citrix.certkiller.1y0 253.v2015!05!18.by.isabell.86q unprotected

39
www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn Certkiller.1Y0-253.86Q.A Number: 1Y0-253 Passing Score: 800 Time Limit: 120 min File Version: 4.6 1Y0-253 Implementing Citrix NetScaler 10.5 for App and Desktop Solutions Today I passed the exam 96% sores. 90% of the questions I got on my 1Y0-253 exam came from this bundle So go for it. This VCE file is up to date. You can pass easily, If you are prepared from these tricky and conceptual questions.

Upload: xsolarisx

Post on 11-Apr-2016

12 views

Category:

Documents


3 download

DESCRIPTION

Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

TRANSCRIPT

Page 1: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

Certkiller.1Y0-253.86Q.A

Number: 1Y0-253Passing Score: 800Time Limit: 120 minFile Version: 4.6

1Y0-253

Implementing Citrix NetScaler 10.5 for App and Desktop Solutions

Today I passed the exam 96% sores.90% of the questions I got on my 1Y0-253 exam came from this bundleSo go for it.This VCE file is up to date.You can pass easily, If you are prepared from these tricky and conceptual questions.

kinan
Text Box
Dumps & Student Guide & Workshop & Internal Training & Video Training Update Daily https://goo.gl/VVmVZ0
Page 2: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

Exam A

QUESTION 1External users should only be allowed to access an application from devices with a specific registry setting.

What should an administrator configure on the NetScaler to restrict access to the application?

A. LDAPB. L3 ModeC. SSL/VPND. Endpoint Analysis

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 2A Citrix Administrator needs to configure a load balanced RADIUS virtual server for authentication on the NetScaler.

Which IP address should the administrator configure on the RADIUS server client configuration?

A. Virtual IP (VIP)B. NetScaler IP (NSIP)C. Subnet IP (SNIP)D. Client IP (CIP)

Correct Answer: CSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 3A Citrix Administrator needs to set up two-factor authentication on NetScaler Gateway for mobile devices.

Which two actions should the administrator take to allow users to log on using mobile devices? (Choose two.)

Page 3: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

A. Create a pre-authentication policyB. Create a RADIUS authentication policyC. Bind the LDAP policy for primary authenticationD. Bind the RADIUS policy for primary authenticationE. Bind the RADIUS policy for secondary authentication

Correct Answer: BDSection: (none)Explanation

Explanation/Reference:

QUESTION 4Scenario: While troubleshooting a license issue on NetScaler, a Citrix Administrator notes the following entry as the root cause:"1:47:12 (CITRIX) SERVER line says HOSTNAME=cag, hostid is HOSTNAME=ns"

In which file would the administrator modify the hostname to resolve this issue?

A. rc.confB. ns.confC. auth.logD. aaad.debug

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 5Which tool can be used by a Citrix Administrator, when using the NetScaler Configuration Utility, to collect troubleshooting information to provide to CitrixTechnical Support?

A. Get Back TraceB. Download core filesC. Download trace filesD. Generate support file

Page 4: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 6Which script should a Citrix Administrator use when creating an Active Directory load balance monitor through the NetScaler?

A. nsldap.plB. nssnmp.plC. nsntlm-lwp.plD. nsbmradius.pl

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 7Which port exchanges high availability heartbeats?

A. TCP 80B. TCP 443C. TCP 3003D. UDP 3003

Correct Answer: DSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 8Scenario: A Citrix Administrator has configured NTP Time Servers in the Citrix NetScaler configuration. However, the time is NOT in sync with the NTPTime servers. The addresses of the servers have been verified.What could be causing this issue?

Page 5: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

A. NTP Synchronization state is disabled.B. NTP Authentication is NOT configured.C. NTP Server Auto Key is NOT configured.D. No NTP server is "Set as preferred NTP server".

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 9Which command is used to verify the authentication process?

A. show aaa userB. show aaa statsC. cat aaad.debugD. set aaa ldapParams

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 10Which two commands, when run at the command-line interface by a Citrix Administrator, can display interfaces configured for high availabilitymonitoring? (Choose two.)

