Citrix-Pass4Sure-1Y0-A21.v by.Apache.62q

Transcription

1 Citrix-Pass4Sure-1Y0-A21.v by.Apache.62q Number: Passing Score: 650 Time Limit: 90 min File Version: Enjoy!

2 Exam A QUESTION 1 An administrator needs to configure a Netscaler owned IP address for server-side connections in an environment where USNIP is globally enabled. What must an administrator do to meet the needs in this scenario? A. Add an IP of type SNIP. B. Ensure USIP mode is globally enabled. C. Configure VIPs instead of SNIPs for the server-side connections. D. Enable USMP mode on the virtual server entities bound to the back-end servers. Correct Answer: A QUESTION 2 In order to prevent configuration errors due to typographical errors and streamline the creation of expressions, an administrator should utilize when creating policies. A. pattern sets B. entity templates C. inline expressions D. named expressions Correct Answer: A QUESTION 3 When viewing the Dashboard, which information would indicate to an administrator that server performance has improved after enabling caching? A. Client connection count increases. B. Server-side request rate increases. C. Client connection count decreases. D. Server-side request rate decreases. QUESTION 4 According to best practices, what are 3 recommended methods for load balancing cache servers on a Netscaler device? (Choose three.) A. URL hash.

3 B. Round Robin. C. Domain hash. D. Least connections. E. Destination IP hash. Correct Answer: BDE QUESTION 5 Scenario: An administrator is configuring two Netscaler systems in a HA pair. The administrator configured LDAP authentication to allow domain administrators to manage the Netscaler appliances and also created an authentication server profile and policy. Afterwards, the administrator plans to verify which groups are extracted upon login by the intended users during testing of the authentication server profile and policy. Which of the following commands from the Netscaler shell will display the extracted groups? A. tail -f/var/log/ns.log B. Cat/tmp/aaad.debug C. nsconmsg -K /var/nslog/newnlog -d event D. nsconmsg -k /ver/nslog -d conmsg Correct Answer: C QUESTION 6 An administrator has noticed degredation in performance from the web servers when delivering secure web applications. Assuming a Netscaler system is deployed to improve performance, which feature must be enabled to allow other acceleration benefits for secure traffic? A. Configure cache redirection. B. Configure load balancing for web servers. C. Configure priority queuing on the Netscaler. D. Configure the SSL offload feature on the Netscaler.

4 QUESTION 7 Scenario: An administrator needs to configure services and virtual servers for connection-based content switching of TCP traffic. The traffic must stay connected when passwing between appliances or servers. Which type of services and virtual servers should the administrator configure for this environment? A. SSL_TCP type of content switching virtual server and TCP type services and virtual server for the Netscaler. B. SSL_TCP type of load balancing for the virtual servers, content switching virtual servers and services for the Netscaler. C. SSL_TCP type of load balancing virtual server and TCP type services and content switching virtual servers for the Netscaler. D. SSL_TCP type of content switching virtual servers and services and TCP type of load balancing virtual servers for the Netscaler. Correct Answer: A QUESTION 8 What should an administrator configure on a Netscaler to remove server-side compression and enable compression on the Netscaler? A. Disable the compression feature (disable ns fea cmp). B. Enable Compress Push Packet (set cmp parameter -cmponpush enabled). C. Enable Allow Server-Side Compression (set cmp parameter -servercmp on). D. Disable Allow Server-Side Compression (set cmp parameter -servercmp off). QUESTION 9 Scenario: An administrator is working with a Citrix consultant to architect and implement a Netscaler solution. They plan to use GSLB and DNS views in the environment. In which two manners can the administrator configure the Netscaler system to be able to configure DNS views that support GSLB records? (Choose two.) A. Configure as a ADNS. B. Configure as a DNS proxy. C. Configure CNAME records. D. Configure as an End resolver. Correct Answer: AB QUESTION 10 An administrator has executed the following commands:

5 enable ns feature lb add service s HTTP 80 add service s HTTP 80 add lb vserver vs1 HTTP :80 However, the administrator notices that the virtual server state is DOWN. Which action must the administrator take to set the virtual server state to UP? A. Set lbvservervsl -state UP B. Bind a monitor to the services C. Set lb vserver vs1 -accessdown yes D. Bind the two services to lb vserver vs1 QUESTION 11 What can an administrator configure to perform a health check for a service (SVC1), which is transferring HTTPS traffic so that a probe is only sent when there is no traffic to the server? A. an HTTP monitor with the secure parameter selected. B. an HTTP monitor with the tranasparent parameter selected. C. an HTTP-Inline with the secure paramenter selected. D. an HTTP-ECV with the transparent parameter selected. Correct Answer: C QUESTION 12 An administrator needs to create a health check that will mark an HTTP service down if the bound monitor probe exceeds 40 milliseconds. How can the administrator create the monitor for this health check using the command line interface? A. set mon monitor-http-1 HTTP -interval 40 milli B. add lb mon monitor-http-1 HTTP -interval 40 milli C. set mon monitor-http-1 HTTP -resptimeout 40 milli D. add lb mon monitor-http-1 HTTP -resptimeout 40 milli QUESTION 13 Which page is displayed to the user if a catch-all policy is NOT defined on a content switching virtual server

6 configured on the Netscaler? A. Users get a HTTP/1/.1 Error B. Users get a Access Denied page C. The policy with the lowest priority gets evaluated D. Users are redirected to the page configured in the RedirectURL parameter of the CSVserver Correct Answer: C QUESTION 14 Scenario: A company has contracts with multiple ISPs and would like to use all of them for internet connections although some ISP routers are faster than others. The company plans to also use a Netscaler for load balancing and failover. What can an administrator configure to ensure that all ISP connections are being used while avoiding retransmission or out-of-order packets in this environment? A. Multiple LANs with ingress rules. B. Link load balancing with destination IP-persistance. C. Round robin load balancing with reverse RNAT configured. D. A load balancing policy with the appropriate preferred IP and preferred port parameters configured. Correct Answer: B QUESTION 15 Scenario: A customer has two data centers in geographically dispersed locations, both serving content for a web-based application. Content for both data centers should always be available. Which method should an administrator use to make content available at all times? A. HA B. GSLB C. Content Switching D. Backup load balancing vservers Correct Answer: B QUESTION 16 Which trap can an administrator configure on a Netscaler so that an alert is sent whenever a SNMP management application that does not have access privledges attempts to access a Netscaler? A. login failure.

7 B. access failure. C. access denied. D. authentication failure. QUESTION 17 Which parameter in a monitor specifies the consecutive number of successful probes required to mark a service as DOWN? A. Retries B. Failure retries C. Success retries D. Response timeout E. Response timeout threshold Correct Answer: E QUESTION 18 Which two options can an administrator leverage when setting the nsroot password during the initial setup of a Netscaler? (choose two) A. The setup wizard B. The passwd command C. The set system user command D. The add nsroot password command Correct Answer: AC QUESTION 19 An administrator needs to configure a monitor to track the health of an IMAP service configured on a Netscaler. Which type of monitor must the administrator configure to back the health of this entity? A. Load B. User C. Inline D. Server Application State Protocol (SASP) Correct Answer: B

8 QUESTION 20 Which qualifer designates the SourceIP of the outgoing packet in a classic policy for Netscaler 9.2? A. RES.HTTP B. RES.SOURCEIP C. RES.IP.SOURCEIP D. RES.HTTP.HEADER Correct Answer: C QUESTION 21 Scenario: A network administrator has setup two Netscalers in HA. However, when the administrator checks the HA nodes, the secondary Netscaler shows as DOWN. Details were gathered from the secondary unit and are displayed below:

9 Given this information, which two options could the administrator do to bring Node 0 to the up state? (Choose two) A. Disable the 1/6 interface. B. Turn off HAMON on 1/6 interface. C. Enable heartbeats on the 1/6 interface. D. Set the trunk parameter to ON for the 1/6 interface. Correct Answer: BC QUESTION 22 A. SSL server and service. B. SSL_TCP virtual server and service. C. SSL_TCP virtual server and TCP service. D. STCP virtual server and SL_TCP service. Correct Answer: C QUESTION 23 Scenario: A specific logging application hosted on one Web server in a farm requires that the client IP address in order to process information correctly in an environment where the Netscaler system is load balancing the web servers; This application is the only one that requires the client IP address to function properly. How should an administrator configure the Client IP header insertion approprietly for this scenario? A. As a global feature B. As an advanced server option C. As advanced service option D. As an advanced virtual server option Correct Answer: C QUESTION 24

10 A. B. C. D. Correct Answer: B QUESTION 25 An administrator has executed the following commands: enable ns feature lb add service s HTTP 80 add service s HTTP 80 addlbvserver s1 HTTP However, the administrator notices the virtual server state is DOWN. Which action must the administrator take to set the virtual server state to UP? A. Set lbvserver vs1-state UP B. Bind a monitor to the services C. Set lb to vserver vs1-accessdown yes D. Bind the two services to the lb vserver vs1 QUESTION 26 Scenario: An administrator has set up the configuration of an HA pair so that each Netscaler application has four connection interfaces. In addition, two pairs of interfaces for each appliance are configured in a link aggregation channel. Which two additional steps should the adminstrator take to setup HA? (Choose two.) A. Configure a route monitor on the Netscaler. B. Disable interfaces that are not connected.

11 C. Enable HA monitoring on the physical interface only. D. Enable HA monitoring on the link aggregation channel. Correct Answer: BD QUESTION 27 Scenario: An events planning company plans to use the content switching feature of the Netscaler to parse traffic so that users purchasing tickets or answering surveys go to group A servers. Users accessing images will go to either group B or C servers depending on the ticket category and all other traffic goes to group D. All of the servers are in the same web farm. Which two actions must an administrator perform to correctly define the content switching virtual server so that traffic NOT going to groups A-C gets direct to group D? (Choose two.) A. Bind a load balancing vserver to the appropriate service for the web farm. B. Bind the approrpriate service to a load balancing virtual server for serving content to group D. C. Bind the appropriate load balancing vserver to the content switching vserver without a policy. D. Bind the appropriate load balancing vserver to the content switching vserver with the appropriate policy for content group D. Correct Answer: BC QUESTION 28 Scenario: An administrator needs to configure a Netscaler so that a set of back-end servers in a LAN can initiate connections to the internet. ACLs are configured in this environment. What must the administrator configure to meet the needs of this scenario? A. NAT on the server in the LAN B. RNAT for the destination IP address C. NAT on the router to the Netscaler D. RNAT for the subnet that includes the LAN IP address E. RNAT on the vservers bound in the LAN QUESTION 29 Scenario: An administrator would like to set an organization's homepage search engine type to display differently based on a user's browser. If a user accesses the homepage from an Internet Explorer browser, then the Bing search engine should be displayed. If a user accesses the hompage using a Google Chrome browser, then the Google search engine should be displayed.

