Citrix 1Y0-351 Online Practice Questions and Exam Preparation

Citrix 1Y0-351 Online Questions & Answers

• Question 281:

  Scenario: A network engineer has configured GSLB for a multisite environment. All GSLB services show as UP with an UP MEP status. The engineer has observed that DNS queries are directed to the SNIP of the NetScaler; however, no DNS response is being received. How can the engineer resolve this issue?

  A. Add an ADNS service on the SNIP.
  B. Change the DNS delegation to the NSIP.
  C. Create a load balancing virtual server for DNS.
  D. Select the "Send all "active" service IPs' in response (MIR)" option.
  A. Add an ADNS service on the SNIP.

• Question 282:

  A recent security audit has identified that NetScaler management is available on all Subnet IP (SNIP) adresses. Which step could an engineer take to ensure that these services are only available through the NetScaler IP (NSIP)?

  A. Unbind all SNIPs from the NSVLAN.
  B. Disable the 'GUI' option on all SNIPs.
  C. Enable the 'Restrict Access' option on all SNIPs.
  D. Disable the 'Management Access' option on all SNIPs.
  D. Disable the 'Management Access' option on all SNIPs.

• Question 283:

  A network engineer needs to configure smart card-based authentication on NetScaler Access Gateway. Which type of authentication policy could the engineer configure in order to accomplish this task?

  A. Local
  B. RADIUS
  C. Certificate
  D. Secure LDAP
  C. Certificate

• Question 284:

  Which two response codes and pages can be cached on the NetScaler using Integrated Caching? (Chose two)

  A. 400 Bad request
  B. 302 Found pages
  C. 401 Unauthorized
  D. 404 Not found pages
  E. 500 Internal server error
  B. 302 Found pages
  D. 404 Not found pages

• Question 285:

  Which step is required to ensure that SSL traffic is passed through the NetScaler to backend services without processing SSL on the NetScaler appliance?

  A. Create a service group of type SSL.
  B. Create a service group of type HTTP.
  C. Bind an SSL certificate to a service group.
  D. Bind an SSL certificate to the virtual server
  E. Create a service group of type SSL_BRIDGE.
  E. Create a service group of type SSL_BRIDGE.

• Question 286:

  Which command would an engineer run to deny access to destination port 103 from a host with an IP address of 10.0.1.1?

  A. add ns acl rule1 DENY -srcIP 10.0.1.1 -srcPort 103 -TTL 600
  B. add ns acl rule1 DENY -srcIP 10.0.1.1 -srcPort 103 -protocol TCP
  C. add ns acl rule1 DENY -srcport 103 -destIP 10.0.1.1 -protocol TCP
  D. add ns simpleacl rule1 DENY -srcIP 10.0.1.1 -destport 103 -protocol TCP
  D. add ns simpleacl rule1 DENY -srcIP 10.0.1.1 -destport 103 -protocol TCP

• Question 287:

  While binding a certificate key pair where the key is a 2048-bit, a NetScaler Engineer receives the following error message:

  "Certificate with key size greater than RSA512 or DSA512 bits not supported"

  What could be causing this error?

  A. The certificate being used is invalid.
  B. The license file is saved in UTF-8 format.
  C. The NetScaler does NOT have an SSL offloading card.
  D. The NetScaler appliance does NOT have an appropriate license.
  D. The NetScaler appliance does NOT have an appropriate license.

• Question 288:

  Scenario: An engineer has configured a virtual server that users access using HTTP port 80. The web application also uses TCP port 81 and 8080 for non-user access. The engineer would like to prevent users from connecting to web servers if any of the ports go down.

  How should the engineer set this configuration to ensure service availability?

  A. Increase the monitor threshold.
  B. Lower the server timeout value.
  C. Create additional virtual servers for ports 81 and 8080.
  D. Create monitors for ports 81 and 8080, and bind to the service or service group.
  D. Create monitors for ports 81 and 8080, and bind to the service or service group.

• Question 289:

  Multiple Subnet IPs (SNIPs) are defined in the same network.

  A NetScaler Engineer could specify the SNIP to use to communicate with servers on that network by configuring a __________. (Choose the correct option to complete the sentence.)

  A. net profile
  B. listen policy
  C. traffic domain
  D. policy-based route
  A. net profile