A. show nodeB. show statusC. show monitorD. show interfaceE. show hardware

Correct Answer: ADSection: (none)

Page 6: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

Explanation

Explanation/Reference:Explanation:

QUESTION 11Which two steps must a Citrix Administrator complete to set up an SSL VPN virtual server? (Choose two.)

A. Bind a session policy.B. Install a certificate-key pair.C. Bind a certificate-key pair to the virtual server.D. Configure a Secure Ticketing Authority server.

Correct Answer: BCSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 12A Citrix Administrator needs to configure a production website to show a custom message when the virtual server is in a down state.

Which NetScaler function or feature should the administrator use in order to meet this requirement?

A. RewriteB. Redirect URLC. Content SwitchingD. Spillover Backup Action

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 13In an effort to troubleshoot NetScaler Gateway, a Citrix Administrator needs to capture packets to validate basic traffic flow (IP and port information).

What would the administrator choose to begin collecting data to evaluate under Technical Support Tools using the NetScaler Configuration Utility?

Page 7: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

A. Call HomeB. Get back traceC. Start new traceD. Generate support file

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 14Which two ports must a Citrix Administrator open on an internal firewall to allow users to launch desktops through the NetScaler Gateway from a CitrixXenDesktop environment in which session reliability is enabled? (Choose two.)

A. 80B. 443C. 1494D. 2598E. 3001

Correct Answer: CDSection: (none)Explanation

Explanation/Reference:

QUESTION 15Which protocol should be used to configure a secure LDAP virtual server for a NetScaler Gateway deployment?

A. SSLB. DTLSC. SSL_TCPD. SSL_BRIDGE

Correct Answer: CSection: (none)

Page 8: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

Explanation

Explanation/Reference:

QUESTION 16A Citrix Administrator needs to shorten the URL for users to connect to a StoreFront website without knowing the store name.

Which policy should the administrator use to accomplish this requirement?

A. RewriteB. AppQoEC. SpilloverD. Responder

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 17Scenario: A Citrix Administrator is required to set up SSL Offloading for all virtual servers. External communication will come in as HTTPS traffic.Communication from the NetScaler to backend web servers will be over HTTP.

In which two ways can the administrator set the protocol to meet the requirements? (Choose two.)

A. Service TypE. SSLB. Service TypE. TCPC. Service TypE. HTTPD. Virtual Server TypE. SSLE. Virtual Server TypE. HTTPF. Virtual Server TypE. SSL_TCP

Correct Answer: CDSection: (none)Explanation

Explanation/Reference:

Page 9: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

QUESTION 18After performing an upgrade on a high availability pair, a Citrix Administrator notices that all of the virtual servers are down on the secondary appliance.

Which two commands can the administrator use to resolve this issue? (Choose two.)

A. show ha nodeB. sync ha files allC. force ha failoverD. set ha node -hasync enableE. set ha node -hastatus enable

Correct Answer: DESection: (none)Explanation

Explanation/Reference:

QUESTION 19Scenario: A NetScaler Gateway is configured to use RADIUS for authentication. A Citrix Administrator needs to know which NetScaler IP (NSIP)address is used for outgoing RADIUS traffic.

How can the administrator verify which NSIP is used?

A. Check the ns.log file.B. Use the ping command.C. Check the messages log file.D. Use the nstcpdump.sh command.

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 20Scenario: A Citrix Administrator is configuring RADIUS as a two-factor authentication solution on the NetScaler. While testing the configuration theadministrator observes that there are no incoming RADIUS requests.

Page 10: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

To resolve this issue, the administrator should change the setting of the "RADIUS client IP address" to the __________ address. (Choose the correctoption to complete the sentence.)

A. Virtual IP (VIP)B. Client IP (CIP)C. NetScaler IP (NSIP)D. Global Server Load Balancing IP (GSLB IP)

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 21Scenario: External users need access to hosted desktops and applications. A Citrix Administrator is instructed to configure access to hosted resourcesthrough NetScaler Gateway.

The administrator should configure ________ settings on the NetScaler Gateway in order to allow users to access the corporate desktop and applicationstore through NetScaler Gateway.

