vserver swgVS PROXY * 21 –Authn401 on –authnVsName transparent-auth-vs

Answer: C

NEW QUESTION 6
Scenario: A Citrix Administrator has configured the following Access Control List (ACL) to block traffic from the IP address 10.102.29.5.
add simpleacl rule1 DENY –srcIP 10.102.29.5
A week later, the administrator found that the ACL is no longer present on the NetScaler. What could be the reason for this?

• A. The administrator did NOT run the apply ACL command.
• B. The NetScaler has been restarted without saving the configurations.
• C. The Simple ACLs remain active for only 600 seconds.
• D. The Simple ACLs remain active for only 60 seconds.

Answer: A

NEW QUESTION 7
View the Exhibit.

A Citrix Administrator has implemented the HTTP Callout.
Click on the ‘Exhibit’ button to view the screenshot of the command-line interface.
Which part of the configuration is responsible for triggering the call to HTTP Callout server?

• A. –parameters cip(CLIENT.IP.SRC)
• B. sys.http_callout(myCallout1)
• C. –urlStemExpr “”/cgi-bin/check_clnt_from_database.pl”
• D. –headers Request(“Callout Request”)

Answer: D

NEW QUESTION 8
Users are experiencing resets from the Intranet server website, which is load-balanced through the NetScaler.
Which NetScaler tool can a Citrix Administrator use to troubleshoot the reset issue?

• A. Take a packet trace with nstrace and analyze with WireShark.
• B. View the new nslog from the command-line interface (CLI) to look for packet resets from the NetScaler.
• C. Look in the Event Viewer for packet resets from the NetScaler.
• D. Use the nslog to look for packet resets on the NetScaler.

Answer: B

NEW QUESTION 9
Scenario: A Citrix Administrator manages an environment that has multiple websites running through a NetScaler MPX 5550. The NetScaler meets the needs of the environment throughout the year, except in December, when the capacity doubles. The administrator needs to handle this increased web traffic with a temporary, cost-effective solution.
Which action should the administrator recommend in order to handle the increased web traffic?

• A. Purchase a license to upgrade the MPX 5550 to a MPX 5650.
• B. Purchase a BurstPack License.
• C. Purchase Universal License.
• D. Purchase NetScaler Gateway Platform License.

Answer: B

NEW QUESTION 10
A Citrix Administrator needs to block all the DNS requests from subnet 10.107.149.0/24. Which expressions can the administrator use to match the required traffic?

• A. CLIENT.IP.SRC.IN_SUBNET(10.107.149.0/24) && client.UDP.DSTPORT.EQ(53) || client.TCP.DSTPORT.EQ(53)
• B. CLIENT.IP.SRC.IN_SUBNET(10.107.149.0/24) && (client.UDP.DSTPORT.EQ(53) ||client.TCP.DSTPORT.EQ(53))
• C. CLIENT.IP.SRC(10.107.149.0) && (client.UDP.DSTPORT.EQ(53) || client.TCP.DSTPORT.EQ(53))
• D. CLIENT.IP.SRC(10.107.149.0) && client.UDP.DSTPORT.EQ(53) || client.TCP.DSTPORT.EQ(53)

Answer: B

NEW QUESTION 11
Before:
<link rel=”stylesheet” type=”text/css” href=”sheet/abc.css”>
<link rel=”stylesheet” type=”text/css” href=”sheet/xyz.css”>
After:
<link rel=”stylesheet” type=”text/css” href=”sheet/abc.css+ xyz.css”>
Which Front-End Optimization (FEO) action can a Citrix Administrator use to achieve the results above?

• A. Minify CSS
• B. Combine CSS
• C. Inline CSS
• D. Convert linked CSS

Answer: A

NEW QUESTION 12
View the Exhibit.

A Citrix Administrator has configured the commands using the command-line interface. Click on the ‘Exhibit’ button to view the screenshots of the command-line interface. What will be the effect of the rewrite policy, based on the exhibit?

