1y0-253 meups v2016-12-19 · pdf fileimplementing citrix netscaler 10.5 for app and desktop...

http://www.gratisexam.com/

1Y0-253_Meups_v2016-12-19_

Number: 1Y0-253Passing Score: 800Time Limit: 120 minFile Version: 1.0


1Y0-253

Implementing Citrix NetScaler 10.5 for App and Desktop Solutions

Combination of

Citrix.Testking.1Y0-253.v2015-05-05.by.Clarice.81q

and

Citrix.Realtests.1Y0-253.v2015-05-12.by.Sophia.91q


Exam A

QUESTION 1A Citrix Administrator needs to mask the server name used by a web server, without exposing the web server virtual directory structure.

Which policy should the administrator use to complete this task?


A. Responder

B. Content Filtering

C. Content Switching

D. URL Transformation

Correct Answer: DSection: (none)Explanation

Explanation/Reference:answer is acceptable.

QUESTION 2Scenario: There are two physical servers listening on port 8080. A Citrix Administrator added a third physical server to listen on port 80. The administrator is addingthe third server to the existing load balancing configuration.

Which object does the administrator need to modify to allow traffic on port 80?

A. Server

B. Service

C. Virtual server

D. Service group

Correct Answer: BSection: (none)Explanation


Explanation/Reference:

QUESTION 3In which directory can a Citrix Administrator locate the SSL certificates, certificate keys and root CA files?

A. /var/nslog

B. /var/ns_gui

C. /nsconfig/ssl

D. /var/netscaler

Correct Answer: CSection: (none)Explanation


QUESTION 4Which three steps should a Citrix Administrator take to customize the NetScaler Gateway logon page? (Choose three.)

A. Select Custom within UI Theme.

B. Create customization changes under /nsconfig.

C. Create a tar package of the customization files.

D. Add a copy command to rc.netscaler file within /nsconfig.

E. Create customization changes under /var/ns_gui_custom/ns_gui/vpn.

Correct Answer: ACESection: (none)Explanation

Explanation/Reference:valid answer.

QUESTION 5Scenario: A NetScaler Gateway virtual server is configured for a XenApp infrastructure. The Citrix Administrator is asked to configure monitoring on the NetScalerGateway virtual server to ensure the health and availability of XenApp published applications.

Which monitoring type should the administrator configure?


A. STOREFRONT

B. CITRIX-XD-DDC

C. CITRIX-XML-SERVICE

D. CITRIX-WEB-INTERFACE



QUESTION 6Scenario: A Citrix Administrator has configured Outlook Web Access by means of a Citrix NetScaler AAA virtual server. Users complain that they need to re-authenticate after 30 minutes of inactivity.Users work all day from Outlook Web Access.

Which configuration change should an administrator make to ensure the session is available the entire workday?

A. Session time-out in 480 (minutes).

B. Enable Persistent Cookie Validity in 480 (minutes).

C. Set Client Idle Time-out to 10800 (seconds) on the Outlook Web Access virtual server.

D. Set Client Idle Time-out to 10800 (seconds) on the Outlook Web Access Service (group).



QUESTION 7Scenario: A company website currently has thousands of GIF images. Using the NetScaler, a Citrix Administrator needs to convert the GIFs to PNG format toreduce bandwidth requirements. Which feature on the NetScaler can accomplish this task?

A. Priority Queueing

B. Content Switching

C. Content Accelerator


D. Front End Optimization


Explanation/Reference:to the point answer.

QUESTION 8A Citrix Administrator is upgrading NetScaler 10.1 appliances in a high availability (HA) pair to NetScaler 10.5.

What is the first step to launch the upgrade according to Citrix best practice?


A. Use the NetScaler Configuration Utility on the primary appliance to force HA failover.

B. Execute the installns command on the primary appliance.

C. Use the NetScaler Configuration Utility on the secondary appliance to force HA failover.

D. Execute the installns command on the secondary appliance.



QUESTION 9Which IP address does NetScaler use for Active Directory authentication?

A. Virtual IP (VIP)

B. Client IP (CIP)

C. NetScaler IP (NSIP)


D. Subnet IP (SNIP)


Explanation/Reference:answer is outclass.

QUESTION 10A Citrix Administrator would like to use an existing monitor script included in NetScaler for load balancing TFTP services in a Provisioning Services deployment.

Which monitor type should the administrator choose in order to complete the task?

A. ARP

B. USER

C. TCP-ECV

D. UDP-ECV


Explanation/Reference:genuine answer.

QUESTION 11What should a Citrix Administrator configure in a session profile so that users are able to use WorxWeb on their mobile devices?

A. SSL VPN

B. ICA Proxy

C. Secure Browse

D. Clientless Access




QUESTION 12Scenario: A Citrix Administrator added an Access Control List (ACL) to restrict access to the management IP address of the NetScaler. The administrator is still ableto connect from a disallowed subnet, even though the ACL is enabled.What is a possible reason why the administrator is still able to connect from a disallowed subnet?


