citrix.realtests.1y0 253.v2015!05!12.by.sophia.91q unprotected

29
www.vceplus.com - Website designed to help IT pros advance their careers. RealTests.1Y0-253.91Q Number: 1Y0-253 Passing Score: 800 Time Limit: 120 min File Version: 4.5 1Y0-253 Implementing Citrix NetScaler 10.5 for App and Desktop Solutions PASSED with outstanding and remarkable scores 95%. Everything seems okay in this vce file so use this to prepare you thoroughly. It is absolutely correct exam techniques and training method. It helps me like a perfect teacher. I have to say that this dump is simply amazing

Upload: xsolarisx

Post on 17-Feb-2016

6 views

Category:

Documents


0 download

DESCRIPTION

Citrix.realtests.1Y0 253.v2015!05!12.by.sophia.91q Unprotected

TRANSCRIPT

Page 1: Citrix.realtests.1Y0 253.v2015!05!12.by.sophia.91q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers.

RealTests.1Y0-253.91Q

Number: 1Y0-253Passing Score: 800Time Limit: 120 minFile Version: 4.5

1Y0-253

Implementing Citrix NetScaler 10.5 for App and Desktop Solutions

PASSED with outstanding and remarkable scores 95%. Everything seems okay in this vce file so use this to prepare you thoroughly. It is absolutely correct exam techniques and training method. It helps me like a perfect teacher. I have to say that this dump is simply amazing

kinan
Text Box
Dumps & Student Guide & Workshop & Internal Training & Video Training Update Daily https://goo.gl/VVmVZ0
Page 2: Citrix.realtests.1Y0 253.v2015!05!12.by.sophia.91q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers.

Exam A

QUESTION 1A Citrix Administrator needs to mask the server name used by a web server, without exposing the webserver virtual directory structure.

Which policy should the administrator use to complete this task?

A. ResponderB. Content FilteringC. Content SwitchingD. URL Transformation

Correct Answer: DSection: (none)Explanation

Explanation/Reference:answer is acceptable.

QUESTION 2Scenario: There are two physical servers listening on port 8080. A Citrix Administrator added a thirdphysical server to listen on port 80. The administrator is adding the third server to the existing loadbalancing configuration.

Which object does the administrator need to modify to allow traffic on port 80?

A. ServerB. ServiceC. Virtual serverD. Service group

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 3In which directory can a Citrix Administrator locate the SSL certificates, certificate keys and root CA files?

A. /var/nslogB. /var/ns_guiC. /nsconfig/sslD. /var/netscaler

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 4Which three steps should a Citrix Administrator take to customize the NetScaler Gateway logon page?(Choose three.)

A. Select Custom within UI Theme.B. Create customization changes under /nsconfig.

Page 3: Citrix.realtests.1Y0 253.v2015!05!12.by.sophia.91q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers.

C. Create a tar package of the customization files.D. Add a copy command to rc.netscaler file within /nsconfig.E. Create customization changes under /var/ns_gui_custom/ns_gui/vpn.

Correct Answer: ACESection: (none)Explanation

Explanation/Reference:valid answer.

QUESTION 5Scenario: A NetScaler Gateway virtual server is configured for a XenApp infrastructure. The CitrixAdministrator is asked to configure monitoring on the NetScaler Gateway virtual server to ensure the healthand availability of XenApp published applications.

Which monitoring type should the administrator configure?

A. STOREFRONTB. CITRIX-XD-DDCC. CITRIX-XML-SERVICED. CITRIX-WEB-INTERFACE

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 6Scenario: A Citrix Administrator has configured Outlook Web Access by means of a Citrix NetScaler AAAvirtual server. Users complain that they need to re-authenticate after 30 minutes of inactivity.Users work all day from Outlook Web Access.

Which configuration change should an administrator make to ensure the session is available the entireworkday?

A. Session time-out in 480 (minutes).B. Enable Persistent Cookie Validity in 480 (minutes).C. Set Client Idle Time-out to 10800 (seconds) on the Outlook Web Access virtual server.D. Set Client Idle Time-out to 10800 (seconds) on the Outlook Web Access Service (group).

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 7Scenario: A company website currently has thousands of GIF images. Using the NetScaler, a CitrixAdministrator needs to convert the GIFs to PNG format to reduce bandwidth requirements. Which featureon the NetScaler can accomplish this task?

A. Priority QueueingB. Content SwitchingC. Content AcceleratorD. Front End Optimization

Page 4: Citrix.realtests.1Y0 253.v2015!05!12.by.sophia.91q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers.

Correct Answer: DSection: (none)Explanation

Explanation/Reference:to the point answer.