• A. HTTP Header “SSL_parameter: icauser@mylab.lab” will be inserted in every RESPONSE.
• B. HTTP Header “SSL_parameter: icauser@mylab.lab” will be inserted in every REQUEST.
• C. HTTP Header “SSL_parameter: C=IN, ST=KA, O=Mylab, CN=icauser@mylab.lab” will be inserted in every RESPONSE.
• D. HTTP Header “SSL_parameter: C=IN, ST=KA, O=Mylab, CN=icauser@mylab.lab” will be inserted in every REQUEST.

Answer: A

NEW QUESTION 13
A Citrix Administrator needs to utilize the client IP address as the source IP address for the NetScaler to server connections.
Which mode on the NetScaler will the administrator utilize to meet this requirement?

• A. Layer 2 Mode
• B. USNIP
• C. Layer 3 Mode
• D. USIP

Answer: D

NEW QUESTION 14
Scenario: A Citrix Administrator is managing a NetScaler SDX running eight NetScaler instances. The administrator first needs to upgrade the firmware on the instances. However, the administrator is concerned that it needs to be done all at once.
What upgrading flexibility does SDX provide in this scenario?

• A. The NetScaler instance can be upgraded at the SDX management level, allowing all instances to be upgraded at once.
• B. It is NOT possible to upgrade the NetScaler instances to different firmware versions.
• C. The NetScaler instance can be upgraded on an individual basis, allowing all instances to run different firmware versions.
• D. The NetScaler instances have to be upgraded at the same time.

Answer: D

NEW QUESTION 15
View the Exhibit.

A Citrix Administrator has executed the commands in the screenshot on the NetScaler using the command-line interface.
Click on the ‘Exhibit’ button to view the screenshot of the command-line interface.
Which two replacements will be the outcome of executing these commands? (Choose two.)

• A. http:// will be replaced by https:// in the HTTP RESPONSE
• B. https:// will be replaced by http:// in the HTTP RESPONSE
• C. http:// will be replaced by https:// in the HTTP REQUEST
• D. https:// will be replaced by http:// in the HTTP REQUEST

Answer: BD

NEW QUESTION 16
Scenario: An organization has a ‘bring your own device’ (BYOD) policy, so it is NOT feasible to set up proxy settings on each device in the network.
They need to implement NetScaler Secure Web Gateway to intercept all the traffic to block access to URLs serving harmful/insecure content or the URLs that are identified as social networking sites, career, and job search portals.
Which proxy mode of the Secure Web Gateway should be used in this case?

• A. Transparent
• B. Explicit
• C. Advanced
• D. HTTP

Answer: A

NEW QUESTION 17
Scenario: A Citrix Administrator is troubleshooting a NetScaler issue. The administrator
goes to the command line and from the Shell, tails the ns.log to view the log in real time to find the issue. After a few minutes, the administrator noticed that the logs stopped scrolling and the issue was missed.
How can troubleshooting continue using the ns.log?

• A. The ns.log needs to be downloaded to the client machine for full viewing.
• B. The ns.log service has stopped and needs to be restarted.
• C. The ns.log is still runnin
• D. Press ‘Enter’ and the ns.log will resume.
• E. The ns.log has reached its 100 KB limi
• F. Press ‘CTRL+C’ to stop it from running and issue the command “tail-f ns.log” to resume.

Answer: A

NEW QUESTION 18
What are two advantages of using Content Switching for Global Server Load Balancing (GSLB) service selection? (Choose two.)

• A. Apply different load balancing methods on the different subsets of GSLB services in the deployment.
• B. Define a subset of GSLB services with different priorities and specify an order in which the services in the subset are applied to a request.
• C. Ability to bind multiple GSLB vServers with different protocol types under one Content Switching vServer.
• D. Bind multiple GSLB domains or FQDNs to a single GSLB vServer.

Answer: CD

NEW QUESTION 19
POLICY 1:
add rewrite action ACT_1 corrupt_http_header Accept-Encoding add rewrite policy POL_1 HTTP.REQ.IS_VALID ACT_1
POLICY 2:
add rewrite action ACT_2 insert_http_header Accept-Encoding “”identity”” add rewrite policy POL_2 “HTTP.REQ.IS_VALID” ACT_2
How can a Citrix Administrator bind the rewrite policies to the LB vserver lb_vsrv such that POL_2 is evaluated after POL_1 is evaluated successfully?

