Citrix CCP-N 1Y0-351 Questions & Answers

• Question 21:

  Scenario: A network engineer is managing a NetScaler environment that has two NetScaler devices running as a high availability pair. The engineer must upgrade the current version from NetScaler 9 to NetScaler 10.5.

  Which action must the engineer take?

  A. Upgrade the primary node and perform HA sync.

  B. Upgrade the secondary node and then upgrade the primary node.

  C. Upgrade the primary node and then upgrade the secondary node.

  D. Break the high availability pair, upgrade each NetScaler device, and then reconfigure high availability.

  Correct Answer: B

• Question 22:

  A network engineer needs to upgrade both appliances of a High Availability (HA) pair.

  In which order should the network engineer upgrade the appliances?

  A. Disable high availability and upgrade one node at a time.

  B. Upgrade the primary node first without disabling high availability.

  C. Upgrade the secondary node first without disabling high availability.

  D. Perform the upgrade simultaneously without disabling high availability.

  Correct Answer: C

• Question 23:

  A network engineer notes that a high availability pair (HA) is NOT synchronizing correctly and decides to open a ticket with Citrix Support.

  When opening the new ticket with Citrix Support, the engineer should run show __________ and __________. (Choose the correct set of options to complete the sentence.)

  A. ha node; provide any public IP addresses listed

  B. ha node; provide the hello and dead interval data

  C. techsupport on the primary device; send the output to Citrix Support

  D. techsupport on both the primary and secondary devices; send the output to Citrix support

  Correct Answer: D

• Question 24:

  Scenario: An engineer has been asked to implement load balancing of an existing unsecured web application. The engineer needs to ensure that users will access the web application using HTTPS, but no changes can be made to the web servers hosting the web application.

  In order to fulfill the requirements, the engineer must create an __________ service group and add members with port __________; and bind the service group to an __________ virtual server. (Choose the correct set of options to complete the sentence.)

  A. SSL; 443; SSL

  B. HTTP; 80; SSL

  C. SSL; 80; HTTP

  D. HTTPS; 443; HTTP

  Correct Answer: B

• Question 25:

  A network engineer has started at a new company and has been instructed to restrict access to an external facing VIP to selected third party clients, based on their source IP address range.

  What could the engineer do to accomplish this task?

  A. Enable USNIP mode on the Netscaler.

  B. Enable the host route option on the external VIP.

  C. Create an Extended ACL based on the source IP address.

  D. Create a SNIP address in the external VLAN limited to the source IP addresses.

  Correct Answer: C

• Question 26:

  

  A network engineer is investigating a recent failure of NetScaler high availability and confirms that some recent changes were made to the configuration.

  What is a likely cause of the failure?

  A. Load balancing virtual server marked DOWN.

  B. SNIP has had management access removed.

  C. RPC node password changed on an appliance.

  D. The network command policy has been modified.

  Correct Answer: C

• Question 27:

  

  Which two of the following settings could be configured using a TCP profile that is bound to a service? (Choose two.)

  A. TCP buffer size

  B. Window scaling

  C. TCP Server time-out values

  D. Source IP for specific subnet

  E. Allowed bandwidth throughput

  F. Number of max concurrent TCP connections

  Correct Answer: AB

• Question 28:

  Scenario: A pair of NetScaler devices have recently been installed into the corporate DMZ. The Netscalers have been installed in two-arm mode, with two interfaces in a Internet-facing VLAN and two interfaces in the internal VLAN. A private management subnet also exists.

  The NetScaler engineer would like to secure and restrict communication between the management subnet and the SNIP address on that subnet.

  Which two actions could the engineer take to help with these goals? (Choose two.)

  A. Apply an ACL on the specified SNIP.

  B. Remove the ACL list to the internal VLAN.

  C. Remove the NSIP address from the Netscaler.

  D. Configure the SNIP with the -gui SECUREONLY option.

  Correct Answer: AD

• Question 29:

  Scenario: A network engineer is going to roll out an upgrade from a 9.x version on a standalone

  NetScaler appliance using the command-line interface.

  Which two items does the engineer need to download before proceeding with the upgrade? (Choose two.)

  A. SSL Certificates Files

  B. NetScaler Firmware File

  C. NetScaler Configuration file

  D. NetScaler Documentation File

  Correct Answer: BD

• Question 30:

  Scenario: A network engineer has bound four policies to an HTTP virtual server as follows: PolicyA is bound with a priority of 10 and has the following expression: REQ.IP.SOURCEIP == 10.10.10.0 PolicyB is bound with a priority of 15 and has the following expression: REQ.IP.SOURCEIP != 10.10.11.0 PolicyC is bound with a priority of 20 and has the following expression: REQ.IP.SOURCEIP == 10.10.12.0

  PolicyD is bound with a priority of 25 and has the following expression: REQ.IP.SOURCEIP != 10.10.13.0 When a connection is made from a PC with an IP address of 10.10.12.15, which policy will be applied?

  A. PolicyA

  B. PolicyB

  C. PolicyC

  D. PolicyD

  Correct Answer: B

  Don't be fooled by this as the first policy to match will be used, in this case 10.10.12.15 is not 10.10.11.0 hence it satisfies PolicyB.