Citrix 1Y0-351 Online Practice Questions and Exam Preparation

Citrix 1Y0-351 Online Questions & Answers

• Question 201:

  Scenario: A NetScaler Engineer configures COOKIEINSERT persistence method for an HTTP VServer named 'myApp'. Many clients do NOT allow the persistence cookie to be set and application sessions fail as a result. All clients are behind a network address translation (NAT) gateway, which will insert the client IP address into an HTTP header called X-Forwarded-For.

  Which command could the engineer execute to provide persistence for clients while still distributing the requests across the bound services?

  A. set lb vserver myApp -persistenceType SOURCEIP
  B. set lb vserver myApp -persistenceType NONE -lbmethod SRCIPDESTIPHASH
  C. set lb vserver myApp -persistenceType COOKIEINSERT -timeout 0 -cookieName X-Forwarded- For
  D. set lb vserver myApp -persistenceType NONE -lb method TOKEN -rule "HTTP.REQ.HEADER(\"X Forwarded-For\").VALUE(0)
  D. set lb vserver myApp -persistenceType NONE -lb method TOKEN -rule "HTTP.REQ.HEADER(\"X Forwarded-For\").VALUE(0)

• Question 202:

  Scenario: A Network Engineer needs to provide a solution for mobile users who use devices that do NOT support basic access authentication. Which three steps should be included as part of the engineer's plan to implement this requirement using NetScaler? (Choose three.)

  A. Configure an OCSP responder.
  B. Create an authentication VServer.
  C. Configure a Pre-Authentication policy.
  D. Create an LDAP authentication policy and bind it to the authentication server.
  E. Enable and configure the authentication option on a VServer to use 401-based authentication.
  F. Enable and configure the Authentication option on a load balancing VServer to use form-based authentication.
  B. Create an authentication VServer.
  D. Create an LDAP authentication policy and bind it to the authentication server.
  F. Enable and configure the Authentication option on a load balancing VServer to use form-based authentication.

• Question 203:

  An engineer has bound a policy to a test virtual server.

  How could the engineer verify that the policy is being applied?

  A. Monitor the number of hits for the policy.
  B. Monitor the number of hits for the virtual server.
  C. Enable the AppFlow logging option for the virtual server.
  D. Ensure the policy has a greater priority value than other policies bound to the test virtual server.
  A. Monitor the number of hits for the policy.

• Question 204:

  Scenario: A NetScaler Engineer connected a new NetScaler MPX appliance to the network. However, some of the interfaces were blocked on the uplink switch. The engineer needs to perform a network packet trace on the NetScaler

  appliance. For troubleshooting purposes, the engineer needs to separate trace files for each interface. The engineer executed the following command from the NetScaler CLI:

  start nstrace -perNIC ENABLED

  However, NetScaler created a single trace file.

  What should the engineer do to produce separate trace files for each interface?

  A. Specify the nodes parameter.
  B. Use the nsconmsg command.
  C. Specify the tcpdump parameter.
  D. Use the nstracemerge.sh command.
  C. Specify the tcpdump parameter.

• Question 205:

  During a recent security penetration test, several ports on the management address were

  identified as providing unsecured services.

  Which two methods could the network engineer use to restrict these services? (Choose two.)

  A. Configure Auditing policies.
  B. Create Content Filtering policies.
  C. Create Access Control Lists (ACLs).
  D. Configure options on the Management IP addresses.
  C. Create Access Control Lists (ACLs).
  D. Configure options on the Management IP addresses.

• Question 206:

  What does the TCP Buffering feature on the NetScaler accomplish?

  A. It enables the TCP options field syn-cookie.
  B. It optimizes the client and server TCP window size.
  C. It buffers incoming client connections on the NetScaler.
  D. It offloads the server response to the NetScaler before delivering it to the client.
  D. It offloads the server response to the NetScaler before delivering it to the client.

• Question 207:

  What is the purpose of binding Certificate Authority (CA) certificates to a virtual server?

  A. For SSL Offload
  B. To validate the server certificate
  C. For client certificate authentication
  D. To provide intermediate certificates to the client
  C. For client certificate authentication

• Question 208:

  Which SSL parameter should an engineer configure to bind multiple certificate key pairs to a virtual server?

  A. SNI enable
  B. Session reuse
  C. Send close-notify
  D. Client authentication
  A. SNI enable

• Question 209:

  The disk is full on a NetScaler appliance but NO alerts were generated by the SNMP traps. What is the likely cause of this failed alert?

  A. Auditing is not enabled.
  B. EdgeSight monitoring is not configured.
  C. The threshold was not set for the alarm.
  D. Health monitoring has not been enabled.
  C. The threshold was not set for the alarm.

• Question 210:

  Which two virtual servers could a NetScaler Engineer configure to redirect GET requests to application servers? (Choose two.)

  A. Load balancing
  B. Authentication
  C. Wildcard
  D. Content switching
  A. Load balancing
  D. Content switching