• A. bind lb vserver lb_vsrv –policyName POL_1 –priority 110 –gotoPriorityExpression NEXT–type REQUESTbind lb vserver lb_vsrv –policyName POL_2 –priority 100–gotoPriorityExpression END –type REQUEST
• B. bind lb vserver lb_vsrv –policyName POL_1 –priority 90 –type REQUESTbind lb vserver lb_vsrv –policyName POL_2 –priority 100 –type REQUEST
• C. bind lb vserver lb_vsrv –policyName POL_1 –priority 90 –gotoPriorityExpression NEXT–type REQUESTbind lb vserver lb_vsrv –policyName POL_2 –priority 100–gotoPriorityExpression END –type REQUEST
• D. bind lb vserver lb_vsrv –policyName POL_1 –priority 90 –gotoPriorityExpression END–type REQUEST bind lb vserver lb_vsrv –policyName POL_2 –priority 80–gotoPriorityExpression NEXT –type REQUEST

Answer: C

NEW QUESTION 20
What is the effect of the set gslb parameter – IdnsprobeOrder DNS PING TCP command in an Active/Active Global Server Load Balancing (GSLB) setup?

• A. The order to calculate the Empty Domain Service (EDS) for Dynamic proximity will be the DNS UDP query followed by the PING and then TCP.
• B. The order to calculate the Round-trip time (RTT) for Dynamic proximity will be the DNS UDP query followed by the PING and then TCP.
• C. The order to calculate the Time to live (TTL) proximity will be the DNS UDP query followed by the PING and then TCP.
• D. The order to calculate the Multiple IP responses (MIR) for Dynamic proximity will be the DNS UDP query followed by the PING and then TCP.

Answer: C

NEW QUESTION 21
Scenario: A Citrix Administrator is running applications on thousands of load-balanced backend servers in a large infrastructure. It is difficult to track and troubleshoot problems due to the large volume of traffic received.
Which feature of NetScaler Management and Analytics System (NetScaler MAS) can the administrator configure to monitor and troubleshoot in detail for an environment of this size?

• A. AppFlow Analytics
• B. Advanced Analytics with Telemetry Node installed
• C. Application Performance Analytics
• D. Application Security Analytics

Answer: B

NEW QUESTION 22
Scenario: A user is attempting to access a web server which is load balanced by the NetScaler using HTTPS. The user received the following message:
SSL/TLS error: You have not chosen to trust “Certificate Authority” the issuer of the server’s security certificate.
What can a Citrix Administrator do to prevent users from viewing this message?

• A. Ensure that the intermediate Certificate is linked to the Root Certificate.
• B. Ensure that the user has the Server Certificate installed.
• C. Ensure that the user has the Certificate’s Public key.
• D. Ensure that the intermediate Certificate is linked to the Server Certificate.

Answer: A

NEW QUESTION 23
Scenario: A Citrix Administrator created an SSL virtual server using only the following commands:
add lb vserver sslvserver SSL 10.102.29.133 444 add service sslsvc1 192.168.0.14 SSL 443
add service sslsvc2 192.168.0.15 SSL 443 bind lb vserver sslvserver sslsvc1
bind lb vserver sslvserver sslsvc2
set ssl vserver sslvserver –ssl3 disabled
The SSL virtual server is currently in a DOWN state.
What could be the reason the SSL virtual server is in a down state?

• A. SSLv3 is disabled.
• B. The SSL Certificate is NOT bound to the virtual server.
• C. The SSL services are NOT on the 10.102.29.X network
• D. The virtual server SSL port is NOT set to port 443.

Answer: C

NEW QUESTION 24
Scenario: A NetScaler appliance is having intermittent issues. A Citrix Administrator is unable to identify the root cause and fix them. The administrator opened a Support ticket and the Engineer assigned to the case requested all the logs and configuration information from the NetScaler.
Which technical support tool can the administrator use to gather all the information on the NetScaler to send to the Support Engineer?

• A. Batch Configuration
• B. Start New Trace
• C. Get Back Trace
• D. Generate Support File

Answer: C

NEW QUESTION 25
......