Citrix CCA-N 1Y0-253 Questions & Answers

• Question 181:

  6Scenario: An administrator configured a NetScaler Gateway session policy named spol ICAP. The administrator needs to bind the policy to ensure that it is evaluated only when users of the ICAP security group log on to the NetScaler Gateway virtual server named vsrv AGEE. Which command should the administrator run at the command-line interface to meet the needs of the scenario?

  A. bind vpn vserver vsrv AGEE ICAP

  B. bind aaa group ICAP -policy spol ICAP

  C. bind aaa group ICAP -policy spol ICAP -global OFF

  D. bind vpn vserver vsrv AGEE -policy spol ICAP -priority 1

  Correct Answer: B

• Question 182:

  5AnadministratorcreatedaserviceforaWebInterfaceserverthatisencryptedbyanSSLcertificate. Which command should the administrator run at the command-line interface to create a monitor that will check the Web Interface by logging on to it with a test user's credentials?

  A. add lb monitor mon-WebInterface CITRIX-WI-EXTENDED -sitePath IjCitrixjXenAppI -userName user domain DomainName -password P@ssw0rd -encrypted

  B. add lb monitor mon-WebInterface CITRIX-WI-EXTENDED -sitePath IjCitrixjXenAppI -userName user domain DomainName -password P@ssw0rd -secure YES

  C. add lb monitor mon-WebInterface CITRIX-WI-EXTENDED -sitePath IjCitrixjXenAppI -userName user domain DomainName -password P@ssw0rd -destPort 443

  D. add lb monitor mon-WebInterface CITRIX-WI-EXTENDED -sitePath IjCitrixjXenAppI -userName user domain DomainName -password P@ssw0rd -encrypted -secure YES

  Correct Answer: B

• Question 183:

  Scenario:ACitrixAdministratorisupgradingahighavailabilitypairto NetScaler 10.5. After upgrading the secondary appliance, the administrator forces a failover to test the new firmware, but the show ha node command showsthesyncstateandpropagationasdisabled.

  Why are the settings showing as disabled?

  A. The appliances did NOT properly failover.

  B. The NSIPs are no longer able to communicate.

  C. The settings are automatically disabled until the other appliance is upgraded.

  D. The upgrade process failed to run to completion on the secondary appliance.

  Correct Answer: C

• Question 184:

  Which two default key formats of SSL certificates could be installed by the NetScaler system? (Choose two.)

  A. PFX

  B. P7B

  C. PEM

  D. DER

  Correct Answer: CD

• Question 185:

  What is required to configure a NetScaler Gateway cluster?

  A. Striped IP addresses

  B. Strict option is enabled

  C. Sticky option is enabled

  D. Enterprise or Platinum license

  Correct Answer: C

• Question 186:

  Which two tasks must a Citrix Administrator complete to enable Client Certificate Authentication on the NetScaler Gateway? (Choose two.)

  A. Create a pre-authentication policy.

  B. Create an LDAP authentication policy.

  C. Import the root certificate onto the NetScaler Gateway.

  D. Import all client certificates onto the NetScaler Gateway.

  E. Enable the Client Authentication option on the virtual server.

  Correct Answer: CE