Which two of the listed statements are true about Access Control Lists (ACLs) on the NetScaler? (Choose two.)
A. Extended ACLs may BRIDGE traffic.
B. Simple ACLs are bound on ALL interfaces.
C. Extended ACLs are evaluated after creation.
D. Simple ACLs are processed after Extended ACLs.
What is the purpose of the SSL Certificate Authority (CA) root certificate during an SSL connection?
A. SSL Cipher Exchange
B. Session Key Exchange
C. Pre Shared Master Secret Generation
D. Server Certificate Signature Verification
A company has an external-facing web application that requires end-to-end encryption and Layer-7 functionality.
Which protocol type would an engineer choose for the virtual server and service?
A. SSL
B. SSL_TCP
C. SSL_PUSH
D. SSL_BRIDGE
Scenario: A NetScaler Engineer has enabled the HTTP Compression feature on an existing production
NetScaler. The engineer is using the built-in policies. The engineer reviews the HTTP Compression
statistics but does NOT see any compression statistic data.
What is the likely reason?
A. SSL protocol is being used for encryption.
B. The Compression Policy engine is set to default.
C. "Allow Server side compression" is checked on the NetScaler.
D. Responses with the Content-Length or Chunked header are being sent from the server.
Scenario: A NetScaler Engineer is viewing Authentication, Authorization and Access (AAA) events on the NetScaler appliance to determine why a user is unable to log on. The events below have been logged during this timeframe:
Fri Oct 17 18:17:16 2014 /usr/home/build/rs_80_48/usr.src/usr.bin/nsaaad/../../netscaler/aaad/ldap_drv.c[40\]: start_ldap_auth attempting to
auth scottli @ 10.12.33.216 Fri Oct 17 18:17:18 2014 /usr/home/build/rs_80_48/usr.src/usr.bin/nsaaad/../../netscaler/aaad/ldap_drv.c[291\]:
recieve_ldap_bind_event receive ldap bind event Fri Oct 17 18:17:18 2014 /usr/home/build/rs_80_48/usr.src/usr.bin/nsaaad/../../netscaler/aaad/ldap_drv.c[326\]: recieve_ldap_bind_event ldap_bind with binddn bindpw failed:Invalid credentials Fri Oct 17
18:17:18 2014 /usr/home/build/rs_80_48/usr.src/usr.bin/nsaaad/../../netscaler/aaad/ naaad.c[1198\]: send_reject sending reject to kernel for : scottli
What is the root cause of this issue?
A. The LDAP Base DN is incorrect.
B. The Bind DN credentials are invalid.
C. The LDAP server is NOT responding.
D. The user has entered an invalid password.
Which two authentication types on the NetScaler support password changes? (Choose two.)
A. TACACS+
B. LDAP (TLS)
C. LDAP (SSL)
D. RADIUS (PAP)
E. LDAP (PLAINTEXT)
F. RADIUS (MSCHAPv2)
Scenario: A NetScaler Engineer has discovered that the object home.php is NOT found in the cache on the
system.
Below is the relevant configuration:
add cache contentGroup cache_content_group_1 -relExpiry 0
add cache policy cache_pol_1 -rule "http.REQ.URL.CONTAINS(\"home.php\")" -action MAY_CACHE storeInGroup cache_content_group_1
add cache policy cache_pol_2 -rule "http.REQ.METHOD.EQ(\"GET\")" -action NOCACHE
add cache policy cache_pol_3 -rule "HTTP.RES.HEADER(\"Set-Cookie\").EXISTS" -action NOCACHE
bind cache global cache_pol_1 -priority 90 -gotoPriorityExpression END -type REQ_OVERRIDE
bind cache global cache_pol_2 -priority 100 -gotoPriorityExpression END -type REQ_OVERRIDE
bind cache global cache_pol_3 -priority 100 -gotoPriorityExpression END -type RES_OVERRIDE
The data from the client and the server are as following:
GET /home.php HTTP/1.1
Host: www.website.com
User-Agent: Mozilla Firefox/3.0.3
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 300 Connection: keep-alive Date: Thu, 09 Oct 2014 18:25:00 GMT Cookie: sessionid=100xyz HTTP/1.1 200 OK
Date: Thu, 09 Oct 2014 18:25:00 GMT Server: Apache/2.2.3 (Fedora) Last-Modified: Wed, 09 Jul 2014 21:55:36 GMT ETag: "27db3c-12ce-5e52a600" Accept-Ranges: bytes Cache-Control: private, max-age=0 Set-Cookie: sessionid=100xyz; expires=Thu, 09-Oct-2014 18:30:00 GMT; path=/ Content-Length: 119 Connection: close Content-Type: text/html; charset=UTF-8 Why does the object NOT persist in the cache?
A. The request is a GET request.
B. The response has Set-Cookie.
C. The content group is missing a cache selector.
D. The content group has been configured with relExpiry 0.
A NetScaler Engineer has created a new custom user monitor script and needs to place it in the NetScaler filesystem for use.
Where must the engineer place the custom script so that it is available for use?
A. /nsconfig/monitors
B. /netscaler/monitors
C. /var/nstemp/monitors
D. /netscaler/monitors/perl_mod
What are the supported protocols for management authentication?
A. LOCAL, LDAP, and SAML
B. RADIUS, LDAP and TACACS+
C. CERTIFICATE, LDAP and SAML
D. RADIUS, TACACS+ and CERTIFICATE
Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Citrix exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 1Y0-351 exam preparations and Citrix certification application, do not hesitate to visit our Vcedump.com to find your solutions here.