QUESTION 8A Citrix Administrator is upgrading NetScaler 10.1 appliances in a high availability (HA) pair to NetScaler10.5.

What is the first step to launch the upgrade according to Citrix best practice?

A. Use the NetScaler Configuration Utility on the primary appliance to force HA failover.B. Execute the installns command on the primary appliance.C. Use the NetScaler Configuration Utility on the secondary appliance to force HA failover.D. Execute the installns command on the secondary appliance.

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 9Which IP address does NetScaler use for Active Directory authentication?

A. Virtual IP (VIP)B. Client IP (CIP)C. NetScaler IP (NSIP)D. Subnet IP (SNIP)

Correct Answer: DSection: (none)Explanation

Explanation/Reference:answer is outclass.

QUESTION 10A Citrix Administrator would like to use an existing monitor script included in NetScaler for load balancingTFTP services in a Provisioning Services deployment.

Which monitor type should the administrator choose in order to complete the task?

A. ARPB. USERC. TCP-ECVD. UDP-ECV

Correct Answer: BSection: (none)Explanation

Explanation/Reference:genuine answer.

QUESTION 11What should a Citrix Administrator configure in a session profile so that users are able to use WorxWeb on

Page 5: Citrix.realtests.1Y0 253.v2015!05!12.by.sophia.91q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers.

their mobile devices?

A. SSL VPNB. ICA ProxyC. Secure BrowseD. Clientless Access

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 12Scenario: A Citrix Administrator added an Access Control List (ACL) to restrict access to the managementIP address of the NetScaler. The administrator is still able to connect from a disallowed subnet, eventhough the ACL is enabled.What is a possible reason why the administrator is still able to connect from a disallowed subnet?

A. No VLAN was specified.B. ACLs are only applied to Virtual IPs (VIPs).C. The ACL needs to be activated.D. An established connection was in place.

Correct Answer: CSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 13Which piece of information is needed by a Citrix Administrator to successfully run the XenMobileDeployment Wizard on the NetScaler Gateway?

A. App Controller FQDNB. XenDesktop ControllerC. Secure Ticketing AuthorityD. XenMobile Device Manager server

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 14External users should only be allowed to access an application from devices with a specific registry setting.

What should an administrator configure on the NetScaler to restrict access to the application?

A. LDAPB. L3 ModeC. SSL/VPND. Endpoint Analysis

Correct Answer: D

Page 6: Citrix.realtests.1Y0 253.v2015!05!12.by.sophia.91q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers.

Section: (none)Explanation

Explanation/Reference:

QUESTION 15A Citrix Administrator needs to configure a load balanced RADIUS virtual server for authentication on theNetScaler.

Which IP address should the administrator configure on the RADIUS server client configuration?

A. Virtual IP (VIP)B. NetScaler IP (NSIP)C. Subnet IP (SNIP)D. Client IP (CIP)

Correct Answer: CSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 16Scenario: A backend web server is NOT functioning correctly due to a database related issue. The webserver is load balanced by Citrix NetScaler. Due to the database issue, the correct content is NOT beingdisplayed. However the NetScaler is still allowing connections to the web server.

How can a Citrix Administrator prevent this from happening?

A. Create an SQL database user within NetScaler.B. Create two monitors, one on the webserver that checks on HTTP and one on the database server that

checks on TCP.C. Create an HTTP monitor on the webserver that checks on a pattern that originates from the database

within the HTML code.D. Create an HTTP-ECV monitor on the webserver that checks on a pattern that originates from the

database within the HTML code.

Correct Answer: DSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 17Where in the NetScaler Configuration Utility should a Citrix Administrator configure a load balancing virtualserver?

A. SystemB. AppExpertC. OptimizationD. Traffic Management

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

Page 7: Citrix.realtests.1Y0 253.v2015!05!12.by.sophia.91q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers.

QUESTION 18Scenario: A Citrix Administrator configured the following preauthentication policies for NetScaler Gateway.Priority 20Policy2bound to virtual serverPriority 10Policy1bound to AAA GlobalPriority 10Policy3bound to virtual serverPriority 20Policy4bound to AAA Global

In which order are the policies applied?

A. Policy2, Policy3, Policy1, Policy4B. Policy1, Policy2, Policy3, Policy4C. Policy4, Policy2, Policy1, Policy3D. Policy3, Policy1, Policy4, Policy2

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 19HDX Insight is used in a 500-user organization that has a single datacenter location with a single Internetservice provider.

Which form of Citrix NetScaler redundancy should a Citrix Administrator implement?

A. LACPB. VRRPC. ClusteringD. High availability

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 20Which command can a Citrix Administrator use to see a specific auditing Syslog policy binding?