A. No VLAN was specified.

B. ACLs are only applied to Virtual IPs (VIPs).

C. The ACL needs to be activated.

D. An established connection was in place.


Explanation/Reference:Explanation:

QUESTION 13Which piece of information is needed by a Citrix Administrator to successfully run the XenMobile Deployment Wizard on the NetScaler Gateway?

A. App Controller FQDN

B. XenDesktop Controller

C. Secure Ticketing Authority

D. XenMobile Device Manager server

Correct Answer: ASection: (none)Explanation



QUESTION 14External users should only be allowed to access an application from devices with a specific registry setting.

What should an administrator configure on the NetScaler to restrict access to the application?

A. LDAP

B. L3 Mode

C. SSL/VPN

D. Endpoint Analysis



QUESTION 15A Citrix Administrator needs to configure a load balanced RADIUS virtual server for authentication on the NetScaler.

Which IP address should the administrator configure on the RADIUS server client configuration?

A. Virtual IP (VIP)

B. NetScaler IP (NSIP)

C. Subnet IP (SNIP)

D. Client IP (CIP)



QUESTION 16Scenario: A backend web server is NOT functioning correctly due to a database related issue. The web server is load balanced by Citrix NetScaler. Due to thedatabase issue, the correct content is NOT being displayed. However the NetScaler is still allowing connections to the web server.

How can a Citrix Administrator prevent this from happening?


A. Create an SQL database user within NetScaler.

B. Create two monitors, one on the webserver that checks on HTTP and one on the database server that checks on TCP.

C. Create an HTTP monitor on the webserver that checks on a pattern that originates from the database within the HTML code.

D. Create an HTTP-ECV monitor on the webserver that checks on a pattern that originates from the database within the HTML code.



QUESTION 17Where in the NetScaler Configuration Utility should a Citrix Administrator configure a load balancing virtual server?


A. System

B. AppExpert

C. Optimization

D. Traffic Management


Explanation/Reference:Navigate to Traffic Management > Load Balancing > Services

QUESTION 18Scenario: A Citrix Administrator configured the following preauthentication policies for NetScaler Gateway.Priority 20 Policy2 bound to virtual serverPriority 10 Policy1 bound to AAA GlobalPriority 10 Policy3 bound to virtual serverPriority 20 Policy4 bound to AAA Global


In which order are the policies applied?

A. Policy2, Policy3, Policy1, Policy4

B. Policy1, Policy2, Policy3, Policy4

C. Policy4, Policy2, Policy1, Policy3

D. Policy3, Policy1, Policy4, Policy2


Explanation/Reference:Preauthentication policy order is always:

User (highest priority)GroupVirtual serverGlobal (lowest priority)

Also: The lower the number, the higher the priority

See also: http://blog.rightsys.com/2014/01/netscaler-session-policy-binding.html

QUESTION 19HDX Insight is used in a 500-user organization that has a single datacenter location with a single Internet service provider.

Which form of Citrix NetScaler redundancy should a Citrix Administrator implement?

A. LACP

B. VRRP

C. Clustering

D. High availability




QUESTION 20Which command can a Citrix Administrator use to see a specific auditing Syslog policy binding?

A. show log

B. show audit

C. show syslog

D. show attribute



QUESTION 21A Citrix Administrator would like to use TCP Profiles to optimize NetScaler Gateway for ICA Access without affecting other load balanced traffic.

The administrator should use the __________ and bind it __________. (Choose the correct option to complete the sentence.)

A. nstcp_default_profile; globally

B. nstcp_default_XA_XD_profile; globally

C. nstcp_default_profile; to the NetScaler Gateway virtual server

D. nstcp_default_XA_XD_profile; to the NetScaler Gateway virtual server



QUESTION 22What is a valid command that a Citrix Administrator can run at the command-line interface to reconfigure the NetScaler IP address?

A. set ns ip

B. config ns

C. add ns ip


D. add ipset



QUESTION 23A Citrix Administrator needs to set up two-factor authentication on NetScaler Gateway for mobile devices.

Which two actions should the administrator take to allow users to log on using mobile devices? (Choose two.)

A. Create a pre-authentication policy

B. Create a RADIUS authentication policy

C. Bind the LDAP policy for primary authentication

D. Bind the RADIUS policy for primary authentication

E. Bind the RADIUS policy for secondary authentication

Correct Answer: BDSection: (none)Explanation


QUESTION 24Scenario: While troubleshooting a license issue on NetScaler, a Citrix Administrator notes the following entry as the root cause:"1:47:12 (CITRIX) SERVER line says HOSTNAME=cag, hostid is HOSTNAME=ns"

In which file would the administrator modify the hostname to resolve this issue?

A. rc.conf

B. ns.conf

C. auth.log

D. aaad.debug

Correct Answer: ASection: (none)


Explanation


QUESTION 25Which tool can be used by a Citrix Administrator, when using the NetScaler Configuration Utility, to collect troubleshooting information to provide to Citrix TechnicalSupport?