12 Which feature could an administrator use to meet the needs of this scenario? A. Responder B. Rate Limiting C. Priority Queuing D. Content Filtering Correct Answer: A QUESTION 30 What must an administrator configure when adding a new SNMP manager to a Netscaler configuration utility? A. Source port B. SNMP community string C. Source interface number D. SNMP manager IP address E. SNMP trap type (basic and advanced) Correct Answer: B QUESTION 31 A. show node B. show monitor C. show sync status D. show system status Correct Answer: A QUESTION 32 In order to prevent configuration errors from typographical errors and streamline the creation of expressions, an administrator should leverage when creating polices. (Choose an answer to complete the sentence) A. pattern sets B. entity template

13 C. inline expressions D. named expressions Correct Answer: A QUESTION 33 Scenario: An administrator is configuring a Netscaler system in one-armed mode. The administrator has connected two Netscaler appliances to the network through a switch and will soon configure the appliances as a pair with HA enabled. Which two steps should teh administrator take to successfully configure HA in this environment? (Choose two.) A. Disable all unused network interfaces. B. Ensure the NSP is unique on each node. C. Ensure the NSP is identical on each node. D. Change the default nsroot password on each node of the HA pair. Correct Answer: AD QUESTION 34 Scenario: An administrator has set up four web servers for load balancing. The administrator wants to monitor the response codes from the site to determine whether or not the site is up. The administrator has a bound a custom HTTP monitor to the HTTP services. When the monitor is bound, the services go down so the administrator unbinds the monitor to bring the state of the services to UP. The administrator runs a HTTP header traced and finds that the site is responding with a redirect. Which two options can the administrator use to get the service state to UP? (Choose two.) A. Create a new HTTP monitor with a 200 response code and bind it to the service. B. Create a new HTTP monitor with a longer response timeout and bind it to the service. C. Modify the custom HTTP monitor with the same redirect response code the site is sending and bind it to the service. D. Modify the custom HTTP monitor with the HTTP request going to a page that responds with a 200 response code and bind it to the service. Correct Answer: AD QUESTION 35

14 Scenario: An administrator plans to set up a Netscaler in a HA configuration. The two nodes in the HA pair are located on two seperate networks. Which setting must the administrator configure on each node to ensure that both nodes in the HA pair can synchronize configuration and propagate commands? A. Add static route for remote node network B. Add route monitor for remote node network C. Turn on independent router configuration (IRC) D. Turn on independent network configuration mode (INC) QUESTION 36 An administrator must first enable the feature before a URL transformation policy can be used in a network environment. (Choose the correct answer to complete the sentence.) A. rewrite B. responder C. content filtering D. URL transformation Correct Answer: A QUESTION 37 An administrator wants to limit access to the Netscaler GUI and has configured ACLs to acheive this; however, everyone is still able to access the Netscaler GUI. What could be causing this? A. Layer-3 mode is enabled B. TCP buffering is enabled C. The selected ACLs have not been applied/committed D. The ACLs have not be propegated to both netscalers in the HA pair Correct Answer: C QUESTION 38 Scenario: An administrator plans to configure health checks for services bound to web servers 1 and 2, which are listening on TCP port 80 for HTTP and TCP 443 for HTTPS. Service1 receives the clear text traffic and Service2 receives the encrypted traffic. Which type of monitor should the administrator bind to the services to meet the needs of this environment?

15 A. A TCP monitor to Service1 and Service2 B. An HTTP-ECV monitor to Service1 and Service2 C. An HTTPS monitor to Service1 and a HTTP monitor to Service2 D. An HTTP monitor to Service1 and a HTTPS monitor to Service2 QUESTION 39 A network administrator wants to ensure the connection multiplexing is enabled for all client connections that hit a virtual server. Which service type should the administrator select to enable connection multiplexing? A. SSL B. FTP C. TCP D. HTTP Correct Answer: C QUESTION 40 Scenario: A customer logged in as a user with superuser access rights and is making configuration changes on a Netscaler HA pair. After a few minutes, the customer notices that the changes are NOT visible on the GUI or CU. What is the customer doing incorrectly? A. The customer is not using the nsroot account. B. The customer has enabled fail safe on both nodes. C. The customer is making changes on the primary node. D. The customer is making chagnes on the secondary node.