A. show logB. show auditC. show syslogD. show attribute

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 21A Citrix Administrator would like to use TCP Profiles to optimize NetScaler Gateway for ICA Access withoutaffecting other load balanced traffic.

The administrator should use the __________ and bind it __________. (Choose the correct option to

Page 8: Citrix.realtests.1Y0 253.v2015!05!12.by.sophia.91q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers.

complete the sentence.)

A. nstcp_default_profile; globallyB. nstcp_default_XA_XD_profile; globallyC. nstcp_default_profile; to the NetScaler Gateway virtual serverD. nstcp_default_XA_XD_profile; to the NetScaler Gateway virtual server

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 22What is a valid command that a Citrix Administrator can run at the command-line interface to reconfigurethe NetScaler IP address?

A. set ns ipB. config nsC. add ns ipD. add ipset

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 23A Citrix Administrator needs to set up two-factor authentication on NetScaler Gateway for mobile devices.

Which two actions should the administrator take to allow users to log on using mobile devices? (Choosetwo.)

A. Create a pre-authentication policyB. Create a RADIUS authentication policyC. Bind the LDAP policy for primary authenticationD. Bind the RADIUS policy for primary authenticationE. Bind the RADIUS policy for secondary authentication

Correct Answer: BDSection: (none)Explanation

Explanation/Reference:

QUESTION 24Scenario: While troubleshooting a license issue on NetScaler, a Citrix Administrator notes the followingentry as the root cause:"1:47:12 (CITRIX) SERVER line says HOSTNAME=cag, hostid is HOSTNAME=ns"

In which file would the administrator modify the hostname to resolve this issue?

A. rc.confB. ns.confC. auth.log

Page 9: Citrix.realtests.1Y0 253.v2015!05!12.by.sophia.91q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers.

D. aaad.debug

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 25Which tool can be used by a Citrix Administrator, when using the NetScaler Configuration Utility, to collecttroubleshooting information to provide to Citrix Technical Support?

A. Get Back TraceB. Download core filesC. Download trace filesD. Generate support file

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 26Which script should a Citrix Administrator use when creating an Active Directory load balance monitorthrough the NetScaler?

A. nsldap.plB. nssnmp.plC. nsntlm-lwp.plD. nsbmradius.pl

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 27Which port exchanges high availability heartbeats?

A. TCP 80B. TCP 443C. TCP 3003D. UDP 3003

Correct Answer: DSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 28Scenario: A Citrix Administrator has configured NTP Time Servers in the Citrix NetScaler configuration.However, the time is NOT in sync with the NTP Time servers. The addresses of the servers have beenverified.

Page 10: Citrix.realtests.1Y0 253.v2015!05!12.by.sophia.91q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers.

What could be causing this issue?

A. NTP Synchronization state is disabled.B. NTP Authentication is NOT configured.C. NTP Server Auto Key is NOT configured.D. No NTP server is "Set as preferred NTP server".

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 29Which command is used to verify the authentication process?

A. show aaa userB. show aaa statsC. cat aaad.debugD. set aaa ldapParams

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 30Which two commands, when run at the command-line interface by a Citrix Administrator, can displayinterfaces configured for high availability monitoring? (Choose two.)

A. show nodeB. show statusC. show monitorD. show interfaceE. show hardware

Correct Answer: ADSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 31Which two steps must a Citrix Administrator complete to set up an SSL VPN virtual server? (Choose two.)

A. Bind a session policy.B. Install a certificate-key pair.C. Bind a certificate-key pair to the virtual server.D. Configure a Secure Ticketing Authority server.

Correct Answer: BCSection: (none)Explanation

Explanation/Reference:

Page 11: Citrix.realtests.1Y0 253.v2015!05!12.by.sophia.91q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers.

Explanation:

QUESTION 32A Citrix Administrator needs to configure a production website to show a custom message when the virtualserver is in a down state.

Which NetScaler function or feature should the administrator use in order to meet this requirement?

A. RewriteB. Redirect URLC. Content SwitchingD. Spillover Backup Action

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 33In an effort to troubleshoot NetScaler Gateway, a Citrix Administrator needs to capture packets to validatebasic traffic flow (IP and port information).

What would the administrator choose to begin collecting data to evaluate under Technical Support Toolsusing the NetScaler Configuration Utility?

A. Call HomeB. Get back traceC. Start new traceD. Generate support file

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 34Which two ports must a Citrix Administrator open on an internal firewall to allow users to launch desktopsthrough the NetScaler Gateway from a Citrix XenDesktop environment in which session reliability isenabled? (Choose two.)

A. 80B. 443C. 1494D. 2598E. 3001

Correct Answer: CDSection: (none)Explanation

Explanation/Reference:

QUESTION 35Which protocol should be used to configure a secure LDAP virtual server for a NetScaler Gatewaydeployment?