A. Get Back Trace

B. Download core files

C. Download trace files

D. Generate support file


Explanation/Reference:https://www.citrix.com/blogs/2012/02/03/netscaler-diagnostics-tech-support-tools/

QUESTION 26Which script should a Citrix Administrator use when creating an Active Directory load balance monitor through the NetScaler?


A. nsldap.pl

B. nssnmp.pl

C. nsntlm-lwp.pl

D. nsbmradius.pl




QUESTION 27Which port exchanges high availability heartbeats?

A. TCP 80

B. TCP 443

C. TCP 3003

D. UDP 3003



QUESTION 28Scenario: A Citrix Administrator has configured NTP Time Servers in the Citrix NetScaler configuration. However, the time is NOT in sync with the NTP Timeservers. The addresses of the servers have been verified.What could be causing this issue?

A. NTP Synchronization state is disabled.

B. NTP Authentication is NOT configured.

C. NTP Server Auto Key is NOT configured.

D. No NTP server is "Set as preferred NTP server".



QUESTION 29Which command is used to verify the authentication process?

A. show aaa user

B. show aaa stats


C. cat aaad.debug

D. set aaa ldapParams



QUESTION 30Which two commands, when run at the command-line interface by a Citrix Administrator, can display interfaces configured for high availability monitoring? (Choosetwo.)

A. show node

B. show status

C. show monitor

D. show interface

E. show hardware

Correct Answer: ADSection: (none)Explanation


QUESTION 31Which two steps must a Citrix Administrator complete to set up an SSL VPN virtual server? (Choose two.)

A. Bind a session policy.

B. Install a certificate-key pair.

C. Bind a certificate-key pair to the virtual server.

D. Configure a Secure Ticketing Authority server.

Correct Answer: BCSection: (none)Explanation



QUESTION 32A Citrix Administrator needs to configure a production website to show a custom message when the virtual server is in a down state.

Which NetScaler function or feature should the administrator use in order to meet this requirement?

A. Rewrite

B. Redirect URL


D. Spillover Backup Action



QUESTION 33In an effort to troubleshoot NetScaler Gateway, a Citrix Administrator needs to capture packets to validate basic traffic flow (IP and port information).

What would the administrator choose to begin collecting data to evaluate under Technical Support Tools using the NetScaler Configuration Utility?

A. Call Home

B. Get back trace

C. Start new trace

D. Generate support file



QUESTION 34Which two ports must a Citrix Administrator open on an internal firewall to allow users to launch desktops through the NetScaler Gateway from a Citrix XenDesktopenvironment in which session reliability is enabled? (Choose two.)


A. 80

B. 443

C. 1494

D. 2598

E. 3001

Correct Answer: CDSection: (none)Explanation


QUESTION 35Which protocol should be used to configure a secure LDAP virtual server for a NetScaler Gateway deployment?

A. SSL

B. DTLS

C. SSL_TCP

D. SSL_BRIDGE



QUESTION 36A Citrix Administrator needs to shorten the URL for users to connect to a StoreFront website without knowing the store name.

Which policy should the administrator use to accomplish this requirement?



A. Rewrite

B. AppQoE

C. Spillover

D. Responder



QUESTION 37Scenario: A Citrix Administrator is required to set up SSL Offloading for all virtual servers. External communication will come in as HTTPS traffic. Communicationfrom the NetScaler to backend web servers will be over HTTP.

In which two ways can the administrator set the protocol to meet the requirements? (Choose two.)

A. Service TypE. SSL

B. Service TypE. TCP

C. Service TypE. HTTP

D. Virtual Server TypE. SSL

E. Virtual Server TypE. HTTP

F. Virtual Server TypE. SSL_TCP



QUESTION 38After performing an upgrade on a high availability pair, a Citrix Administrator notices that all of the virtual servers are down on the secondary appliance.

Which two commands can the administrator use to resolve this issue? (Choose two.)


A. show ha node

B. sync ha files all

C. force ha failover

D. set ha node -hasync enable

E. set ha node -hastatus enable

Correct Answer: DESection: (none)Explanation


QUESTION 39Scenario: A NetScaler Gateway is configured to use RADIUS for authentication. A Citrix Administrator needs to know which NetScaler IP (NSIP) address is used foroutgoing RADIUS traffic.

How can the administrator verify which NSIP is used?

A. Check the ns.log file.

B. Use the ping command.

C. Check the messages log file.

D. Use the nstcpdump.sh command.



QUESTION 40Scenario: A Citrix Administrator is configuring RADIUS as a two-factor authentication solution on the NetScaler. While testing the configuration the administratorobserves that there are no incoming RADIUS requests.

To resolve this issue, the administrator should change the setting of the "RADIUS client IP address" to the __________ address. (Choose the correct option tocomplete the sentence.)