16 QUESTION 41 What can an administrator configure to perform a health check for SVC1, which is transferring HTTPS traffic so that a probe is only sent when there is no traffic to the server? A. An HTTP montior with the secure parameter selected B. An HTTP monitor with the transparent parameter selected C. An HTTP-inline monitor with the secure parameter selected D. An HTTP-ECV monitor with the transparent parameter selected Correct Answer: C QUESTION 42 Scenario: A network administrator working with two Netscaler systems has encountered an issue with HA. The administrator notices that HA synchronization is failing. The administrator has already run the <show node> command on both nodes but needs more inofrmation. Which two additional steps should the administrator take to collect the appropriate data in order to troubleshoot this issue? (Choose two.) A. Collect the files in /var/core B. Collect the files in /var/log/auth.log C. Run show techsupport from both Netscalers D. Run /netscaler/nstrace.sh -sz 0 to gather an nstrace Correct Answer: AD QUESTION 43 Scenario: An administrator is working within a network environment as dpeicted in the attached case study. The Netscaler system in this HA pair need to exchange heartbeat packets over L3 through routers R3 and R4. How can the administrator acheive this HA functionality? Case Study Title (Case Study):

17 A. Enable the dynamic routing feature. B. Configure route health injection. C. Bind a route monitor to each Netscaler device. D. Enable independent network configuration (INC). QUESTION 44 Scenario: An ISP provides SaaS to enterprise customers as part of a cloud offering. A Netscaler is configured to support multi-tenant deployments. Traffic isolation for each enterprise (tenant) is acheived using VLAN segmentation for each enterprise customer. As an example, incoming client requests from enterprise customers are assigned to seperate VLANs. Which feature can an administrator configure to specify that the VIP for customer1 will only listen to requests coming from VLAN1 and the VIP for customer2 will only listen to requests from VLAN2?

18 A. State routes B. Policy-based routing C. MAC-based forwarding D. Network-aware polices Correct Answer: B QUESTION 45 In order to prevent configuration errors from typographical errors and to streamline the creation of expressions, an administrator should leverage when creating policies. (Choose the answer that completes the sentence.) A. pattern sets B. entity templates C. inline expressions D. named expressions Correct Answer: A QUESTION 46 A B C D E Correct Answer: E

19 QUESTION 47 Scenario: An administrator has created and configured services on load balanced vservers. The administrator then enabled the compression feature on a Netscaler deployment using the Configuration Utility. After adding additional services, the administrator decides to check the Dashboard for the compression statistics. However, when looking over the statistics, the administrator notices extremely low count in the policy hit counter. What could be causing the low count in the policy hit counter? A. The administrator did not bind the services to a virtual server. B. The administrator has not restarted the dashboard after enabling the compression feature. C. The administrator has failed to manually enable compression for the services created prior to enabling the compression feature. D. The administrator failed to bind the HTTP services to an SSL load balancing vserver, and failed to bind the SSL services to an HTTP load balancing virutal server. QUESTION 48 When planning a deployment, in which setup scenario must an administrator configure the Netscaler as the default router for servers in the environment? A. When USNF is configured B. In a single subnet configuration C. In a two-arm mode configuration D. USF is configured for services Correct Answer: B QUESTION 49 Scenario: An administrator finished installing a Netscaler appliance and configured a load balancing vserver that has four services bound. The configured load balancing method for the vservers is set to use least connection. THe administrator later added a fifth server to the vserver. However, when testing load balancing, the administrator finds that the vserver is using round robin instead of least connection. Why would the Netscaler be using round robin as the load balancing method instead of least connection? A. The administrator did not save the configuration correctly B. The Netscaler is using slow start mode for the vserver C. Least connection will only function when more than five servers are load balanced D. Least connection is not a load balancing method that can be used for web serverse

20 Correct Answer: B QUESTION 50 The expression <url==txtres http header content-encoding == text/html> can be used for and. (Chose the correct answers to complete the sentence.) A. caching B. compression C. load balancing D. surge protection Correct Answer: AB QUESTION 51 Scenario: An administrator has configured an SNMP manager to allow an engineer with the IP address to perform SNMP queries on the Netscaler. However, the engineer has been promoted to another position and has delegated SNMP management to another engineer who will manage the box from Which two steps are required for the administrator to allow the new engineer to manage the box? (Choose two.) A. Add SNMP Manager B. Add SNMP Community C. Remove SNMP Manager D. Remove SNMP Community Correct Answer: AC QUESTION 52 An administrator is configuring a virtual server for encrypted traffic from clients that need to be decrypted prior to beign forwarded to the back-end servers. Which type of virtual server and service should the administrator configure? A. SSL server and service B. SSL TCP virtual server and service C. SSL TCP virtual server and TCP service D. TCP virtual server and SSL TCP service

21 Correct Answer: C QUESTION 53 A. Set lbvserver vs1 -state UP B. Bind a monitor to the services C. Set vserver vs1-accessdown yes D. Bind the two services to the lb vserver vs1 QUESTION 54 Scenario: A new network administrator has been hired for an organization that already has a Netscaler in place. The new administrator wants to leverage existing application templates to configure new web applications. If the administrator does leverage an application template, which additional step must the administrator take before the application is availble to the users? A. Rename the application template file. B. Import the template using CLI C. Configure the new application units and add them to the application D. Provide new public endpoints and back end services for the application QUESTION 55 An administrator set up a Netscaler pair in HA but later noticed that the configuration changes made on the

22 primary node were NOT synchronized with the secondary node. Which configuration setting must be corrected for successful configuration synchronization between both nodes in HA mode. A. HA monitoring on intrefaces is set to OFF. B. HA monitoring on the node IDs is set to OFF. C. nsroot password is not identifcal for both nodes. D. RPC node password is not identical for both nodes. QUESTION 56 Scenario: An administrator is planning a software upgrade of a Netscaler HA pair from Netscaler 8.1 Standard to 9.2 Enterprise. In order to take advantage of the new features in the current environment, the NSIP for the pair is an IPV4 address. Which two steps must the administrator take to complete the Netscaler migration in this scenario? (Choose two.) A. Obtain a new netscaler license B. Enable the IPV6 protocol translation C. Add the NSP address after the HA pair has been upgraded D. Ensure propagation and synchronization are disabled during the migration Correct Answer: AD QUESTION 57 A. Command syntax is not correct. B. Command not executed with root ID. C. SSL command not available on secondary node. D. SSL certificate is not present on secondary node. QUESTION 58

23 Scenario: An administrator introduced two new servers into a server farm; the servers can handle more traffic than the older servers. The current load balancing method set to least connections. The administrator wants to maintan that load balancing method but alsow ants to use the new servers to improve performance by sending more traffic to the new servers. Which advanced otpion must the administrator configure to acheive this? A. Max Client B. Service Weights C. Backup Virtual Server D. Global Setting Override Correct Answer: B QUESTION 59 A. B. C. D. Correct Answer: C QUESTION 60 In which two ways could an administrator configure a Netscaler system to allow a web server log to record teh original client IP addresses from incoming traffic? (Choose two.) A. USIP B. 1NAT C. USNIP D. Edge Mode E. Client IP insertion Correct Answer: AE

24 QUESTION 61 An administrator has enbaled the load balancing and compression features on a Netscaler system and wants to create a compression policy to compress JavaScript pages using the GZIP format. Which two CU commands must the administrator use to create and associate the policy correctly? (Choose two.) A. rm cmp policy B. set cmp policy C. add smp policy D. bind cmp global Correct Answer: BC QUESTION 62 An administrator needs to configure a Netscaler in a manner that will increase the capacity and availability of a signal communication channel between the Netscaler and another connected device. What should the administrator configure on the Netscaler to acheive this requirement? A. NIC Teaming B. Link Bonding C. Link Aggregation D. Interface Trunk Mode Correct Answer: C