A. SOAP ServiceB. Citrix XML ServiceC. Citrix Wallet ServiceD. Secure Ticket Authority

Correct Answer: ASection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 22Scenario: A new software package has been developed at an organization. The organization has hired Field Sales Engineers to accompany SalesExecutives when demonstrating the new software package. The demonstration software is hosted on an internal web server. A Citrix Administratorneeds to configure the NetScaler to ensure end-to-end connectivity.

Which feature on the NetScaler must the administrator ensure is enabled to provide secure access from the public network?

Page 11: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

A. Sure ConnectB. SSL OffloadingC. Application FirewallD. Global Server Load Balancing

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 23Scenario: A Citrix Administrator needs to configure a virtual server to load balance Citrix StoreFront. Corporate policy states that all communication mustbe encrypted coming into and going out of the NetScaler; however, the administrator needs to inspect the client HTTP header information.

Which type of service and virtual server are needed?

A. SSL service; SSL virtual serverB. HTTP service; SSL virtual serverC. HTTP service; HTTP virtual ServerD. SSL BRIDGE service; SSL_BRIDGE virtual server

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 24Scenario: A Citrix Administrator needs to restrict access to sensitive financial applications. The applications should be accessible within the internalnetwork, but NOT accessible externally through the NetScaler Gateway.

What should the administrator configure to accomplish this requirement?

A. AAA groupB. Traffic policyC. Authorization policyD. SmartAccess policy

Page 12: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 25Which two things occur after adding a Subnet IP (SNIP) to a NetScaler which already has a Mapped IP (MIP)? (Choose two.)

A. The NetScaler IP (NSIP) is no longer required.B. A SNIP will be used in preference to a MIP.C. Adding a SNIP adds an entry to the routing table.D. Client machines can use the MIP instead of the Virtual IP (VIP).

Correct Answer: BCSection: (none)Explanation

Explanation/Reference:

QUESTION 26What should a Citrix Administrator configure to optimize an internal NetScaler Gateway virtual server when more bandwidth is available for use andother websites are NOT affected?

A. Windows Scaling within TCP parameters.B. Max Connections within HTTP parameters.C. A Net Profile that is applied to the NetScaler Gateway virtual server.D. Windows Scaling within a TCP Profile that is applied to the NetScaler Gateway virtual server.

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 27Scenario: A Citrix Administrator has configured two virtual servers (VServer1 and VServer2). The administrator would like to set up the virtual servers so

Page 13: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

that only when VServer1 is offline, VServer2 will become active.

What should the administrator configure to achieve this goal?

A. Service groupB. Spillover methodC. Backup virtual serverD. Spillover backup action

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 28A Citrix Administrator needs to validate the session policies that are put in place to differentiate mobile devices from PCs.

Which command, when run from a shell, will allow real time reading of the logs for this specific purpose?

A. nsconmsg -d current -g pol_hitsB. nsconmsg -K /var/nslog/newnslog -dC. nsconmsg -d current | grep -i rewriteD. nsconmsg -d current | grep -i responder

Correct Answer: ASection: (none)Explanation

Explanation/Reference:valid answer.

QUESTION 29Scenario: A recent security audit identified that communications between the NetScaler Gateway and the STA were NOT secure. A Citrix Administratorwas asked to secure this communication.

What must the administrator install as one of the steps to secure communications between the NetScaler Gateway and the STA?

A. A root certificate on the NetScaler virtual server.B. A server certificate on the server running the STA.

Page 14: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

C. A server certificate from the STA server on the NetScaler virtual server.D. An HTTPS virtual server on the NetScaler to load balance STA servers.

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 30Which three parameters are required to create a new cluster instance? (Choose three.)

A. IP addressB. Instance IDC. Subnet maskD. Subnet IP addressE. Backplane interface

Correct Answer: ABESection: (none)Explanation

Explanation/Reference:

QUESTION 31Scenario: A Citrix Administrator needs to update an SSL certificate that is currently installed and configured. The administrator needs to locate the virtualserver on which this SSL certificate is configured.

Which option should the administrator select to determine on which virtual server the SSL certificate is configured?

A. DetailsB. Cert LinksC. Show BindingsD. OCSP Bindings

Correct Answer: CSection: (none)Explanation

Page 15: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

Explanation/Reference:

QUESTION 32Which two methods should be used for generating a configuration data and statistics report for evaluation by Citrix? (Choose two.)

