Citrix 1Y0-351 Online Practice Questions and Exam Preparation

Citrix 1Y0-351 Online Questions & Answers

• Question 111:

  A network engineer is trying to read a nstrace from the NetScaler but can only see encrypted traffic. Which file is required to decrypt the network trace?

  A. The server certificate
  B. The servers root certificate
  C. The private key for the server certificate
  D. The private key for the server root certificate
  C. The private key for the server certificate

• Question 112:

  Scenario: The network engineer is unable to access a specific SSL site through the NetScaler. While reviewing traces on the NetScaler, the network engineer noticed "Handshake" failures from the server. These handshake failures could be the result of the virtual server __________. (Choose the correct option to complete the sentence.)

  A. only allowing TLS
  B. not allowing SSLv3
  C. not allowing correct ciphers
  D. configured to demand client authentication
  C. not allowing correct ciphers

• Question 113:

  A company has an external-facing web application that requires end-to-end encryption and Layer-7 functionality. Which protocol type would an engineer choose for the virtual server and service?

  A. SSL
  B. SSL_TCP
  C. SSL_PUSH
  D. SSL_BRIDGE
  B. SSL_TCP

• Question 114:

  Scenario: An engineer has been asked to implement load balancing of an existing unsecured web application. The engineer needs to ensure that users will access the web application using HTTPS, but no changes can be made to the web servers hosting the web application.

  In order to fulfill the requirements, the engineer must create an __________ service group and add members with port __________; and bind the service group to an __________ virtual server. (Choose the correct set of options to complete the sentence.)

  A. SSL; 443; SSL
  B. HTTP; 80; SSL
  C. SSL; 80; HTTP
  D. HTTPS; 443; HTTP
  B. HTTP; 80; SSL

• Question 115:

  Scenario: A web server needs to be load-balanced but the content for the web page is retrieved from different server pools. There is a server pool for images, another for text files, and another for documents. Which NetScaler feature would allow a user to retrieve content from all pools through a single IP address by leveraging the ability of NetScaler to forward traffic based on the incoming request?

  A. Load Balancing
  B. Content Filtering
  C. Content Switching
  D. Global Server Load Balancing
  A. Load Balancing

• Question 116:

  Scenario: An engineer has three subnets configured on a NetScaler appliance. The engineer must only allow a certain group of users to access a virtual server on the appliance. The IT Manager requires that all rules are flexible and can be easily modified for ease of administration.

  How could the engineer allow certain groups to access the virtual server while still being able to modify the setting in the future?

  A. Add a Simple ACL.
  B. Disable USNIP Mode.
  C. Create an Extended ACL.
  D. Add a Host Route to the virtual server.
  C. Create an Extended ACL.

• Question 117:

  Scenario: A network engineer needs to re-configure the NetScaler to utilize two new VLANs VLAN2 and VLAN3. VLAN2 is an untagged VLAN and VLAN3 will require a .1q compliant tag. Interface 1/1 is the only interface that will be used on the NetScaler.

  How could the engineer configure the NetScaler so that it can communicate with both networks?

  A. Change the NSVLAN to 3 Add VLAN 2 and bind interface 1/1 as untagged
  B. Enable the Tag all VLANs option on interface 1/1.
  C. Add VLAN2 and bind interface 1/1 as untagged Add VLAN3 and bind interface 1/1 as tagged
  D. Add a SNIP for each VLAN Enable management access on the SNIP for VLAN3
  C. Add VLAN2 and bind interface 1/1 as untagged Add VLAN3 and bind interface 1/1 as tagged

• Question 118:

  Scenario: The NetScaler is connected to two subnets. The NSIP is 10.2.9.12. The external SNIP is 10.2.7.3. The MIP for internal access is 10.2.9.3. Web servers, authentication servers and time servers are on the 10.2.10.0/24 network which is available through the 10.2.9.1 router. The external firewall has the 10.2.7.1 address. Traffic bound for Internet clients should flow through the external firewall.

  Which command should be used to set the default route?

  A. add route 0.0.0.0 0.0.0.0 10.2.7.1
  B. add route 0.0.0.0 0.0.0.0 10.2.9.1
  C. add route 10.0.0.0 255.0.0.0 10.2.9.1
  D. add route 10.0.0.0 255.0.0.0 10.2.7.1
  A. add route 0.0.0.0 0.0.0.0 10.2.7.1

• Question 119:

  Scenario: An engineer is upgrading the NetScaler firmware from version 10.1 to 10.5 and has a high-availability (HA) setup of two NetScaler MPX appliances. What is the best practice process to upgrade this HA pair?

  A. Upgrade the primary unit, test on the new build, and then upgrade the secondary unit.
  B. Disable the secondary unit, upgrade the primary, test the new build and then upgrade the other unit.
  C. Upgrade the secondary unit, do the failover, test on the new build, and then upgrade the primary unit.
  D. Upgrade and restart both units at the same time and test on the new build after they both are running.
  C. Upgrade the secondary unit, do the failover, test on the new build, and then upgrade the primary unit.

• Question 120:

  Scenario: A virtual server named New_Server has been disabled to perform an emergency upgrade; however requests from clients are NOT being redirected to the maintenance page.

  The redirected URL configuration is:

  >set cs vserver Website_main -lbvserver New_Server -backupVserver Backup_Server redirectURL http://www.mydomain.com/maintenance -soMethod Connection -soThreshold 1000 soPersistence enabled

  Why are requests from clients NOT being redirected to the maintenance page?

  A. The backup virtual server is unavailable.
  B. The spillover persistence has been activated.
  C. It has not been linked to content switching policies.
  D. The backup virtual server takes precedence over the redirect URL.
  D. The backup virtual server takes precedence over the redirect URL.