Page 12: Citrix.realtests.1Y0 253.v2015!05!12.by.sophia.91q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers.

A. SSLB. DTLSC. SSL_TCPD. SSL_BRIDGE

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 36A Citrix Administrator needs to shorten the URL for users to connect to a StoreFront website withoutknowing the store name.

Which policy should the administrator use to accomplish this requirement?

A. RewriteB. AppQoEC. SpilloverD. Responder

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 37Scenario: A Citrix Administrator is required to set up SSL Offloading for all virtual servers. Externalcommunication will come in as HTTPS traffic. Communication from the NetScaler to backend web serverswill be over HTTP.

In which two ways can the administrator set the protocol to meet the requirements? (Choose two.)

A. Service TypE. SSLB. Service TypE. TCPC. Service TypE. HTTPD. Virtual Server TypE. SSLE. Virtual Server TypE. HTTPF. Virtual Server TypE. SSL_TCP

Correct Answer: CDSection: (none)Explanation

Explanation/Reference:

QUESTION 38After performing an upgrade on a high availability pair, a Citrix Administrator notices that all of the virtualservers are down on the secondary appliance.

Which two commands can the administrator use to resolve this issue? (Choose two.)

A. show ha nodeB. sync ha files all

Page 13: Citrix.realtests.1Y0 253.v2015!05!12.by.sophia.91q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers.

C. force ha failoverD. set ha node -hasync enableE. set ha node -hastatus enable

Correct Answer: DESection: (none)Explanation

Explanation/Reference:

QUESTION 39Scenario: A NetScaler Gateway is configured to use RADIUS for authentication. A Citrix Administratorneeds to know which NetScaler IP (NSIP) address is used for outgoing RADIUS traffic.

How can the administrator verify which NSIP is used?

A. Check the ns.log file.B. Use the ping command.C. Check the messages log file.D. Use the nstcpdump.sh command.

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 40Scenario: A Citrix Administrator is configuring RADIUS as a two-factor authentication solution on theNetScaler. While testing the configuration the administrator observes that there are no incoming RADIUSrequests.

To resolve this issue, the administrator should change the setting of the "RADIUS client IP address" to the__________ address. (Choose the correct option to complete the sentence.)

A. Virtual IP (VIP)B. Client IP (CIP)C. NetScaler IP (NSIP)D. Global Server Load Balancing IP (GSLB IP)

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 41Scenario: External users need access to hosted desktops and applications. A Citrix Administrator isinstructed to configure access to hosted resources through NetScaler Gateway.

The administrator should configure ________ settings on the NetScaler Gateway in order to allow users toaccess the corporate desktop and application store through NetScaler Gateway.

A. SOAP ServiceB. Citrix XML ServiceC. Citrix Wallet ServiceD. Secure Ticket Authority

Page 14: Citrix.realtests.1Y0 253.v2015!05!12.by.sophia.91q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers.

Correct Answer: ASection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 42Scenario: A new software package has been developed at an organization. The organization has hired FieldSales Engineers to accompany Sales Executives when demonstrating the new software package. Thedemonstration software is hosted on an internal web server. A Citrix Administrator needs to configure theNetScaler to ensure end-to-end connectivity.

Which feature on the NetScaler must the administrator ensure is enabled to provide secure access from thepublic network?

A. Sure ConnectB. SSL OffloadingC. Application FirewallD. Global Server Load Balancing

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 43Scenario: A Citrix Administrator needs to configure a virtual server to load balance Citrix StoreFront.Corporate policy states that all communication must be encrypted coming into and going out of theNetScaler; however, the administrator needs to inspect the client HTTP header information.

Which type of service and virtual server are needed?

A. SSL service; SSL virtual serverB. HTTP service; SSL virtual serverC. HTTP service; HTTP virtual ServerD. SSL BRIDGE service; SSL_BRIDGE virtual server

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 44Scenario: A Citrix Administrator needs to restrict access to sensitive financial applications. The applicationsshould be accessible within the internal network, but NOT accessible externally through the NetScalerGateway.

What should the administrator configure to accomplish this requirement?

A. AAA groupB. Traffic policyC. Authorization policyD. SmartAccess policy

Correct Answer: D

Page 15: Citrix.realtests.1Y0 253.v2015!05!12.by.sophia.91q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers.

Section: (none)Explanation

Explanation/Reference:

QUESTION 45Which two things occur after adding a Subnet IP (SNIP) to a NetScaler which already has a Mapped IP(MIP)? (Choose two.)

A. The NetScaler IP (NSIP) is no longer required.B. A SNIP will be used in preference to a MIP.C. Adding a SNIP adds an entry to the routing table.D. Client machines can use the MIP instead of the Virtual IP (VIP).

Correct Answer: BCSection: (none)Explanation

Explanation/Reference:

QUESTION 46What should a Citrix Administrator configure to optimize an internal NetScaler Gateway virtual server whenmore bandwidth is available for use and other websites are NOT affected?

A. Windows Scaling within TCP parameters.B. Max Connections within HTTP parameters.C. A Net Profile that is applied to the NetScaler Gateway virtual server.D. Windows Scaling within a TCP Profile that is applied to the NetScaler Gateway virtual server.

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 47Scenario: A Citrix Administrator has configured two virtual servers (VServer1 and VServer2). Theadministrator would like to set up the virtual servers so that only when VServer1 is offline, VServer2 willbecome active.

What should the administrator configure to achieve this goal?

A. Service groupB. Spillover methodC. Backup virtual serverD. Spillover backup action

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 48A Citrix Administrator needs to validate the session policies that are put in place to differentiate mobiledevices from PCs.

Page 16: Citrix.realtests.1Y0 253.v2015!05!12.by.sophia.91q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers.

Which command, when run from a shell, will allow real time reading of the logs for this specific purpose?

A. nsconmsg -d current -g pol_hitsB. nsconmsg -K /var/nslog/newnslog -dC. nsconmsg -d current | grep -i rewriteD. nsconmsg -d current | grep -i responder

Correct Answer: ASection: (none)Explanation

Explanation/Reference:valid answer.

QUESTION 49Scenario: A recent security audit identified that communications between the NetScaler Gateway and theSTA were NOT secure. A Citrix Administrator was asked to secure this communication.

What must the administrator install as one of the steps to secure communications between the NetScalerGateway and the STA?

A. A root certificate on the NetScaler virtual server.B. A server certificate on the server running the STA.C. A server certificate from the STA server on the NetScaler virtual server.D. An HTTPS virtual server on the NetScaler to load balance STA servers.

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 50Which three parameters are required to create a new cluster instance? (Choose three.)

A. IP addressB. Instance IDC. Subnet maskD. Subnet IP addressE. Backplane interface

Correct Answer: ABESection: (none)Explanation

Explanation/Reference:

QUESTION 51Scenario: A Citrix Administrator needs to update an SSL certificate that is currently installed and configured.The administrator needs to locate the virtual server on which this SSL certificate is configured.

Which option should the administrator select to determine on which virtual server the SSL certificate isconfigured?

A. DetailsB. Cert LinksC. Show Bindings

Page 17: Citrix.realtests.1Y0 253.v2015!05!12.by.sophia.91q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers.

D. OCSP Bindings

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 52Which two methods should be used for generating a configuration data and statistics report for evaluationby Citrix? (Choose two.)

A. Run "show callhome" using the command-line interface.B. Run "show techsupport" using the command-line interface.C. Click the Call Home link under the Technical Support Tools section in the NetScaler Configuration

Utility.D. Click the Download trace files link under the Technical Support Tools section in the NetScaler

Configuration Utility.E. Click the Generate support file link under the Technical Support Tools section in the NetScaler

Configuration Utility.

Correct Answer: BESection: (none)Explanation

Explanation/Reference:

QUESTION 53Which NetScaler IP address type is created when the below command is executed at the command-lineinterface?

add ns ip 192.168.2.1 255.255.255.0

A. Virtual IPB. Cluster IPC. Subnet IPD. Mapped IPE. GSLB Site IP

Correct Answer: CSection: (none)Explanation

Explanation/Reference:exact answer.

QUESTION 54Which two components must a Citrix Administrator configure before GSLB can be configured? (Choosetwo.)

A. An authoritative DNSB. A link load balancing methodC. A high availability secondary nodeD. A NetScaler Gateway virtual server

Correct Answer: ADSection: (none)Explanation

Page 18: Citrix.realtests.1Y0 253.v2015!05!12.by.sophia.91q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers.

Explanation/Reference:

QUESTION 55Refer to the exhibit.

Scenario: A Citrix Administrator has implemented a remote access solution using NetScaler. The NetScaleris configured to validate user credentials connecting to Active Directory. A user cannot log into a StoreFrontstore from the Internet with their domain credentials. The administrator reviews the events listed inNetScaler.

Click the exhibit button to view the log.

What is the cause of the issue?

The user entered an incorrect password.

A. The user does NOT belong to the domain administrator group.B. The Authentication profile on the NetScaler Gateway is incorrect.C. The user does NOT have permission to access the requested resource.

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

Page 19: Citrix.realtests.1Y0 253.v2015!05!12.by.sophia.91q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers.

QUESTION 56Which type of connection is used when users launch a XenDesktop published application from WorxHome?

A. VPN onlyB. ICA ProxyC. Micro VPN onlyD. ICA through a Micro VPN

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 57A Citrix Administrator needs to provide users with access to web, SaaS and MDX applications from anexternal network.

Which Citrix product must the administrator configure and integrate with the NetScaler Gateway to ensurethat this requirement is met?

A. Web InterfaceB. App ControllerC. Delivery ControllerD. Provisioning Services

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 58Scenario: A Citrix Administrator would like to delegate administration of the Citrix NetScaler to a MicrosoftActive Directory group called "Citrix-NetScaler-Admins". The group already exists in Active Directory. TheCitrix-NetScaler-Admins group must have full-control permission on the Citrix NetScaler to perform theirtasks. The administrator has successfully configured an LDAP authentication server and authenticationpolicy. The authentication policy is already globally bound.

How should the administrator proceed on the Citrix NetScaler?

A. Create an AAA User called Citrix-NetScaler-Admins and select "External Authentication".B. Create a group called Citrix-NetScaler-Admins. Make the group a member of the operator command

policy.C. Create a group called Citrix-NetScaler-Admins. Make the group a member of the superuser command

policy.D. Create an AAA group called Citrix-NetScaler-Admins. Create an ALLOW authorization policy and bind it

to the Citrix-NetScaler-Admins AAA Group.

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 59Various users report that while accessing the Citrix NetScaler Gateway virtual server they get an error

Page 20: Citrix.realtests.1Y0 253.v2015!05!12.by.sophia.91q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers.

message that the public SSL certificate is NOT trusted.

Which three steps should a Citrix Administrator take on the NetScaler to resolve this issue? (Choose three.)

A. Import the root certificate.B. Import the intermediate certificate.C. Download the root certificate from the vendor.D. Link the root certificate to the intermediate certificate.E. Download the intermediate certificate from the vendor.F. Link the intermediate certificate to the existing server certificate.

Correct Answer: BEFSection: (none)Explanation

Explanation/Reference:

QUESTION 60Scenario: A Citrix Administrator is implementing a NetScaler appliance for the first time. All clients willconnect from a public network and all servers will reside on a private network.

Which deployment mode should the administrator use to implement the NetScaler?

A. Layer 2 (L2) modeB. Layer 3 (L3) modeC. Two-arm deployment modeD. MAC-based forwarding mode

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 61Which IP address must be unique on each node in a high availability configuration?

A. Virtual IP (VIP)B. Mapped IP (MIP)C. Subnet IP (SNIP)D. NetScaler IP (NSIP)

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 62Scenario: A company is considering using NetScaler appliances to load balance existing secured webservers. The company compliance policy does NOT allow any alterations of the SSL sessions betweenclients and web servers.Which option should a Citrix Administrator configure on the NetScaler virtual server to meet the needs ofthe company?

A. SSL VPNB. SSL Bridge

Page 21: Citrix.realtests.1Y0 253.v2015!05!12.by.sophia.91q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers.

C. SSL OffloadD. SSL Renegotiation

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 63Which two steps must a Citrix Administrator take to allow additional users to access resources using theNetScaler Gateway Plug-in after the administrator installs the universal license on the NetScaler Gateway?(Choose two.)

A. Set ICA Proxy to OFF.B. Configure Citrix Receiver Home Page.C. Change the authentication AAA settings.D. Set Single Sign-on with Windows to OFF.

Correct Answer: ACSection: (none)Explanation

Explanation/Reference:

QUESTION 64Which two parameters are required for adding a new node to a cluster? (Choose two.)

A. Cluster IP of the new cluster nodeB. NetScaler IP of the new cluster nodeC. NetScaler IP of the existing cluster nodeD. Remote NetScaler user name and passwordE. Backplane interface of the existing cluster node

Correct Answer: BDSection: (none)Explanation

Explanation/Reference:

QUESTION 65Scenario: Users report that they are being presented with a certificate error when they attempt to access theremote access website of the company. No changes were made to the NetScaler certificates recently.

What should the Citrix Administrator check on the NetScaler to identify this issue?

A. Cert LinksB. OCSP BindingC. Certificate FormatD. Certificate Expiry Date

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

Page 22: Citrix.realtests.1Y0 253.v2015!05!12.by.sophia.91q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers.

QUESTION 66Which monitor should a Citrix Administrator configure to monitor a StoreFront server group with SSLenabled?

A. TCPB. SSL_TCPC. STOREFRONT with "Secure" checkedD. CITRIX-WEB-INTERFACE with "Secure" checked

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 67A Citrix Administrator needs to track load balanced traffic from the NetScaler to separate, individualsubnets.