A. Run "show callhome" using the command-line interface.B. Run "show techsupport" using the command-line interface.C. Click the Call Home link under the Technical Support Tools section in the NetScaler Configuration Utility.D. Click the Download trace files link under the Technical Support Tools section in the NetScaler Configuration Utility.E. Click the Generate support file link under the Technical Support Tools section in the NetScaler Configuration Utility.

Correct Answer: BESection: (none)Explanation

Explanation/Reference:

QUESTION 33Which NetScaler IP address type is created when the below command is executed at the command-line interface?

add ns ip 192.168.2.1 255.255.255.0

A. Virtual IPB. Cluster IPC. Subnet IPD. Mapped IPE. GSLB Site IP

Correct Answer: CSection: (none)Explanation

Explanation/Reference:exact answer.

QUESTION 34Which two components must a Citrix Administrator configure before GSLB can be configured? (Choose two.)

Page 16: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

A. An authoritative DNSB. A link load balancing methodC. A high availability secondary nodeD. A NetScaler Gateway virtual server

Correct Answer: ADSection: (none)Explanation

Explanation/Reference:

QUESTION 35Refer to the exhibit.

Page 17: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

Scenario: A Citrix Administrator has implemented a remote access solution using NetScaler. The NetScaler is configured to validate user credentialsconnecting to Active Directory. A user cannot log into a StoreFront store from the Internet with their domain credentials. The administrator reviews theevents listed in NetScaler.

Click the exhibit button to view the log.

What is the cause of the issue?

The user entered an incorrect password.

Page 18: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

A. The user does NOT belong to the domain administrator group.B. The Authentication profile on the NetScaler Gateway is incorrect.C. The user does NOT have permission to access the requested resource.

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 36Which type of connection is used when users launch a XenDesktop published application from Worx Home?

A. VPN onlyB. ICA ProxyC. Micro VPN onlyD. ICA through a Micro VPN

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 37A Citrix Administrator needs to provide users with access to web, SaaS and MDX applications from an external network.

Which Citrix product must the administrator configure and integrate with the NetScaler Gateway to ensure that this requirement is met?

A. Web InterfaceB. App ControllerC. Delivery ControllerD. Provisioning Services

Correct Answer: BSection: (none)Explanation

Page 19: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

Explanation/Reference:

QUESTION 38Scenario: A Citrix Administrator would like to delegate administration of the Citrix NetScaler to a Microsoft Active Directory group called "Citrix-NetScaler-Admins". The group already exists in Active Directory. The Citrix-NetScaler-Admins group must have full-control permission on the CitrixNetScaler to perform their tasks. The administrator has successfully configured an LDAP authentication server and authentication policy. Theauthentication policy is already globally bound.

How should the administrator proceed on the Citrix NetScaler?

A. Create an AAA User called Citrix-NetScaler-Admins and select "External Authentication".B. Create a group called Citrix-NetScaler-Admins. Make the group a member of the operator command policy.C. Create a group called Citrix-NetScaler-Admins. Make the group a member of the superuser command policy.D. Create an AAA group called Citrix-NetScaler-Admins. Create an ALLOW authorization policy and bind it to the Citrix-NetScaler-Admins AAA Group.

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 39Various users report that while accessing the Citrix NetScaler Gateway virtual server they get an error message that the public SSL certificate is NOTtrusted.

Which three steps should a Citrix Administrator take on the NetScaler to resolve this issue? (Choose three.)

A. Import the root certificate.B. Import the intermediate certificate.C. Download the root certificate from the vendor.D. Link the root certificate to the intermediate certificate.E. Download the intermediate certificate from the vendor.F. Link the intermediate certificate to the existing server certificate.

Correct Answer: BEFSection: (none)Explanation

Page 20: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

Explanation/Reference:

QUESTION 40Scenario: A Citrix Administrator is implementing a NetScaler appliance for the first time. All clients will connect from a public network and all servers willreside on a private network.

Which deployment mode should the administrator use to implement the NetScaler?

A. Layer 2 (L2) modeB. Layer 3 (L3) modeC. Two-arm deployment modeD. MAC-based forwarding mode

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 41Which IP address must be unique on each node in a high availability configuration?

A. Virtual IP (VIP)B. Mapped IP (MIP)C. Subnet IP (SNIP)D. NetScaler IP (NSIP)

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 42Scenario: A company is considering using NetScaler appliances to load balance existing secured web servers. The company compliance policy doesNOT allow any alterations of the SSL sessions between clients and web servers.Which option should a Citrix Administrator configure on the NetScaler virtual server to meet the needs of the company?

Page 21: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

A. SSL VPNB. SSL BridgeC. SSL OffloadD. SSL Renegotiation

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 43Which two steps must a Citrix Administrator take to allow additional users to access resources using the NetScaler Gateway Plug-in after theadministrator installs the universal license on the NetScaler Gateway? (Choose two.)

A. Set ICA Proxy to OFF.B. Configure Citrix Receiver Home Page.C. Change the authentication AAA settings.D. Set Single Sign-on with Windows to OFF.

Correct Answer: ACSection: (none)Explanation

Explanation/Reference:

QUESTION 44Which two parameters are required for adding a new node to a cluster? (Choose two.)

A. Cluster IP of the new cluster nodeB. NetScaler IP of the new cluster nodeC. NetScaler IP of the existing cluster nodeD. Remote NetScaler user name and passwordE. Backplane interface of the existing cluster node

Correct Answer: BDSection: (none)Explanation

Page 22: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

Explanation/Reference:

QUESTION 45Scenario: Users report that they are being presented with a certificate error when they attempt to access the remote access website of the company. Nochanges were made to the NetScaler certificates recently.

What should the Citrix Administrator check on the NetScaler to identify this issue?

A. Cert LinksB. OCSP BindingC. Certificate FormatD. Certificate Expiry Date

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 46Which monitor should a Citrix Administrator configure to monitor a StoreFront server group with SSL enabled?

A. TCPB. SSL_TCPC. STOREFRONT with "Secure" checkedD. CITRIX-WEB-INTERFACE with "Secure" checked

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 47A Citrix Administrator needs to track load balanced traffic from the NetScaler to separate, individual subnets.

Which IP address should be used to do this?

Page 23: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

A. Virtual IP (VIP)B. Mapped IP (MIP)C. NetScaler IP (NSIP)D. Subnet IP (SNIP)

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 48Two StoreFront servers in an environment need to be addressed with a single URL.

Which feature should a Citrix Administrator enable to meet this requirement?

A. SSL VPNB. Load BalancingC. Integrated CachingD. Application Firewall

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 49A Citrix Administrator receives information that users are having difficulty logging into the NetScaler Gateway Portal, where they access publishedresources, applications and desktops.

What should the administrator configure on the NetScaler to view these events and identify the cause?

A. SyslogB. ns.confC. AppFlowD. nsconmsg

Page 24: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 50A Citrix Administrator needs to configure two-factor authentication for mobile devices with RSA tokens.Which two policies should the administrator configure to enable this feature? (Choose two.)

A. SSLB. LocalC. LDAPD. RADIUSE. TACACS

Correct Answer: CDSection: (none)Explanation

Explanation/Reference:

QUESTION 51Scenario: A Citrix Administrator created a content switching virtual server. The administrator is unable to bind the load balancing virtual server to thecontent switching virtual server.

Which protocol is being used on the load balancing virtual server that is causing this issue?

A. SSLB. TCPC. UDPD. SSL_Bridge

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

Page 25: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

QUESTION 52Which NetScaler feature will a Citrix Administrator configure in order to redirect all HTTP requests to HTTPS?

A. RewriteB. SSL VPNC. Content SwitchingD. Cache Redirection

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 53Which two pieces of information are required to create a virtual server? (Choose two.)

A. PortB. ProtocolC. Subnet MaskD. Gateway Address

Correct Answer: ABSection: (none)Explanation

Explanation/Reference:

QUESTION 54Scenario: A company requires two-factor authentication using RSA tokens and Active Directory. The Citrix Administrator configured the following twoauthentication policies with these parameters:

What should the administrator do to protect the NetScaler Gateway virtual server from an attack against Active Directory?

A. Bind the RSA_policy in Primary Authentication Policies and bind the AD_policy in Secondary Authentication Policies.B. Bind the AD_policy in Primary Authentication Policies and bind the RSA_policy in Secondary Authentication Policies.

Page 26: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

C. Bind the AD_policy and the RSA_policy in Primary Authentication Policies and set the RSA_policy priority higher than the AD_policy.D. Bind the AD_policy and the RSA_policy in Primary Authentication Policies and set the AD_policy priority higher than the RSA_policy.

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 55Which setting is required to complete the configuration of a NetScaler Gateway virtual server?

A. DNSB. CertificateC. AuthorizationD. Content Switching

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 56Scenario: A Citrix Administrator has configured access to a StoreFront store through the NetScaler Gateway:

http://FQDN/Citrix/storeweb

When users attempt to access resources using the URL of the gateway, a 404 error is displayed.

What could be causing the error?

A. The URL is case-sensitive.B. The session policy is missing.C. The website needs to use HTTPS protocol.D. The IP address is needed instead of FQDN in the URL.

Correct Answer: ASection: (none)

Page 27: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

Explanation

Explanation/Reference:

QUESTION 57A penetration test has been performed against the NetScaler Gateway Virtual IPs (VIPs) resulting in the SSL RC4-based ciphers being flagged.

What should the administrator do to address the vulnerability?

A. Remove all the SSL ciphers from the virtual server.B. Assign Cipher Group 'ALL' to the NetScaler virtual server.C. Assign Cipher Group 'HIGH' to the NetScaler virtual server.D. Assign Cipher Group 'DEFAULT' to the NetScaler virtual server.

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 58A Citrix Administrator needs to ensure that published applications are available to users through StoreFront.

Which monitor type should the administrator use to ensure that services are available?

A. HTTPB. HTTP-ECVC. STOREFRONTD. CITRIX-WEB-INTERFACE

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 59Scenario: Two Citrix NetScaler appliances are being used in an environment to load balance a high volume web service. These two appliances are

Page 28: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

nearing their capacity limits. A Citrix Administrator is instructed to add a new appliance to the NetScaler deployment in order to accommodate increasingweb traffic.

Which type of Citrix NetScaler redundancy configuration should be implemented?

A. LACPB. VRRPC. ClusteringD. High availability

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 60A Citrix Administrator needs to record the usernames of all users who are accessing resources through the NetScaler Gateway.

Which two NetScaler tools can accomplish this task? (Choose two.)

A. SNMPB. SyslogC. DashboardD. NetScaler Insight Center

Correct Answer: BDSection: (none)Explanation

Explanation/Reference:definite answer.

QUESTION 61A Citrix Administrator needs to flush the cache for a specific URL.

Which step should the administrator take to remove only the required cached data?

A. Flush cacheB. Flush content group

Page 29: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

C. Reboot the NetScalerD. Flush the specific object

Correct Answer: DSection: (none)Explanation

Explanation/Reference:right answer.

QUESTION 62Scenario: A Citrix Administrator needs to install a new certificate on the NetScaler Gateway virtual server. The administrator was provided a new PFXcertificate and has imported the PKCS12 file to the NetScaler.

What should the administrator do to complete the installation of the certificate?

A. Create the RSA key and bind to the virtual server.B. Install the Cert-Key Pair and bind to the virtual server.C. Split the PEM file, install Cert-Key Pair and bind to the virtual server.D. Create the CSR and install the Cert-Key Pair, and bind to the virtual server.

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 63At the onset of a XenDesktop 7.5 with NetScaler Gateway 10.5 proof-of-concept, users report they are unable to access desktop and server OSmachines.

Which configuration might be preventing users from accessing desktop and server OS machines?

A. Single-hop DMZ with StoreFrontB. Double-hop DMZ with StoreFrontC. Single-hop DMZ with Web InterfaceD. Double-hop DMZ with Web Interface

Correct Answer: BSection: (none)

Page 30: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

Explanation

Explanation/Reference:answer is great.

QUESTION 64In which directory can a Citrix Administrator locate the SSL certificates, certificate keys and root CA files?

A. /var/nslogB. /var/ns_guiC. /nsconfig/sslD. /var/netscaler

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 65Which three steps should a Citrix Administrator take to customize the NetScaler Gateway logon page? (Choose three.)

A. Select Custom within UI Theme.B. Create customization changes under /nsconfig.C. Create a tar package of the customization files.D. Add a copy command to rc.netscaler file within /nsconfig.E. Create customization changes under /var/ns_gui_custom/ns_gui/vpn.

Correct Answer: ACESection: (none)Explanation

Explanation/Reference:valid answer.

QUESTION 66Scenario: A NetScaler Gateway virtual server is configured for a XenApp infrastructure. The Citrix Administrator is asked to configure monitoring on theNetScaler Gateway virtual server to ensure the health and availability of XenApp published applications.

Which monitoring type should the administrator configure?

Page 31: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

A. STOREFRONTB. CITRIX-XD-DDCC. CITRIX-XML-SERVICED. CITRIX-WEB-INTERFACE

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 67Scenario: A Citrix Administrator has configured Outlook Web Access by means of a Citrix NetScaler AAA virtual server. Users complain that they needto re-authenticate after 30 minutes of inactivity.Users work all day from Outlook Web Access.

Which configuration change should an administrator make to ensure the session is available the entire workday?

A. Session time-out in 480 (minutes).B. Enable Persistent Cookie Validity in 480 (minutes).C. Set Client Idle Time-out to 10800 (seconds) on the Outlook Web Access virtual server.D. Set Client Idle Time-out to 10800 (seconds) on the Outlook Web Access Service (group).

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 68Scenario: A company website currently has thousands of GIF images. Using the NetScaler, a Citrix Administrator needs to convert the GIFs to PNGformat to reduce bandwidth requirements. Which feature on the NetScaler can accomplish this task?

A. Priority QueueingB. Content SwitchingC. Content AcceleratorD. Front End Optimization

Page 32: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

Correct Answer: DSection: (none)Explanation

Explanation/Reference:to the point answer.

QUESTION 69A Citrix Administrator is upgrading NetScaler 10.1 appliances in a high availability (HA) pair to NetScaler 10.5.

What is the first step to launch the upgrade according to Citrix best practice?

A. Use the NetScaler Configuration Utility on the primary appliance to force HA failover.B. Execute the installns command on the primary appliance.C. Use the NetScaler Configuration Utility on the secondary appliance to force HA failover.D. Execute the installns command on the secondary appliance.

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 70Which IP address does NetScaler use for Active Directory authentication?

A. Virtual IP (VIP)B. Client IP (CIP)C. NetScaler IP (NSIP)D. Subnet IP (SNIP)

Correct Answer: DSection: (none)Explanation

Explanation/Reference:answer is outclass.

QUESTION 71

Page 33: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

A Citrix Administrator would like to use an existing monitor script included in NetScaler for load balancing TFTP services in a Provisioning Servicesdeployment.

Which monitor type should the administrator choose in order to complete the task?

A. ARPB. USERC. TCP-ECVD. UDP-ECV

Correct Answer: BSection: (none)Explanation

Explanation/Reference:genuine answer.

QUESTION 72What should a Citrix Administrator configure in a session profile so that users are able to use WorxWeb on their mobile devices?

A. SSL VPNB. ICA ProxyC. Secure BrowseD. Clientless Access

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 73Scenario: A Citrix Administrator added an Access Control List (ACL) to restrict access to the management IP address of the NetScaler. Theadministrator is still able to connect from a disallowed subnet, even though the ACL is enabled.What is a possible reason why the administrator is still able to connect from a disallowed subnet?

A. No VLAN was specified.B. ACLs are only applied to Virtual IPs (VIPs).C. The ACL needs to be activated.

Page 34: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

D. An established connection was in place.

Correct Answer: CSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 74Which piece of information is needed by a Citrix Administrator to successfully run the XenMobile Deployment Wizard on the NetScaler Gateway?

A. App Controller FQDNB. XenDesktop ControllerC. Secure Ticketing AuthorityD. XenMobile Device Manager server

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 75Which two NetScaler components are needed to deploy a NetScaler Gateway solution for an existing XenApp environment? (Choose two.)

A. PoliciesB. AppQoEC. Virtual ServerD. HTTP CalloutE. Content Switching Virtual Server

Correct Answer: ACSection: (none)Explanation

Explanation/Reference:proper answer.

Page 35: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

QUESTION 76Which command would generate a Collector File?

A. nstcpdumpB. start nstraceC. cat aaad.debugD. show techsupport

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 77While logged on to the NetScaler Configuration Utility, a Citrix Administrator notices that CPU utilization is higher than expected.

What should the administrator configure to receive notification of this event in the future, when the administrator is NOT logged on?

A. AuditingB. SNMP TrapC. SNMP ViewD. AppFlow Logging

Correct Answer: BSection: (none)Explanation

Explanation/Reference:authenticated answer.

QUESTION 78A Citrix Administrator needs to mask the server name used by a web server, without exposing the web server virtual directory structure.

Which policy should the administrator use to complete this task?

A. ResponderB. Content FilteringC. Content Switching

Page 36: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

D. URL Transformation

Correct Answer: DSection: (none)Explanation

Explanation/Reference:answer is acceptable.

QUESTION 79Scenario: There are two physical servers listening on port 8080. A Citrix Administrator added a third physical server to listen on port 80. Theadministrator is adding the third server to the existing load balancing configuration.

Which object does the administrator need to modify to allow traffic on port 80?

A. ServerB. ServiceC. Virtual serverD. Service group

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 80Scenario: A backend web server is NOT functioning correctly due to a database related issue. The web server is load balanced by Citrix NetScaler. Dueto the database issue, the correct content is NOT being displayed. However the NetScaler is still allowing connections to the web server.

How can a Citrix Administrator prevent this from happening?

A. Create an SQL database user within NetScaler.B. Create two monitors, one on the webserver that checks on HTTP and one on the database server that checks on TCP.C. Create an HTTP monitor on the webserver that checks on a pattern that originates from the database within the HTML code.D. Create an HTTP-ECV monitor on the webserver that checks on a pattern that originates from the database within the HTML code.

Correct Answer: DSection: (none)Explanation

Page 37: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

Explanation/Reference:answer is true.

QUESTION 81Where in the NetScaler Configuration Utility should a Citrix Administrator configure a load balancing virtual server?

A. SystemB. AppExpertC. OptimizationD. Traffic Management

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 82Scenario: A Citrix Administrator configured the following preauthentication policies for NetScaler Gateway.Priority 20Policy2bound to virtual serverPriority 10Policy1bound to AAA GlobalPriority 10Policy3bound to virtual serverPriority 20Policy4bound to AAA Global

In which order are the policies applied?

A. Policy2, Policy3, Policy1, Policy4B. Policy1, Policy2, Policy3, Policy4C. Policy4, Policy2, Policy1, Policy3D. Policy3, Policy1, Policy4, Policy2

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 83

Page 38: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

HDX Insight is used in a 500-user organization that has a single datacenter location with a single Internet service provider.

Which form of Citrix NetScaler redundancy should a Citrix Administrator implement?

A. LACPB. VRRPC. ClusteringD. High availability

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 84Which command can a Citrix Administrator use to see a specific auditing Syslog policy binding?

A. show logB. show auditC. show syslogD. show attribute

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 85A Citrix Administrator would like to use TCP Profiles to optimize NetScaler Gateway for ICA Access without affecting other load balanced traffic.

The administrator should use the __________ and bind it __________. (Choose the correct option to complete the sentence.)

A. nstcp_default_profile; globallyB. nstcp_default_XA_XD_profile; globallyC. nstcp_default_profile; to the NetScaler Gateway virtual serverD. nstcp_default_XA_XD_profile; to the NetScaler Gateway virtual server

Page 39: Citrix.certkiller.1Y0 253.v2015!05!18.by.isabell.86q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 86What is a valid command that a Citrix Administrator can run at the command-line interface to reconfigure the NetScaler IP address?

A. set ns ipB. config nsC. add ns ipD. add ipset

Correct Answer: BSection: (none)Explanation

Explanation/Reference: