citrix.testking.1y0 253.v2015!05!05.by.clarice.81q unprotected

35
www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn TestKing.1Y0-253.81Q Number: 1Y0-253 Passing Score: 800 Time Limit: 120 min File Version: 4.6 1Y0-253 Implementing Citrix NetScaler 10.5 for App and Desktop Solutions A- Finally, I got right questions for this exam and share with you guys. Best Wishes. B- I only used these questions and got 90% marks with this. Perfect Show. C- It is 100% reliable source to get prepared in short time. D- This is the best VCE I ever made. Try guys and if any suggestion please update this. E- Awesome work.

Upload: xsolarisx

Post on 17-Feb-2016

24 views

Category:

Documents


0 download

DESCRIPTION

Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

TRANSCRIPT

Page 1: Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

TestKing.1Y0-253.81Q

Number: 1Y0-253Passing Score: 800Time Limit: 120 minFile Version: 4.6

1Y0-253

Implementing Citrix NetScaler 10.5 for App and Desktop Solutions

A- Finally, I got right questions for this exam and share with you guys. Best Wishes. B- I only used these questions and got 90% marks with this. Perfect Show. C- It is 100% reliable source to get prepared in short time. D- This is the best VCE I ever made. Try guys and if any suggestion please update this. E- Awesome work.

kinan
Text Box
Dumps & Student Guide & Workshop & Internal Training & Video Training Update Daily https://goo.gl/VVmVZ0
Page 2: Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

Exam A

QUESTION 1A Citrix Administrator needs to track load balanced traffic from the NetScaler to separate, individual subnets.

Which IP address should be used to do this?

A. Virtual IP (VIP)B. Mapped IP (MIP)C. NetScaler IP (NSIP)D. Subnet IP (SNIP)

Correct Answer: DSection: (none)Explanation

Explanation/Reference:answer is reliable.

QUESTION 2Two StoreFront servers in an environment need to be addressed with a single URL.

Which feature should a Citrix Administrator enable to meet this requirement?

A. SSL VPNB. Load BalancingC. Integrated CachingD. Application Firewall

Correct Answer: ASection: (none)Explanation

Explanation/Reference:most appropriate answer.

QUESTION 3Which two steps must a Citrix Administrator complete to configure the SSL Offloading feature on a NetScaler appliance? (Choose two.)

A. Create a DNS virtual server.B. Configure an AAA virtual server.

Page 3: Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

C. Create an SSL VPN virtual server.D. Create a load balancing virtual server.E. Import a valid certification-key pair and bind it to the virtual server.

Correct Answer: DESection: (none)Explanation

Explanation/Reference:answer is valid.

QUESTION 4A Citrix Administrator is replacing an expired SSL certificate bound to a virtual server. The established ICA connections to the virtual server will displayas _______. (Choose the correct option to complete the sentence.)

A. logged offB. terminatedC. disconnectedD. uninterrupted

Correct Answer: CSection: (none)Explanation

Explanation/Reference:true answer.

QUESTION 5Which two NetScaler components are needed to deploy a NetScaler Gateway solution for an existing XenApp environment? (Choose two.)

A. PoliciesB. AppQoEC. Virtual ServerD. HTTP CalloutE. Content Switching Virtual Server

Correct Answer: ACSection: (none)Explanation

Page 4: Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

Explanation/Reference:good answer.

QUESTION 6Scenario: Authentication through a NetScaler Gateway is NOT functioning for all users. A Citrix Administrator needs to ensure that user authenticationevents are being sent to the external corporate logging server.

Where should the administrator go in the NetScaler Configuration Utility to meet this requirement?

A. Policies > Auditing > NslogB. Policies > Auditing > SyslogC. Policies > Authentication > LocalD. Policies > Authentication > LDAP

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 7In which directory can a Citrix Administrator locate the SSL certificates, certificate keys and root CA files?

A. /var/nslogB. /var/ns_guiC. /nsconfig/sslD. /var/netscaler

Correct Answer: CSection: (none)Explanation

Explanation/Reference:answer is actual.

QUESTION 8Which three steps should a Citrix Administrator take to customize the NetScaler Gateway logon page? (Choose three.)

A. Select Custom within UI Theme.B. Create customization changes under /nsconfig.

Page 5: Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

C. Create a tar package of the customization files.D. Add a copy command to rc.netscaler file within /nsconfig.E. Create customization changes under /var/ns_gui_custom/ns_gui/vpn.

Correct Answer: ACESection: (none)Explanation

Explanation/Reference:genuine answer.

QUESTION 9Scenario: A Citrix Administrator has configured Outlook Web Access by means of a Citrix NetScaler AAA virtual server. Users complain that they needto re-authenticate after 30 minutes of inactivity.Users work all day from Outlook Web Access.

Which configuration change should an administrator make to ensure the session is available the entire workday?

A. Session time-out in 480 (minutes).B. Enable Persistent Cookie Validity in 480 (minutes).C. Set Client Idle Time-out to 10800 (seconds) on the Outlook Web Access virtual server.D. Set Client Idle Time-out to 10800 (seconds) on the Outlook Web Access Service (group).

Correct Answer: BSection: (none)Explanation

Explanation/Reference:answer is absolutely straight.

QUESTION 10A Citrix Administrator is upgrading NetScaler 10.1 appliances in a high availability (HA) pair to NetScaler 10.5.

What is the first step to launch the upgrade according to Citrix best practice?

A. Use the NetScaler Configuration Utility on the primary appliance to force HA failover.B. Execute the installns command on the primary appliance.C. Use the NetScaler Configuration Utility on the secondary appliance to force HA failover.D. Execute the installns command on the secondary appliance.

Page 6: Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

Correct Answer: DSection: (none)Explanation

Explanation/Reference:correct answer.

QUESTION 11Which IP address does NetScaler use for Active Directory authentication?

A. Virtual IP (VIP)B. Client IP (CIP)C. NetScaler IP (NSIP)D. Subnet IP (SNIP)

Correct Answer: DSection: (none)Explanation

Explanation/Reference:actual answer.

QUESTION 12A Citrix Administrator has created a session policy that needs to be applied to a subset of users.

To what should the administrator bind the session policy to accomplish this task?

A. GroupB. ServerC. ServiceD. Virtual server

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 13A Citrix Administrator would like to use an existing monitor script included in NetScaler for load balancing TFTP services in a Provisioning Services

Page 7: Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

deployment.

Which monitor type should the administrator choose in order to complete the task?

A. ARPB. USERC. TCP-ECVD. UDP-ECV

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 14External users should only be allowed to access an application from devices with a specific registry setting.

What should an administrator configure on the NetScaler to restrict access to the application?

A. LDAPB. L3 ModeC. SSL/VPND. Endpoint Analysis

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 15A Citrix Administrator needs to configure a load balanced RADIUS virtual server for authentication on the NetScaler.

Which IP address should the administrator configure on the RADIUS server client configuration?

A. Virtual IP (VIP)B. NetScaler IP (NSIP)

Page 8: Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

C. Subnet IP (SNIP)D. Client IP (CIP)

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 16Scenario: A backend web server is NOT functioning correctly due to a database related issue. The web server is load balanced by Citrix NetScaler. Dueto the database issue, the correct content is NOT being displayed. However the NetScaler is still allowing connections to the web server.

How can a Citrix Administrator prevent this from happening?

A. Create an SQL database user within NetScaler.B. Create two monitors, one on the webserver that checks on HTTP and one on the database server that checks on TCP.C. Create an HTTP monitor on the webserver that checks on a pattern that originates from the database within the HTML code.D. Create an HTTP-ECV monitor on the webserver that checks on a pattern that originates from the database within the HTML code.

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 17Where in the NetScaler Configuration Utility should a Citrix Administrator configure a load balancing virtual server?

A. SystemB. AppExpertC. OptimizationD. Traffic Management

Correct Answer: ASection: (none)Explanation

Page 9: Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

Explanation/Reference:authenticated answer.

QUESTION 18Scenario: A Citrix Administrator configured the following preauthentication policies for NetScaler Gateway.Priority 20Policy2bound to virtual serverPriority 10Policy1bound to AAA GlobalPriority 10Policy3bound to virtual serverPriority 20Policy4bound to AAA Global

In which order are the policies applied?

A. Policy2, Policy3, Policy1, Policy4B. Policy1, Policy2, Policy3, Policy4C. Policy4, Policy2, Policy1, Policy3D. Policy3, Policy1, Policy4, Policy2

Correct Answer: CSection: (none)Explanation

Explanation/Reference:genuine answer.

QUESTION 19HDX Insight is used in a 500-user organization that has a single datacenter location with a single Internet service provider.

Which form of Citrix NetScaler redundancy should a Citrix Administrator implement?

A. LACPB. VRRPC. ClusteringD. High availability

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

Page 10: Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

QUESTION 20Which command can a Citrix Administrator use to see a specific auditing Syslog policy binding?

A. show logB. show auditC. show syslogD. show attribute

Correct Answer: BSection: (none)Explanation

Explanation/Reference:answer is suitable.

QUESTION 21A Citrix Administrator would like to use TCP Profiles to optimize NetScaler Gateway for ICA Access without affecting other load balanced traffic.

The administrator should use the __________ and bind it __________. (Choose the correct option to complete the sentence.)

A. nstcp_default_profile; globallyB. nstcp_default_XA_XD_profile; globallyC. nstcp_default_profile; to the NetScaler Gateway virtual serverD. nstcp_default_XA_XD_profile; to the NetScaler Gateway virtual server

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 22What is a valid command that a Citrix Administrator can run at the command-line interface to reconfigure the NetScaler IP address?

A. set ns ipB. config nsC. add ns ipD. add ipset

Page 11: Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 23A Citrix Administrator needs to set up two-factor authentication on NetScaler Gateway for mobile devices.

Which two actions should the administrator take to allow users to log on using mobile devices? (Choose two.)

A. Create a pre-authentication policyB. Create a RADIUS authentication policyC. Bind the LDAP policy for primary authenticationD. Bind the RADIUS policy for primary authenticationE. Bind the RADIUS policy for secondary authentication

Correct Answer: BDSection: (none)Explanation

Explanation/Reference:

QUESTION 24Scenario: While troubleshooting a license issue on NetScaler, a Citrix Administrator notes the following entry as the root cause:"1:47:12 (CITRIX) SERVER line says HOSTNAME=cag, hostid is HOSTNAME=ns"

In which file would the administrator modify the hostname to resolve this issue?

A. rc.confB. ns.confC. auth.logD. aaad.debug

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

Page 12: Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

QUESTION 25Which tool can be used by a Citrix Administrator, when using the NetScaler Configuration Utility, to collect troubleshooting information to provide toCitrix Technical Support?

A. Get Back TraceB. Download core filesC. Download trace filesD. Generate support file

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 26Which script should a Citrix Administrator use when creating an Active Directory load balance monitor through the NetScaler?

A. nsldap.plB. nssnmp.plC. nsntlm-lwp.plD. nsbmradius.pl

Correct Answer: ASection: (none)Explanation

Explanation/Reference:all right.

QUESTION 27Which port exchanges high availability heartbeats?

A. TCP 80B. TCP 443C. TCP 3003D. UDP 3003

Page 13: Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 28Scenario: A Citrix Administrator has configured NTP Time Servers in the Citrix NetScaler configuration. However, the time is NOT in sync with the NTPTime servers. The addresses of the servers have been verified.What could be causing this issue?

A. NTP Synchronization state is disabled.B. NTP Authentication is NOT configured.C. NTP Server Auto Key is NOT configured.D. No NTP server is "Set as preferred NTP server".

Correct Answer: ASection: (none)Explanation

Explanation/Reference:perfect answer.

QUESTION 29Which command is used to verify the authentication process?

A. show aaa userB. show aaa statsC. cat aaad.debugD. set aaa ldapParams

Correct Answer: CSection: (none)Explanation

Explanation/Reference:finest answer.

QUESTION 30

Page 14: Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

Which two commands, when run at the command-line interface by a Citrix Administrator, can display interfaces configured for high availabilitymonitoring? (Choose two.)

A. show nodeB. show statusC. show monitorD. show interfaceE. show hardware

Correct Answer: ADSection: (none)Explanation

Explanation/Reference:

QUESTION 31Which two steps must a Citrix Administrator complete to set up an SSL VPN virtual server? (Choose two.)

A. Bind a session policy.B. Install a certificate-key pair.C. Bind a certificate-key pair to the virtual server.D. Configure a Secure Ticketing Authority server.

Correct Answer: BCSection: (none)Explanation

Explanation/Reference:

QUESTION 32A Citrix Administrator needs to configure a production website to show a custom message when the virtual server is in a down state.

Which NetScaler function or feature should the administrator use in order to meet this requirement?

A. RewriteB. Redirect URLC. Content SwitchingD. Spillover Backup Action

Page 15: Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 33Which log file should a Citrix Administrator use to troubleshoot a cluster node in the INACTIVE state?

A. ns.logB. http.logC. auth.logD. nscollect.log

Correct Answer: ASection: (none)Explanation

Explanation/Reference:answer is nice.

QUESTION 34A security policy at a company requires all URLs to be encrypted when accessing the backend server through NetScaler Gateway.

Which step should a Citrix Administrator take to meet this company policy?

A. Enable SSL Offload.B. Configure SSL Bridge.C. Enable Cipher Redirect.D. Configure Clientless Access URL Encoding.

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 35

Page 16: Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

Which two ports must a Citrix Administrator open on an internal firewall to allow users to launch desktops through the NetScaler Gateway from a CitrixXenDesktop environment in which session reliability is enabled? (Choose two.)

A. 80B. 443C. 1494D. 2598E. 3001

Correct Answer: CDSection: (none)Explanation

Explanation/Reference:Okay.

QUESTION 36A Citrix Administrator needs to shorten the URL for users to connect to a StoreFront website without knowing the store name.

Which policy should the administrator use to accomplish this requirement?

A. RewriteB. AppQoEC. SpilloverD. Responder

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 37Scenario: A Citrix Administrator is required to set up SSL Offloading for all virtual servers. External communication will come in as HTTPS traffic.Communication from the NetScaler to backend web servers will be over HTTP.

In which two ways can the administrator set the protocol to meet the requirements? (Choose two.)

A. Service TypE. SSL

Page 17: Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

B. Service TypE. TCPC. Service TypE. HTTPD. Virtual Server TypE. SSLE. Virtual Server TypE. HTTPF. Virtual Server TypE. SSL_TCP

Correct Answer: CDSection: (none)Explanation

Explanation/Reference:

QUESTION 38After performing an upgrade on a high availability pair, a Citrix Administrator notices that all of the virtual servers are down on the secondary appliance.

Which two commands can the administrator use to resolve this issue? (Choose two.)

A. show ha nodeB. sync ha files allC. force ha failoverD. set ha node -hasync enableE. set ha node -hastatus enable

Correct Answer: DESection: (none)Explanation

Explanation/Reference:

QUESTION 39Scenario: A NetScaler Gateway is configured to use RADIUS for authentication. A Citrix Administrator needs to know which NetScaler IP (NSIP)address is used for outgoing RADIUS traffic.

How can the administrator verify which NSIP is used?

A. Check the ns.log file.B. Use the ping command.C. Check the messages log file.

Page 18: Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

D. Use the nstcpdump.sh command.

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 40Scenario: A Citrix Administrator is configuring RADIUS as a two-factor authentication solution on the NetScaler. While testing the configuration theadministrator observes that there are no incoming RADIUS requests.

To resolve this issue, the administrator should change the setting of the "RADIUS client IP address" to the __________ address. (Choose the correctoption to complete the sentence.)

A. Virtual IP (VIP)B. Client IP (CIP)C. NetScaler IP (NSIP)D. Global Server Load Balancing IP (GSLB IP)

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 41While debugging the NetScaler Gateway authentication to Active Directory, a Citrix Administrator notices the "Groups Allowed To Login" option ispreventing intended users from accessing the site. Which NetScaler Gateway policy area should be reviewed?

A. AuditingB. SessionC. AuthenticationD. Preauthentication

Correct Answer: BSection: (none)Explanation

Page 19: Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

Explanation/Reference:

QUESTION 42Where can the license.log file be found in the NetScaler folder structure?

A. /var/logB. /var/netscalerC. /var/nsproflogD. /var/netscaler/help

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 43Scenario: External users need access to hosted desktops and applications. A Citrix Administrator is instructed to configure access to hosted resourcesthrough NetScaler Gateway.

The administrator should configure ________ settings on the NetScaler Gateway in order to allow users to access the corporate desktop andapplication store through NetScaler Gateway.

A. SOAP ServiceB. Citrix XML ServiceC. Citrix Wallet ServiceD. Secure Ticket Authority

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 44Where should a Citrix Administrator implement an Endpoint Analysis expression?

A. Session profile

Page 20: Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

B. Authorization policyC. Authentication policyD. Preauthentication policy

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 45Which setting is required to complete the configuration of a NetScaler Gateway virtual server?

A. DNSB. CertificateC. AuthorizationD. Content Switching

Correct Answer: BSection: (none)Explanation

Explanation/Reference:specific answer.

QUESTION 46Scenario: A Citrix Administrator has configured access to a StoreFront store through the NetScaler Gateway:

http://FQDN/Citrix/storeweb

When users attempt to access resources using the URL of the gateway, a 404 error is displayed.

What could be causing the error?

A. The URL is case-sensitive.B. The session policy is missing.C. The website needs to use HTTPS protocol.D. The IP address is needed instead of FQDN in the URL.

Page 21: Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 47Which command should a Citrix Administrator run at the command-line interface to display the NetScaler certificate days to expiration?

A. show certFileB. show ssl statsC. show ssl certKeyD. show certParams

Correct Answer: CSection: (none)Explanation

Explanation/Reference:definite answer.

QUESTION 48A Citrix Administrator is configuring MicroVPN with MDX wrapped apps to support StoreFront.

Which two settings must the administrator configure in the NetScaler Gateway Global settings under "Configure Domains for Clientless Access"?(Choose two.)

A. StoreFront URLB. XenMobile Gateway URLC. App Controller Host nameD. Secure Ticketing Authority

Correct Answer: ACSection: (none)Explanation

Explanation/Reference:to the point answer.

QUESTION 49

Page 22: Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

Which two pieces of information are needed to create the Authentication Policy for RADIUS? (Choose two.)

A. Base DNB. Secret KeyC. SSL CertificateD. RADIUS User Group nameE. IP address of the RADIUS server

Correct Answer: BESection: (none)Explanation

Explanation/Reference:answer is upgraded.

QUESTION 50Scenario: A Citrix Administrator is in the process of implementing StoreFront with NetScaler Gateway. Users in the environment will access resourcesthrough Citrix Receiver only.

What does the administrator need to configure on the NetScaler Gateway to enable access through Citrix Receiver only?

A. ICA ProxyB. A Traffic PolicyC. Endpoint ScansD. An AppFlow Policy

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 51Scenario: A Citrix Administrator has implemented a remote access solution using NetScaler. The administrator is alerted with information indicatingusers attempting to access resources through NetScaler are unable to authenticate.

How can the administrator identify whether the authentication process is the cause?

A. Review the system log on the Domain Controller.

Page 23: Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

B. Execute the "nsconmsg -d event" command on the NetScaler.C. Use the "cat aaad.debug" command on the NetScaler shell.D. Use the "vi /var/log/auth_error.log" command to review saved events on the NetScaler shell.

Correct Answer: CSection: (none)Explanation

Explanation/Reference:fantastic answer.

QUESTION 52A penetration test has been performed against the NetScaler Gateway Virtual IPs (VIPs) resulting in the SSL RC4-based ciphers being flagged.

What should the administrator do to address the vulnerability?

A. Remove all the SSL ciphers from the virtual server.B. Assign Cipher Group 'ALL' to the NetScaler virtual server.C. Assign Cipher Group 'HIGH' to the NetScaler virtual server.D. Assign Cipher Group 'DEFAULT' to the NetScaler virtual server.

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 53A Citrix Administrator needs to ensure that published applications are available to users through StoreFront.

Which monitor type should the administrator use to ensure that services are available?

A. HTTPB. HTTP-ECVC. STOREFRONTD. CITRIX-WEB-INTERFACE

Correct Answer: CSection: (none)

Page 24: Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

Explanation

Explanation/Reference:

QUESTION 54Scenario: Two Citrix NetScaler appliances are being used in an environment to load balance a high volume web service. These two appliances arenearing their capacity limits. A Citrix Administrator is instructed to add a new appliance to the NetScaler deployment in order to accommodate increasingweb traffic.

Which type of Citrix NetScaler redundancy configuration should be implemented?

A. LACPB. VRRPC. ClusteringD. High availability

Correct Answer: CSection: (none)Explanation

Explanation/Reference:answer is superb.

QUESTION 55A Citrix Administrator needs to record the usernames of all users who are accessing resources through the NetScaler Gateway.

Which two NetScaler tools can accomplish this task? (Choose two.)

A. SNMPB. SyslogC. DashboardD. NetScaler Insight Center

Correct Answer: BDSection: (none)Explanation

Explanation/Reference:

Page 25: Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

QUESTION 56Scenario: A Citrix Administrator needs to set up a single NetScaler Gateway to provide users with secure access to a corporate environment. Someusers only need to access their server OS hosted desktop while others need to set up a VPN connection.

What should the administrator configure on the NetScaler Gateway to allow both types of users to connect through a single NetScaler Gateway?

A. Set the UI Theme to Custom.B. Set Clientless Access to Allow.C. Enable the Client Choices option.D. Set the Clients Configuration option to Custom.

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 57A Citrix Administrator needs to flush the cache for a specific URL.

Which step should the administrator take to remove only the required cached data?

A. Flush cacheB. Flush content groupC. Reboot the NetScalerD. Flush the specific object

Correct Answer: DSection: (none)Explanation

Explanation/Reference:answer is Excellent.

QUESTION 58Scenario: A Citrix Administrator needs to install a new certificate on the NetScaler Gateway virtual server. The administrator was provided a new PFXcertificate and has imported the PKCS12 file to the NetScaler.

What should the administrator do to complete the installation of the certificate?

Page 26: Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

A. Create the RSA key and bind to the virtual server.B. Install the Cert-Key Pair and bind to the virtual server.C. Split the PEM file, install Cert-Key Pair and bind to the virtual server.D. Create the CSR and install the Cert-Key Pair, and bind to the virtual server.

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 59Scenario: A new software package has been developed at an organization. The organization has hired Field Sales Engineers to accompany SalesExecutives when demonstrating the new software package. The demonstration software is hosted on an internal web server. A Citrix Administratorneeds to configure the NetScaler to ensure end-to-end connectivity.

Which feature on the NetScaler must the administrator ensure is enabled to provide secure access from the public network?

A. Sure ConnectB. SSL OffloadingC. Application FirewallD. Global Server Load Balancing

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 60Scenario: A Citrix Administrator needs to configure a virtual server to load balance Citrix StoreFront. Corporate policy states that all communicationmust be encrypted coming into and going out of the NetScaler; however, the administrator needs to inspect the client HTTP header information.

Which type of service and virtual server are needed?

A. SSL service; SSL virtual serverB. HTTP service; SSL virtual serverC. HTTP service; HTTP virtual Server

Page 27: Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

D. SSL BRIDGE service; SSL_BRIDGE virtual server

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 61Scenario: A Citrix Administrator needs to restrict access to sensitive financial applications. The applications should be accessible within the internalnetwork, but NOT accessible externally through the NetScaler Gateway.

What should the administrator configure to accomplish this requirement?

A. AAA groupB. Traffic policyC. Authorization policyD. SmartAccess policy

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 62Which two things occur after adding a Subnet IP (SNIP) to a NetScaler which already has a Mapped IP (MIP)? (Choose two.)

A. The NetScaler IP (NSIP) is no longer required.B. A SNIP will be used in preference to a MIP.C. Adding a SNIP adds an entry to the routing table.D. Client machines can use the MIP instead of the Virtual IP (VIP).

Correct Answer: BCSection: (none)Explanation

Explanation/Reference:

Page 28: Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

QUESTION 63What should a Citrix Administrator configure to optimize an internal NetScaler Gateway virtual server when more bandwidth is available for use andother websites are NOT affected?

A. Windows Scaling within TCP parameters.B. Max Connections within HTTP parameters.C. A Net Profile that is applied to the NetScaler Gateway virtual server.D. Windows Scaling within a TCP Profile that is applied to the NetScaler Gateway virtual server.

Correct Answer: DSection: (none)Explanation

Explanation/Reference:answer is accurate.

QUESTION 64Scenario: A Citrix Administrator has configured two virtual servers (VServer1 and VServer2). The administrator would like to set up the virtual servers sothat only when VServer1 is offline, VServer2 will become active.

What should the administrator configure to achieve this goal?

A. Service groupB. Spillover methodC. Backup virtual serverD. Spillover backup action

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 65A Citrix Administrator needs to validate the session policies that are put in place to differentiate mobile devices from PCs.

Which command, when run from a shell, will allow real time reading of the logs for this specific purpose?

A. nsconmsg -d current -g pol_hits

Page 29: Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

B. nsconmsg -K /var/nslog/newnslog -dC. nsconmsg -d current | grep -i rewriteD. nsconmsg -d current | grep -i responder

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 66Scenario: A company requires two-factor authentication using RSA tokens and Active Directory. The Citrix Administrator configured the following twoauthentication policies with these parameters:

What should the administrator do to protect the NetScaler Gateway virtual server from an attack against Active Directory?

A. Bind the RSA_policy in Primary Authentication Policies and bind the AD_policy in Secondary Authentication Policies.B. Bind the AD_policy in Primary Authentication Policies and bind the RSA_policy in Secondary Authentication Policies.C. Bind the AD_policy and the RSA_policy in Primary Authentication Policies and set the RSA_policy priority higher than the AD_policy.D. Bind the AD_policy and the RSA_policy in Primary Authentication Policies and set the AD_policy priority higher than the RSA_policy.

Correct Answer: ASection: (none)Explanation

Explanation/Reference:nicely explained answer.

QUESTION 67Various users report that while accessing the Citrix NetScaler Gateway virtual server they get an error message that the public SSL certificate is NOTtrusted.

Which three steps should a Citrix Administrator take on the NetScaler to resolve this issue? (Choose three.)

A. Import the root certificate.B. Import the intermediate certificate.C. Download the root certificate from the vendor.D. Link the root certificate to the intermediate certificate.E. Download the intermediate certificate from the vendor.

Page 30: Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

F. Link the intermediate certificate to the existing server certificate.

Correct Answer: BEFSection: (none)Explanation

Explanation/Reference:

QUESTION 68Which two IP addresses are required for a new NetScaler Gateway installation when using the First- Time Setup Wizard? (Choose two.)

A. Client IP (CIP)B. Virtual IP (VIP)C. Subnet IP (SNIP)D. NetScaler IP (NSIP)

Correct Answer: ABSection: (none)Explanation

Explanation/Reference:reliable answer.

QUESTION 69Scenario: A company is considering using NetScaler appliances to load balance existing secured web servers. The company compliance policy doesNOT allow any alterations of the SSL sessions between clients and web servers.Which option should a Citrix Administrator configure on the NetScaler virtual server to meet the needs of the company?

A. SSL VPNB. SSL BridgeC. SSL OffloadD. SSL Renegotiation

Correct Answer: BSection: (none)Explanation

Explanation/Reference:answer is excellent.

Page 31: Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

QUESTION 70Which two parameters are required for adding a new node to a cluster? (Choose two.)

A. Cluster IP of the new cluster nodeB. NetScaler IP of the new cluster nodeC. NetScaler IP of the existing cluster nodeD. Remote NetScaler user name and passwordE. Backplane interface of the existing cluster node

Correct Answer: BDSection: (none)Explanation

Explanation/Reference:proper answer.

QUESTION 71Scenario: Users report that they are being presented with a certificate error when they attempt to access the remote access website of the company. Nochanges were made to the NetScaler certificates recently.

What should the Citrix Administrator check on the NetScaler to identify this issue?

A. Cert LinksB. OCSP BindingC. Certificate FormatD. Certificate Expiry Date

Correct Answer: DSection: (none)Explanation

Explanation/Reference:efficient answer.

QUESTION 72What should be done to ensure high availability (HA) failover in a NetScaler HA configuration?

A. Disable all unused system interfaces.B. Disable the IPv6 feature on the NetScaler.C. Enable all used and unused system interfaces.

Page 32: Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

D. Change the NetScaler HA setup to two-arm mode.

Correct Answer: ASection: (none)Explanation

Explanation/Reference:answer is straight.

QUESTION 73Scenario: A recent security audit identified that communications between the NetScaler Gateway and the STA were NOT secure. A Citrix Administratorwas asked to secure this communication.

What must the administrator install as one of the steps to secure communications between the NetScaler Gateway and the STA?

A. A root certificate on the NetScaler virtual server.B. A server certificate on the server running the STA.C. A server certificate from the STA server on the NetScaler virtual server.D. An HTTPS virtual server on the NetScaler to load balance STA servers.

Correct Answer: BSection: (none)Explanation

Explanation/Reference:actual answer,

QUESTION 74Which three parameters are required to create a new cluster instance? (Choose three.)

A. IP addressB. Instance IDC. Subnet maskD. Subnet IP addressE. Backplane interface

Correct Answer: ABESection: (none)Explanation

Page 33: Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

Explanation/Reference:real answer.

QUESTION 75Scenario: A Citrix Administrator needs to update an SSL certificate that is currently installed and configured. The administrator needs to locate thevirtual server on which this SSL certificate is configured.

Which option should the administrator select to determine on which virtual server the SSL certificate is configured?

A. DetailsB. Cert LinksC. Show BindingsD. OCSP Bindings

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 76Which two methods should be used for generating a configuration data and statistics report for evaluation by Citrix? (Choose two.)

A. Run "show callhome" using the command-line interface.B. Run "show techsupport" using the command-line interface.C. Click the Call Home link under the Technical Support Tools section in the NetScaler Configuration Utility.D. Click the Download trace files link under the Technical Support Tools section in the NetScaler Configuration Utility.E. Click the Generate support file link under the Technical Support Tools section in the NetScaler Configuration Utility.

Correct Answer: BESection: (none)Explanation

Explanation/Reference:

QUESTION 77Which two components must a Citrix Administrator configure before GSLB can be configured? (Choose two.)

A. An authoritative DNS

Page 34: Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

B. A link load balancing methodC. A high availability secondary nodeD. A NetScaler Gateway virtual server

Correct Answer: ADSection: (none)Explanation

Explanation/Reference:

QUESTION 78Which type of connection is used when users launch a XenDesktop published application from Worx Home?

A. VPN onlyB. ICA ProxyC. Micro VPN onlyD. ICA through a Micro VPN

Correct Answer: DSection: (none)Explanation

Explanation/Reference:answer is confirmed.

QUESTION 79A Citrix Administrator needs to provide users with access to web, SaaS and MDX applications from an external network.

Which Citrix product must the administrator configure and integrate with the NetScaler Gateway to ensure that this requirement is met?

A. Web InterfaceB. App ControllerC. Delivery ControllerD. Provisioning Services

Correct Answer: BSection: (none)Explanation

Page 35: Citrix.testking.1Y0 253.v2015!05!05.by.clarice.81q Unprotected

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

Explanation/Reference:answer is updated.

QUESTION 80A Citrix Administrator needs to configure a single virtual server to accept TCP traffic on ports 80, 443 and ports between 10000 and 19999.

Which protocol type should the administrator use to accomplish this task?

A. ANYB. UDPC. SSL_TCPD. SSL_PUSH

Correct Answer: ASection: (none)Explanation

Explanation/Reference:answer is great.

QUESTION 81Which two items are needed to import an SSL certificate? (Choose two.)

A. A public keyB. A private keyC. A root certificateD. A server certificateE. An intermediate certificate

Correct Answer: BDSection: (none)Explanation

Explanation/Reference:exact answer.