A. Virtual IP (VIP)

B. Client IP (CIP)



D. Global Server Load Balancing IP (GSLB IP)



QUESTION 41Scenario: External users need access to hosted desktops and applications. A Citrix Administrator is instructed to configure access to hosted resources throughNetScaler Gateway.

The administrator should configure ________ settings on the NetScaler Gateway in order to allow users to access the corporate desktop and application storethrough NetScaler Gateway.

A. SOAP Service

B. Citrix XML Service

C. Citrix Wallet Service

D. Secure Ticket Authority



QUESTION 42Scenario: A new software package has been developed at an organization. The organization has hired Field Sales Engineers to accompany Sales Executives whendemonstrating the new software package. The demonstration software is hosted on an internal web server. A Citrix Administrator needs to configure the NetScalerto ensure end-to-end connectivity.

Which feature on the NetScaler must the administrator ensure is enabled to provide secure access from the public network?

A. Sure Connect

B. SSL Offloading

C. Application Firewall

D. Global Server Load Balancing




QUESTION 43Scenario: A Citrix Administrator needs to configure a virtual server to load balance Citrix StoreFront. Corporate policy states that all communication must beencrypted coming into and going out of the NetScaler; however, the administrator needs to inspect the client HTTP header information.

Which type of service and virtual server are needed?

A. SSL service; SSL virtual server

B. HTTP service; SSL virtual server

C. HTTP service; HTTP virtual Server

D. SSL BRIDGE service; SSL_BRIDGE virtual server



QUESTION 44Scenario: A Citrix Administrator needs to restrict access to sensitive financial applications. The applications should be accessible within the internal network, butNOT accessible externally through the NetScaler Gateway.

What should the administrator configure to accomplish this requirement?


A. AAA group


B. Traffic policy

C. Authorization policy

D. SmartAccess policy



QUESTION 45Which two things occur after adding a Subnet IP (SNIP) to a NetScaler which already has a Mapped IP (MIP)? (Choose two.)

A. The NetScaler IP (NSIP) is no longer required.

B. A SNIP will be used in preference to a MIP.

C. Adding a SNIP adds an entry to the routing table.

D. Client machines can use the MIP instead of the Virtual IP (VIP).

Correct Answer: BCSection: (none)Explanation


QUESTION 46What should a Citrix Administrator configure to optimize an internal NetScaler Gateway virtual server when more bandwidth is available for use and other websitesare NOT affected?

A. Windows Scaling within TCP parameters.

B. Max Connections within HTTP parameters.

C. A Net Profile that is applied to the NetScaler Gateway virtual server.

D. Windows Scaling within a TCP Profile that is applied to the NetScaler Gateway virtual server.




QUESTION 47Scenario: A Citrix Administrator has configured two virtual servers (VServer1 and VServer2). The administrator would like to set up the virtual servers so that onlywhen VServer1 is offline, VServer2 will become active.

What should the administrator configure to achieve this goal?

A. Service group

B. Spillover method

C. Backup virtual server

D. Spillover backup action



QUESTION 48A Citrix Administrator needs to validate the session policies that are put in place to differentiate mobile devices from PCs.

Which command, when run from a shell, will allow real time reading of the logs for this specific purpose?

A. nsconmsg -d current -g pol_hits

B. nsconmsg -K /var/nslog/newnslog -d

C. nsconmsg -d current | grep -i rewrite

D. nsconmsg -d current | grep -i responder


Explanation/Reference:valid answer.

QUESTION 49Scenario: A recent security audit identified that communications between the NetScaler Gateway and the STA were NOT secure. A Citrix Administrator was asked


to secure this communication.

What must the administrator install as one of the steps to secure communications between the NetScaler Gateway and the STA?

A. A root certificate on the NetScaler virtual server.

B. A server certificate on the server running the STA.

C. A server certificate from the STA server on the NetScaler virtual server.

D. An HTTPS virtual server on the NetScaler to load balance STA servers.



QUESTION 50Which three parameters are required to create a new cluster instance? (Choose three.)

A. IP address

B. Instance ID

C. Subnet mask

D. Subnet IP address

E. Backplane interface

Correct Answer: ABESection: (none)Explanation


QUESTION 51Scenario: A Citrix Administrator needs to update an SSL certificate that is currently installed and configured. The administrator needs to locate the virtual server onwhich this SSL certificate is configured.

Which option should the administrator select to determine on which virtual server the SSL certificate is configured?

A. Details


B. Cert Links

C. Show Bindings

D. OCSP Bindings



QUESTION 52Which two methods should be used for generating a configuration data and statistics report for evaluation by Citrix? (Choose two.)

A. Run "show callhome" using the command-line interface.

B. Run "show techsupport" using the command-line interface.

C. Click the Call Home link under the Technical Support Tools section in the NetScaler Configuration Utility.

D. Click the Download trace files link under the Technical Support Tools section in the NetScaler Configuration Utility.

E. Click the Generate support file link under the Technical Support Tools section in the NetScaler Configuration Utility.

Correct Answer: BESection: (none)Explanation


QUESTION 53Which NetScaler IP address type is created when the below command is executed at the command-line interface?

add ns ip 192.168.2.1 255.255.255.0



A. Virtual IP

B. Cluster IP

C. Subnet IP

D. Mapped IP

E. GSLB Site IP


Explanation/Reference:exact answer.

QUESTION 54Which two components must a Citrix Administrator configure before GSLB can be configured? (Choose two.)

A. An authoritative DNS

B. A link load balancing method

C. A high availability secondary node

D. A NetScaler Gateway virtual server

Correct Answer: ADSection: (none)Explanation


QUESTION 55Refer to the exhibit.


Scenario: A Citrix Administrator has implemented a remote access solution using NetScaler. The NetScaler is configured to validate user credentials connecting toActive Directory. A user cannot log into a StoreFront store from the Internet with their domain credentials. The administrator reviews the events listed in NetScaler.

Click the exhibit button to view the log.

What is the cause of the issue?

The user entered an incorrect password.

A. The user does NOT belong to the domain administrator group.

B. The Authentication profile on the NetScaler Gateway is incorrect.

C. The user does NOT have permission to access the requested resource.

Correct Answer: C


Section: (none)Explanation


QUESTION 56Which type of connection is used when users launch a XenDesktop published application from Worx Home?

A. VPN only

B. ICA Proxy

C. Micro VPN only

D. ICA through a Micro VPN



QUESTION 57A Citrix Administrator needs to provide users with access to web, SaaS and MDX applications from an external network.

Which Citrix product must the administrator configure and integrate with the NetScaler Gateway to ensure that this requirement is met?

A. Web Interface

B. App Controller

C. Delivery Controller

D. Provisioning Services



QUESTION 58Scenario: A Citrix Administrator would like to delegate administration of the Citrix NetScaler to a Microsoft Active Directory group called "Citrix-NetScaler-Admins".


The group already exists in Active Directory. The Citrix-NetScaler-Admins group must have full-control permission on the Citrix NetScaler to perform their tasks. Theadministrator has successfully configured an LDAP authentication server and authentication policy. The authentication policy is already globally bound.

How should the administrator proceed on the Citrix NetScaler?

A. Create an AAA User called Citrix-NetScaler-Admins and select "External Authentication".

B. Create a group called Citrix-NetScaler-Admins. Make the group a member of the operator command policy.

C. Create a group called Citrix-NetScaler-Admins. Make the group a member of the superuser command policy.

D. Create an AAA group called Citrix-NetScaler-Admins. Create an ALLOW authorization policy and bind it to the Citrix-NetScaler-Admins AAA Group.



QUESTION 59Various users report that while accessing the Citrix NetScaler Gateway virtual server they get an error message that the public SSL certificate is NOT trusted.

Which three steps should a Citrix Administrator take on the NetScaler to resolve this issue? (Choose three.)

A. Import the root certificate.

B. Import the intermediate certificate.

C. Download the root certificate from the vendor.

D. Link the root certificate to the intermediate certificate.

E. Download the intermediate certificate from the vendor.

F. Link the intermediate certificate to the existing server certificate.

Correct Answer: BEFSection: (none)Explanation


QUESTION 60Scenario: A Citrix Administrator is implementing a NetScaler appliance for the first time. All clients will connect from a public network and all servers will reside on aprivate network.


Which deployment mode should the administrator use to implement the NetScaler?

A. Layer 2 (L2) mode

B. Layer 3 (L3) mode

C. Two-arm deployment mode

D. MAC-based forwarding mode



QUESTION 61Which IP address must be unique on each node in a high availability configuration?

A. Virtual IP (VIP)

B. Mapped IP (MIP)

C. Subnet IP (SNIP)

D. NetScaler IP (NSIP)


Explanation/Reference:The primary and secondary NetScaler appliances must be configured with unique NetScaler IP (NSIP) addresses. See also: https://support.citrix.com/article/CTX109013

QUESTION 62Scenario: A company is considering using NetScaler appliances to load balance existing secured web servers. The company compliance policy does NOT allow anyalterations of the SSL sessions between clients and web servers.Which option should a Citrix Administrator configure on the NetScaler virtual server to meet the needs of the company?



A. SSL VPN

B. SSL Bridge

C. SSL Offload

D. SSL Renegotiation



QUESTION 63Which two steps must a Citrix Administrator take to allow additional users to access resources using the NetScaler Gateway Plug-in after the administrator installsthe universal license on the NetScaler Gateway? (Choose two.)

A. Set ICA Proxy to OFF.

B. Configure Citrix Receiver Home Page.

C. Change the authentication AAA settings.

D. Set Single Sign-on with Windows to OFF.

Correct Answer: ACSection: (none)Explanation


QUESTION 64Which two parameters are required for adding a new node to a cluster? (Choose two.)

A. Cluster IP of the new cluster node

B. NetScaler IP of the new cluster node

C. NetScaler IP of the existing cluster node

D. Remote NetScaler user name and password

E. Backplane interface of the existing cluster node




QUESTION 65Scenario: Users report that they are being presented with a certificate error when they attempt to access the remote access website of the company. No changeswere made to the NetScaler certificates recently.

What should the Citrix Administrator check on the NetScaler to identify this issue?

A. Cert Links

B. OCSP Binding

C. Certificate Format

D. Certificate Expiry Date



QUESTION 66Which monitor should a Citrix Administrator configure to monitor a StoreFront server group with SSL enabled?

A. TCP

B. SSL_TCP

C. STOREFRONT with "Secure" checked

D. CITRIX-WEB-INTERFACE with "Secure" checked


Explanation/Reference:add lb monitor storefront_ssl STOREFRONT -storename myStore -storefrontacctservice YES -secure YES. See also: https://docs.citrix.com/en-us/netscaler/11/traffic-management/load-balancing/load-balancing-builtin-monitors/monitor-citrix-sf-services.html


QUESTION 67A Citrix Administrator needs to track load balanced traffic from the NetScaler to separate, individual subnets.

Which IP address should be used to do this?

A. Virtual IP (VIP)

B. Mapped IP (MIP)


D. Subnet IP (SNIP)



QUESTION 68Two StoreFront servers in an environment need to be addressed with a single URL.

Which feature should a Citrix Administrator enable to meet this requirement?

A. SSL VPN

B. Load Balancing

C. Integrated Caching

D. Application Firewall



QUESTION 69A Citrix Administrator receives information that users are having difficulty logging into the NetScaler Gateway Portal, where they access published resources,applications and desktops.

What should the administrator configure on the NetScaler to view these events and identify the cause?


A. Syslog

B. ns.conf

C. AppFlow

D. nsconmsg



QUESTION 70A Citrix Administrator needs to configure two-factor authentication for mobile devices with RSA tokens.Which two policies should the administrator configure to enable this feature? (Choose two.)

A. SSL

B. Local

C. LDAP

D. RADIUS

E. TACACS



QUESTION 71Scenario: A Citrix Administrator created a content switching virtual server. The administrator is unable to bind the load balancing virtual server to the contentswitching virtual server.

Which protocol is being used on the load balancing virtual server that is causing this issue?



A. SSL

B. TCP

C. UDP

D. SSL_Bridge



QUESTION 72Which NetScaler feature will a Citrix Administrator configure in order to redirect all HTTP requests to HTTPS?

A. Rewrite

B. SSL VPN


D. Cache Redirection



QUESTION 73Which two pieces of information are required to create a virtual server? (Choose two.)

A. Port

B. Protocol

C. Subnet Mask

D. Gateway Address

Correct Answer: AB




QUESTION 74Scenario: A company requires two-factor authentication using RSA tokens and Active Directory. The Citrix Administrator configured the following two authenticationpolicies with these parameters:

What should the administrator do to protect the NetScaler Gateway virtual server from an attack against Active Directory?

A. Bind the RSA_policy in Primary Authentication Policies and bind the AD_policy in Secondary Authentication Policies.

B. Bind the AD_policy in Primary Authentication Policies and bind the RSA_policy in Secondary Authentication Policies.

C. Bind the AD_policy and the RSA_policy in Primary Authentication Policies and set the RSA_policy priority higher than the AD_policy.

D. Bind the AD_policy and the RSA_policy in Primary Authentication Policies and set the AD_policy priority higher than the RSA_policy.



QUESTION 75Which setting is required to complete the configuration of a NetScaler Gateway virtual server?

A. DNS

B. Certificate

C. Authorization

D. Content Switching



QUESTION 76


Scenario: A Citrix Administrator has configured access to a StoreFront store through the NetScaler Gateway:

http://FQDN/Citrix/storeweb

When users attempt to access resources using the URL of the gateway, a 404 error is displayed.

What could be causing the error?

A. The URL is case-sensitive.

B. The session policy is missing.

C. The website needs to use HTTPS protocol.

D. The IP address is needed instead of FQDN in the URL.


Explanation/Reference:A: Correct -> NetsScaler is running in a Linux/Unix world. In a Linux/Unix world, URL's can be case-sensitive.B: Incorrect - > Settings for Storefront Web is not found in the policy, but in the profileC: Incorrect - > HTTPS is preferred to access Storefront but it is possible to set HTTP as preferred methodD: Incorrect - > A FQDN is always needed

QUESTION 77A penetration test has been performed against the NetScaler Gateway Virtual IPs (VIPs) resulting in the SSL RC4-based ciphers being flagged.

What should the administrator do to address the vulnerability?

A. Remove all the SSL ciphers from the virtual server.

B. Assign Cipher Group 'ALL' to the NetScaler virtual server.

C. Assign Cipher Group 'HIGH' to the NetScaler virtual server.

D. Assign Cipher Group 'DEFAULT' to the NetScaler virtual server.




QUESTION 78A Citrix Administrator needs to ensure that published applications are available to users through StoreFront.

Which monitor type should the administrator use to ensure that services are available?

A. HTTP

B. HTTP-ECV

C. STOREFRONT

D. CITRIX-WEB-INTERFACE



QUESTION 79Scenario: Two Citrix NetScaler appliances are being used in an environment to load balance a high volume web service. These two appliances are nearing theircapacity limits. A Citrix Administrator is instructed to add a new appliance to the NetScaler deployment in order to accommodate increasing web traffic.

Which type of Citrix NetScaler redundancy configuration should be implemented?

A. LACP

B. VRRP

C. Clustering

D. High availability



QUESTION 80A Citrix Administrator needs to record the usernames of all users who are accessing resources through the NetScaler Gateway.

Which two NetScaler tools can accomplish this task? (Choose two.)



A. SNMP

B. Syslog

C. Dashboard

D. NetScaler Insight Center


Explanation/Reference:definite answer.

QUESTION 81Scenario: A Citrix Administrator needs to set up a single NetScaler Gateway to provide users with secure access to a corporate environment. Some users only needto access their server OS hosted desktop while others need to set up a VPN connection.

What should the administrator configure on the NetScaler Gateway to allow both types of users to connect through a single NetScaler Gateway?

A. Set the UI Theme to Custom.

B. Set Clientless Access to Allow.

C. Enable the Client Choices option.

D. Set the Clients Configuration option to Custom.



QUESTION 82A Citrix Administrator needs to flush the cache for a specific URL.


Which step should the administrator take to remove only the required cached data?

A. Flush cache

B. Flush content group

C. Reboot the NetScaler

D. Flush the specific object


Explanation/Reference:right answer.

QUESTION 83Scenario: A Citrix Administrator needs to install a new certificate on the NetScaler Gateway virtual server. The administrator was provided a new PFX certificate andhas imported the PKCS12 file to the NetScaler.

What should the administrator do to complete the installation of the certificate?

A. Create the RSA key and bind to the virtual server.

B. Install the Cert-Key Pair and bind to the virtual server.

C. Split the PEM file, install Cert-Key Pair and bind to the virtual server.

D. Create the CSR and install the Cert-Key Pair, and bind to the virtual server.



QUESTION 84A Citrix Administrator is replacing an expired SSL certificate bound to a virtual server. The established ICA connections to the virtual server will display as _______.(Choose the correct option to complete the sentence.)

A. logged off

B. terminated


C. disconnected

D. uninterrupted



QUESTION 85At the onset of a XenDesktop 7.5 with NetScaler Gateway 10.5 proof-of-concept, users report they are unable to access desktop and server OS machines.

Which configuration might be preventing users from accessing desktop and server OS machines?

A. Single-hop DMZ with StoreFront

B. Double-hop DMZ with StoreFront

C. Single-hop DMZ with Web Interface

D. Double-hop DMZ with Web Interface


Explanation/Reference:answer is great.

QUESTION 86Which two NetScaler components are needed to deploy a NetScaler Gateway solution for an existing XenApp environment? (Choose two.)

A. Policies

B. AppQoE

C. Virtual Server

D. HTTP Callout

E. Content Switching Virtual Server




QUESTION 87Scenario: A Citrix Administrator created a new NetScaler Gateway virtual server. During testing, users are unable to access XenApp applications through iOS andAndroid devices.

Which configuration should the administrator verify?

A. Clientless Access is set to OFF.

B. Client Cleanup prompt is selected.

C. The virtual server is set to Basic Mode.

D. Single Sign-on to Web Applications is selected.



QUESTION 88Which command would generate a Collector File?


A. nstcpdump

B. start nstrace

C. cat aaad.debug

D. show techsupport




QUESTION 89While logged on to the NetScaler Configuration Utility, a Citrix Administrator notices that CPU utilization is higher than expected.

What should the administrator configure to receive notification of this event in the future, when the administrator is NOT logged on?

A. Auditing

B. SNMP Trap

C. SNMP View

D. AppFlow Logging


Explanation/Reference:authenticated answer.

QUESTION 90Scenario: A Citrix Administrator is configuring RSA as a two-factor authentication solution, using default settings on the NetScaler. While testing the configuration,the administrator notices that users cannot log on.

The administrator should verify that traffic is allowed to flow over __________ through the firewall to resolve this issue. (Choose the correct option to complete thesentence.)

A. UDP port 1850

B. TCP port 1812

C. TCP port 1850

D. UDP port 1812


Explanation/Reference:TCP\UDP 1645/1812 = RADIUS connection. So TCP port 1645 and UDP port 1812. In the answers, only UDP port 1812 is mentioned, therefore answer D is theonly correct one.


QUESTION 91Scenario: Authentication through a NetScaler Gateway is NOT functioning for all users. A Citrix Administrator needs to ensure that user authentication events arebeing sent to the external corporate logging server.

Where should the administrator go in the NetScaler Configuration Utility to meet this requirement?

A. Policies > Auditing > Nslog

B. Policies > Auditing > Syslog

C. Policies > Authentication > Local

D. Policies > Authentication > LDAP



QUESTION 92Which two steps must a Citrix Administrator complete to configure the SSL Offloading feature on a NetScaler appliance? (Choose two.)

A. Create a DNS virtual server.

B. Configure an AAA virtual server.

C. Create an SSL VPN virtual server.

D. Create a load balancing virtual server.

E. Import a valid certification-key pair and bind it to the virtual server.

Correct Answer: DESection: (none)Explanation


QUESTION 93A Citrix Administrator has created a session policy that needs to be applied to a subset of users.

To what should the administrator bind the session policy to accomplish this task?


A. Group

B. Server

C. Service

D. Virtual server



QUESTION 94Which log file should a Citrix Administrator use to troubleshoot a cluster node in the INACTIVE state?

A. ns.log

B. http.log

C. auth.log

D. nscollect.log



QUESTION 95A security policy at a company requires all URLs to be encrypted when accessing the backend server through NetScaler Gateway.

Which step should a Citrix Administrator take to meet this company policy?



A. Enable SSL Offload.

B. Configure SSL Bridge.

C. Enable Cipher Redirect.

D. Configure Clientless Access URL Encoding.



QUESTION 96While debugging the NetScaler Gateway authentication to Active Directory, a Citrix Administrator notices the "Groups Allowed To Login" option is preventingintended users from accessing the site. Which NetScaler Gateway policy area should be reviewed?

A. Auditing

B. Session

C. Authentication

D. Preauthentication



QUESTION 97Where can the license.log file be found in the NetScaler folder structure?

A. /var/log

B. /var/netscaler

C. /var/nsproflog

D. /var/netscaler/help




QUESTION 98Where should a Citrix Administrator implement an Endpoint Analysis expression?

A. Session profile

B. Authorization policy

C. Authentication policy

D. Preauthentication policy



QUESTION 99Which command should a Citrix Administrator run at the command-line interface to display the NetScaler certificate days to expiration?

A. show certFile

B. show ssl stats

C. show ssl certKey

D. show certParams



QUESTION 100A Citrix Administrator is configuring MicroVPN with MDX wrapped apps to support StoreFront.

Which two settings must the administrator configure in the NetScaler Gateway Global settings under "Configure Domains for Clientless Access"? (Choose two.)

A. StoreFront URL


B. XenMobile Gateway URL

C. App Controller Host name

D. Secure Ticketing Authority



QUESTION 101Which two pieces of information are needed to create the Authentication Policy for RADIUS? (Choose two.)

A. Base DN

B. Secret Key

C. SSL Certificate

D. RADIUS User Group name

E. IP address of the RADIUS server

Correct Answer: BESection: (none)Explanation


QUESTION 102Scenario: A Citrix Administrator is in the process of implementing StoreFront with NetScaler Gateway. Users in the environment will access resources through CitrixReceiver only.

What does the administrator need to configure on the NetScaler Gateway to enable access through Citrix Receiver only?



A. ICA Proxy

B. A Traffic Policy

C. Endpoint Scans

D. An AppFlow Policy



QUESTION 103Scenario: A Citrix Administrator has implemented a remote access solution using NetScaler. The administrator is alerted with information indicating usersattempting to access resources through NetScaler are unable to authenticate.

How can the administrator identify whether the authentication process is the cause?

A. Review the system log on the Domain Controller.

B. Execute the "nsconmsg -d event" command on the NetScaler.

C. Use the "cat aaad.debug" command on the NetScaler shell.

D. Use the "vi /var/log/auth_error.log" command to review saved events on the NetScaler shell.



QUESTION 104Which two IP addresses are required for a new NetScaler Gateway installation when using the First- Time Setup Wizard? (Choose two.)

A. Client IP (CIP)

B. Virtual IP (VIP)

C. Subnet IP (SNIP)

D. NetScaler IP (NSIP)

Correct Answer: CD



Explanation/Reference:First time wizard will ask for a NSIP, and a SNIP. CIP and VIP make no sense

QUESTION 105What should be done to ensure high availability (HA) failover in a NetScaler HA configuration?

A. Disable all unused system interfaces.

B. Disable the IPv6 feature on the NetScaler.

C. Enable all used and unused system interfaces.

D. Change the NetScaler HA setup to two-arm mode.



QUESTION 106A Citrix Administrator needs to configure a single virtual server to accept TCP traffic on ports 80, 443 and ports between 10000 and 19999.

Which protocol type should the administrator use to accomplish this task?

A. ANY

B. UDP

C. SSL_TCP

D. SSL_PUSH



QUESTION 107Which two items are needed to import an SSL certificate? (Choose two.)


A. A public key

B. A private key

C. A root certificate

D. A server certificate

E. An intermediate certificate




1y0-253 meups v2016-12-19 · pdf fileimplementing citrix netscaler 10.5 for app and desktop...

Documents