Which IP address should be used to do this?

A. Virtual IP (VIP)B. Mapped IP (MIP)C. NetScaler IP (NSIP)D. Subnet IP (SNIP)

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 68Two StoreFront servers in an environment need to be addressed with a single URL.

Which feature should a Citrix Administrator enable to meet this requirement?

A. SSL VPNB. Load BalancingC. Integrated CachingD. Application Firewall

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 69A Citrix Administrator receives information that users are having difficulty logging into the NetScalerGateway Portal, where they access published resources, applications and desktops.

What should the administrator configure on the NetScaler to view these events and identify the cause?

A. SyslogB. ns.conf

Page 23: Citrix.realtests.1Y0 253.v2015!05!12.by.sophia.91q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers.

C. AppFlowD. nsconmsg

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 70A Citrix Administrator needs to configure two-factor authentication for mobile devices with RSA tokens.Which two policies should the administrator configure to enable this feature? (Choose two.)

A. SSLB. LocalC. LDAPD. RADIUSE. TACACS

Correct Answer: CDSection: (none)Explanation

Explanation/Reference:

QUESTION 71Scenario: A Citrix Administrator created a content switching virtual server. The administrator is unable tobind the load balancing virtual server to the content switching virtual server.

Which protocol is being used on the load balancing virtual server that is causing this issue?

A. SSLB. TCPC. UDPD. SSL_Bridge

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 72Which NetScaler feature will a Citrix Administrator configure in order to redirect all HTTP requests toHTTPS?

A. RewriteB. SSL VPNC. Content SwitchingD. Cache Redirection

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

Page 24: Citrix.realtests.1Y0 253.v2015!05!12.by.sophia.91q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers.

QUESTION 73Which two pieces of information are required to create a virtual server? (Choose two.)

A. PortB. ProtocolC. Subnet MaskD. Gateway Address

Correct Answer: ABSection: (none)Explanation

Explanation/Reference:

QUESTION 74Scenario: A company requires two-factor authentication using RSA tokens and Active Directory. The CitrixAdministrator configured the following two authentication policies with these parameters:

What should the administrator do to protect the NetScaler Gateway virtual server from an attack againstActive Directory?

A. Bind the RSA_policy in Primary Authentication Policies and bind the AD_policy in SecondaryAuthentication Policies.

B. Bind the AD_policy in Primary Authentication Policies and bind the RSA_policy in SecondaryAuthentication Policies.

C. Bind the AD_policy and the RSA_policy in Primary Authentication Policies and set the RSA_policypriority higher than the AD_policy.

D. Bind the AD_policy and the RSA_policy in Primary Authentication Policies and set the AD_policy priorityhigher than the RSA_policy.

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 75Which setting is required to complete the configuration of a NetScaler Gateway virtual server?

A. DNSB. CertificateC. AuthorizationD. Content Switching

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 76Scenario: A Citrix Administrator has configured access to a StoreFront store through the NetScalerGateway:

http://FQDN/Citrix/storeweb

When users attempt to access resources using the URL of the gateway, a 404 error is displayed.

Page 25: Citrix.realtests.1Y0 253.v2015!05!12.by.sophia.91q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers.

What could be causing the error?

A. The URL is case-sensitive.B. The session policy is missing.C. The website needs to use HTTPS protocol.D. The IP address is needed instead of FQDN in the URL.

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 77A penetration test has been performed against the NetScaler Gateway Virtual IPs (VIPs) resulting in theSSL RC4-based ciphers being flagged.

What should the administrator do to address the vulnerability?

A. Remove all the SSL ciphers from the virtual server.B. Assign Cipher Group 'ALL' to the NetScaler virtual server.C. Assign Cipher Group 'HIGH' to the NetScaler virtual server.D. Assign Cipher Group 'DEFAULT' to the NetScaler virtual server.

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 78A Citrix Administrator needs to ensure that published applications are available to users through StoreFront.

Which monitor type should the administrator use to ensure that services are available?

A. HTTPB. HTTP-ECVC. STOREFRONTD. CITRIX-WEB-INTERFACE

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 79Scenario: Two Citrix NetScaler appliances are being used in an environment to load balance a high volumeweb service. These two appliances are nearing their capacity limits. A Citrix Administrator is instructed toadd a new appliance to the NetScaler deployment in order to accommodate increasing web traffic.

Which type of Citrix NetScaler redundancy configuration should be implemented?

A. LACPB. VRRPC. Clustering

Page 26: Citrix.realtests.1Y0 253.v2015!05!12.by.sophia.91q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers.

D. High availability

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 80A Citrix Administrator needs to record the usernames of all users who are accessing resources through theNetScaler Gateway.

Which two NetScaler tools can accomplish this task? (Choose two.)

A. SNMPB. SyslogC. DashboardD. NetScaler Insight Center

Correct Answer: BDSection: (none)Explanation

Explanation/Reference:definite answer.

QUESTION 81Scenario: A Citrix Administrator needs to set up a single NetScaler Gateway to provide users with secureaccess to a corporate environment. Some users only need to access their server OS hosted desktop whileothers need to set up a VPN connection.

What should the administrator configure on the NetScaler Gateway to allow both types of users to connectthrough a single NetScaler Gateway?

A. Set the UI Theme to Custom.B. Set Clientless Access to Allow.C. Enable the Client Choices option.D. Set the Clients Configuration option to Custom.

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 82A Citrix Administrator needs to flush the cache for a specific URL.

Which step should the administrator take to remove only the required cached data?

A. Flush cacheB. Flush content groupC. Reboot the NetScalerD. Flush the specific object

Correct Answer: DSection: (none)Explanation

Page 27: Citrix.realtests.1Y0 253.v2015!05!12.by.sophia.91q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers.

Explanation/Reference:right answer.

QUESTION 83Scenario: A Citrix Administrator needs to install a new certificate on the NetScaler Gateway virtual server.The administrator was provided a new PFX certificate and has imported the PKCS12 file to the NetScaler.

What should the administrator do to complete the installation of the certificate?

A. Create the RSA key and bind to the virtual server.B. Install the Cert-Key Pair and bind to the virtual server.C. Split the PEM file, install Cert-Key Pair and bind to the virtual server.D. Create the CSR and install the Cert-Key Pair, and bind to the virtual server.

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 84A Citrix Administrator is replacing an expired SSL certificate bound to a virtual server. The established ICAconnections to the virtual server will display as _______. (Choose the correct option to complete thesentence.)

A. logged offB. terminatedC. disconnectedD. uninterrupted

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 85At the onset of a XenDesktop 7.5 with NetScaler Gateway 10.5 proof-of-concept, users report they areunable to access desktop and server OS machines.

Which configuration might be preventing users from accessing desktop and server OS machines?

A. Single-hop DMZ with StoreFrontB. Double-hop DMZ with StoreFrontC. Single-hop DMZ with Web InterfaceD. Double-hop DMZ with Web Interface

Correct Answer: BSection: (none)Explanation

Explanation/Reference:answer is great.

QUESTION 86Which two NetScaler components are needed to deploy a NetScaler Gateway solution for an existingXenApp environment? (Choose two.)

Page 28: Citrix.realtests.1Y0 253.v2015!05!12.by.sophia.91q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers.

A. PoliciesB. AppQoEC. Virtual ServerD. HTTP CalloutE. Content Switching Virtual Server

Correct Answer: ACSection: (none)Explanation

Explanation/Reference:

QUESTION 87Scenario: A Citrix Administrator created a new NetScaler Gateway virtual server. During testing, users areunable to access XenApp applications through iOS and Android devices.

Which configuration should the administrator verify?

A. Clientless Access is set to OFF.B. Client Cleanup prompt is selected.C. The virtual server is set to Basic Mode.D. Single Sign-on to Web Applications is selected.

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 88Which command would generate a Collector File?

A. nstcpdumpB. start nstraceC. cat aaad.debugD. show techsupport

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 89While logged on to the NetScaler Configuration Utility, a Citrix Administrator notices that CPU utilization ishigher than expected.

What should the administrator configure to receive notification of this event in the future, when theadministrator is NOT logged on?

A. AuditingB. SNMP TrapC. SNMP ViewD. AppFlow Logging

Page 29: Citrix.realtests.1Y0 253.v2015!05!12.by.sophia.91q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers.

Correct Answer: BSection: (none)Explanation

Explanation/Reference:authenticated answer.

QUESTION 90Scenario: A Citrix Administrator is configuring RSA as a two-factor authentication solution, using defaultsettings on the NetScaler. While testing the configuration, the administrator notices that users cannot logon.

The administrator should verify that traffic is allowed to flow over __________ through the firewall to resolvethis issue. (Choose the correct option to complete the sentence.)

A. UDP port 1850B. TCP port 1812C. TCP port 1850D. UDP port 1812

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 91Scenario: Authentication through a NetScaler Gateway is NOT functioning for all users. A CitrixAdministrator needs to ensure that user authentication events are being sent to the external corporatelogging server.

Where should the administrator go in the NetScaler Configuration Utility to meet this requirement?

A. Policies > Auditing > NslogB. Policies > Auditing > SyslogC. Policies > Authentication > LocalD. Policies > Authentication > LDAP

Correct Answer: BSection: (none)Explanation

Explanation/Reference: