Citrix 1Y0-351 Online Practice Questions and Exam Preparation

Citrix 1Y0-351 Online Questions & Answers

• Question 211:

  Which two of the listed statements are true about Access Control Lists (ACLs) on the NetScaler? (Choose two.)

  A. Extended ACLs may BRIDGE traffic.
  B. Simple ACLs are bound on ALL interfaces.
  C. Extended ACLs are evaluated after creation.
  D. Simple ACLs are processed after Extended ACLs.
  A. Extended ACLs may BRIDGE traffic.
  B. Simple ACLs are bound on ALL interfaces.

• Question 212:

  Users have reported that they are receiving a confusing error message related to SSL sessions when connecting from older browsers. How could the network engineer present this error to users in a customized format?

  A. Enable the SSL v2 protocol.
  B. Set a URL on the backup virtual server.
  C. Add a redirect URL to the virtual server.
  D. Configure SSL v2 Redirection for the virtual server.
  D. Configure SSL v2 Redirection for the virtual server.

• Question 213:

  Traffic to which destination is sourced from the NetScaler IP (NSIP) by default?

  A. NTP servers
  B. Clients on the Internet
  C. Load-balanced web services
  D. Load-balanced authentication services
  A. NTP servers

• Question 214:

  What is the key benefit to enabling Session Reuse on an SSL offload VServer?

  A. The number of HTTP requests to the backend services are decreased.
  B. Resumed SSL sessions are more secure than sessions that require renegotiation.
  C. Reusing existing sessions decreases the number of TCP connections made to backend services.
  D. A partial SSL handshake is sent over the existing SSL connection, reducing CPU and bandwidth usage.
  D. A partial SSL handshake is sent over the existing SSL connection, reducing CPU and bandwidth usage.

• Question 215:

  Why would an engineer want to specify a TCP Profile for a specific service group?

  A. To enable use of features like SSL over TCP for that specific service group.
  B. To adjust the TCP settings for traffic to and from that specific service group.
  C. To use a specific SNIP for traffic to the back-end servers in that service group.
  D. To enable features like use source IP, TCP keep alive and TCP buffering for a specific service group.
  B. To adjust the TCP settings for traffic to and from that specific service group.

• Question 216:

  A network engineer should use a HTTP-ECV monitor type to control the status of a load balanced web server resource when __________. (Choose the correct option to complete the sentence.)

  A. checking for multiple HTTP response codes
  B. wanting to use a customized HTTP Request
  C. checking for a specific pattern in the HTTP Response body
  D. checking for a specific pattern in the HTTP Response header
  C. checking for a specific pattern in the HTTP Response body

• Question 217:

  A network engineer notes that a high availability pair (HA) is NOT synchronizing correctly and decides to open a ticket with Citrix Support.

  When opening the new ticket with Citrix Support, the engineer should run show __________ and __________. (Choose the correct set of options to complete the sentence.)

  A. ha node; provide any public IP addresses listed
  B. ha node; provide the hello and dead interval data
  C. techsupport on the primary device; send the output to Citrix Support
  D. techsupport on both the primary and secondary devices; send the output to Citrix support
  D. techsupport on both the primary and secondary devices; send the output to Citrix support

• Question 218:

  In a high-availability (HA) configuration, a NetScaler Engineer notices that the HA Synchronization status shows as failed. What could be causing the HA Synchronization to fail?

  A. Port 3003 is being blocked
  B. Port 3009 is being blocked
  C. The RPC passwords are incorrect
  D. The nsroot passwords are incorrect
  C. The RPC passwords are incorrect

• Question 219:

  Scenario: A NetScaler engineer configured a service and server for RADIUS authentication. To ensure that the RADIUS service is available and responding to authentication requests, the engineer has added the NetScaler built-in monitor to the service. On inspecting the RADIUS service the engineer notices it is marked as DOWN.

  What could be causing this issue?

  A. The built-in monitor has been changed.
  B. RADIUS accounting must be enabled under the server.
  C. There is no built-in monitor available to monitor RADIUS.
  D. The NetScaler-owned IP address has not been added to the RADIUS database.
  D. The NetScaler-owned IP address has not been added to the RADIUS database.

• Question 220:

  A NetScaler is configured with two-factor authentication. A user reported that authentication failed. How can an engineer determine which factor of the authentication method failed?

  A. Check NSlog
  B. Use nsconmsg
  C. Check the dashboard
  D. Use cat aaad.debug command
  D. Use cat aaad.debug command