Citrix 1Y0-351 Online Practice Questions and Exam Preparation

Citrix 1Y0-351 Online Questions & Answers

• Question 271:

  Scenario: A pair of NetScaler devices have recently been installed into the corporate DMZ. The Netscalers have been installed in two-arm mode, with two interfaces in a Internet-facing VLAN and two interfaces in the internal VLAN. A private

  management subnet also exists.

  The NetScaler engineer would like to secure and restrict communication between the management subnet and the SNIP address on that subnet.

  Which two actions could the engineer take to help with these goals? (Choose two.)

  A. Apply an ACL on the specified SNIP.
  B. Remove the ACL list to the internal VLAN.
  C. Remove the NSIP address from the Netscaler.
  D. Configure the SNIP with the -gui SECUREONLY option.
  A. Apply an ACL on the specified SNIP.
  D. Configure the SNIP with the -gui SECUREONLY option.

• Question 272:

  Some SSL certificate files may be missing from a NetScaler appliance.

  Which directory should an engineer check to determine which files are missing?

  A. /nsconfig/ssl
  B. /nsconfig/ssh
  C. flash/nsconfig/
  D. /var/netscaler/ssl/
  A. /nsconfig/ssl

• Question 273:

  A NetScaler Engineer is reviewing the performance of a NetScaler appliance and notices that TCP multiplexing (TCP connection reuse) appears to NOT be working for a virtual server. What could be the cause of this issue?

  A. Compression is enabled on the services
  B. Persistence is enabled on the virtual server
  C. HTTP services are bound to the virtual server
  D. The virtual server was created as type SSL_BRIDGE
  D. The virtual server was created as type SSL_BRIDGE

• Question 274:

  What are two ways in which the NetScaler TCP buffering feature improves application performance? (Choose two.)

  A. Buffers the client request
  B. Buffers the server response
  C. Forwards the response to the client at the speed of the client network
  D. Forwards the request to the server at the speed of the server network
  B. Buffers the server response
  C. Forwards the response to the client at the speed of the client network

• Question 275:

  Scenario: A NetScaler Engineer is configuring a NetScaler that has three interfaces. The first interface is connected to the internal network, the second interface is connected to the DMZ1 network, and the third interface is connected to the

  DMZ2-network.

  DMZ1 and DMZ2 networks are behind different firewalls, and both firewalls are sending traffic through network address translation (NAT) to the DMZ networks.

  The default route is to the gateway on the DMZ1-network.

  DMZ1: 10.10.10.0/24 (Gateway: 10.10.10.1)

  DMZ2: 10.20.20.0/24 (Gateway: 10.20.20.1)

  Internal: 192.168.0.0/24 (Gateway: 192.168.0.1)

  Internet traffic reaches the virtual servers located in DMZ1 but NOT the virtual servers located in DMZ2.

  Which policy-based route (PBR) would resolve the issue?

  A. add ns pbr PBR1 ALLOW -srcIP = 10.20.20.0-10.20.20.255 -destIP != 10.20.20.0-10.20.20.255 nextHop 10.10.10.1 -priority 10
  B. add ns pbr PBR1 ALLOW -srcIP != 10.20.20.0-10.20.20.255 -destIP = 10.20.20.0-10.20.20.255 nextHop 10.20.20.1 -priority 10
  C. add ns pbr PBR1 ALLOW -srcIP = 10.20.20.0-10.20.20.255 -destIP != 10.20.20.0-10.20.20.255 nextHop 10.20.20.1 -priority 10
  D. add ns pbr PBR1 ALLOW -srcIP != 10.20.20.0-10.20.20.255 -destIP != 10.20.20.0-10.20.20.255 nextHop 10.10.10.1 -priority 10
  C. add ns pbr PBR1 ALLOW -srcIP = 10.20.20.0-10.20.20.255 -destIP != 10.20.20.0-10.20.20.255 nextHop 10.20.20.1 -priority 10

• Question 276:

  Scenario: A NetScaler Engineer has received complaints from some users stating that their business applications are running slow. The engineer analyzes the application servers and sees the following CPU utilization:

  ServerA is utilizing 20% CPU

  ServerB is utilizing 20% CPU

  ServerC is utilizing 100% CPU

  The engineer had set the load-balancing method to round robin but decided to change the load- balancing configuration for the business applications.

  Which load-balancing method could the engineer use to address this issue?

  A. Custom Load
  B. Least Packets
  C. Least Connections
  D. Least Response time
  A. Custom Load

• Question 277:

  Scenario: A NetScaler engineer has received an SSL certificate and bound it to the vServer. However, users are unable to browse to the website using HTTPS. When the NetScaler engineer browses to the site using HTTPS, the engineer notices that the certificate chain is incomplete.

  Which two steps should the administrator take to fix the virtual server? (Choose two.)

  A. Generate a new CSR.
  B. Install a new Certificate Authority (CA).
  C. Install the Intermediate Certificate from the CA.
  D. Link the Intermediate Certificate to the virtual server.
  E. Link the SSL Certificate to the Intermediate Certificate.
  C. Install the Intermediate Certificate from the CA.
  E. Link the SSL Certificate to the Intermediate Certificate.

• Question 278:

  Scenario: A network engineer has bound four policies to an HTTP virtual server as follows: PolicyA is bound with a priority of 10 and has the following expression: REQ.IP.SOURCEIP == 10.10.10.0 PolicyB is bound with a priority of 15 and has the following expression: REQ.IP.SOURCEIP != 10.10.11.0 PolicyC is bound with a priority of 20 and has the following expression: REQ.IP.SOURCEIP == 10.10.12.0

  PolicyD is bound with a priority of 25 and has the following expression: REQ.IP.SOURCEIP != 10.10.13.0 When a connection is made from a PC with an IP address of 10.10.12.15, which policy will be applied?

  A. PolicyA
  B. PolicyB
  C. PolicyC
  D. PolicyD
  B. PolicyB

• Question 279:

  A NetScaler engineer would like to present different web pages to a user based on the device and browser type from which they are connecting. Which responder policy could assist with this requirement?

  A. HTTP.RES.URL.PATH
  B. HTTP.REQ.Host("Host")
  C. HTTP.RES.BODY(1024)
  D. HTTP.REQ.HEADER("User-Agent")
  D. HTTP.REQ.HEADER("User-Agent")

• Question 280:

  A network engineer is testing a new load balancing virtual server "test" that has the service group "test-grp" bound to it. Which command could the engineer run to show connection details for the new virtual server?

  A. show server
  B. show services
  C. show servicegroups
  D. show connectiontable
  D. show connectiontable