Citrix CCP-N 1Y0-351 Questions & Answers

• Question 31:

  A network engineer might choose to use SSL_Bridge instead of a SSL virtual server in order to __________. (Choose the correct option to complete the sentence.)

  A. be able to decrypt the SSL traffic

  B. enable use of OCSP for revoked certificates

  C. pass user certificates to the back-end servers

  D. enable SSL server certificates on the service group

  Correct Answer: C

• Question 32:

  Scenario: The network engineer is setting up a new NetScaler using a direct connection. Three networks are connected to the NetScaler. After initial configuration and restart, the engineer would like to confirm the routing table entries.

  From which location and which command should the engineer run to display the routing table?

  A. From the shell 'netstat -r'

  B. From the shell 'route monitor'

  C. From the command-line interface 'show pbr'

  D. From the command-line interface 'show route'

  Correct Answer: D

  

• Question 33:

  An engineer is checking that ports are configured correctly between the NetScaler system and a

  back-end web server. Which command should the engineer use to test that the web server is responding on port 80?

  A. telnet webA.example.com 80

  B. telnet webA.example.com:80

  C. telnet webA.example.com port=80 D. telnet webA.example.com -port 80

  Correct Answer: A

• Question 34:

  A network engineer runs the following command:

  nsconmsg -K /var/nslog/newnslog -s nsdebug_pe=1 -d oldconmsg

  What is the engineer trying to check in the log?

  A. Bandwidth information

  B. Load-balancing information

  C. Content-switching statistics

  D. Memory utilization information

  Correct Answer: A

  http://www.netscalerkb.com/netscaler-tricks-and-guides/nsconmsg examples/? wap2;PHPSESSID=6bab876c08055dc69f12fb005869478f

  Paul B:

  Some of this probably duplicates my original post.... here's some bits stolen from the Netscaler Advanced

  course.....

  Enter the following command in the shell to trim a newnslog file:

  nsconmsg -K input_file -s time=DDMMMYYYY:HH:MM -k output_file -T seconds -d copy Command

  example:

  nsconmsg -K /var/nslog/newnslog -s time=19Jan2009:17:00 -k slice1_newnslog -T 3600 -d copy This

  command writes newnslog entries from 5pm-6pm in the slice1_newnslog file. Enter the following command in the shell to view the time span of the current newnslog file:

  nsconmsg -K /var/nslog/newnslog -d setime Enter the following command in the shell to display event information, such as entity up/down, alerts and configuration saves:

  nsconmsg -K /var/nslog/newnslog -d event Enter the following command in the shell to view console messages, which include IP address

  conflicts and duplex mismatch, in the current newnslog file:

  nsconmsg -K /var/nslog/newnslog -d consmsg

  Enter the following command in the shell to display memory utilization:

  nsconmsg -s -K /var/nslog/newnslogConMEM=1 -d oldconmsg Enter the following command in the shell to

  display bandwidth information:

  nsconmsg -K /var/nslog/newnslog -s nsdebug_pe=1 -d oldconmsg Enter the following command in the

  shell to display load-balancing information:

  nsconmsg -K /var/nslog/newnslog -s ConLb=1 -d oldconmsg Enter the following command in the shell to

  view SSL stats for front-end connections:

  nsconmsg -K /var/nslog/newnslog -s ConSSL=1 -d oldconmsg Enter the following command in the shell to

  view SSL stats for back-end connections:

  nsconmsg -K /var/nslog/newnslog -s ConSSL=2 -d oldconmsg Enter the following command in the shell to

  view SSL stats for front- and back-end connections:

  nsconmsg -K /var/nslog/newnslog -s ConSSL=3 -d oldconmsg Enter the following command in the shell to

  display monitoring statistics:

  nsconmsg -K /var/nslog/newnslog s ConMon=x d oldconmsg This command gives basic information when

  x=1 and gives detailed information when x=2. Enter the following command in the shell to display content

  switching statistics:

  nsconmsg -K /var/nslog/newnslog s ConCSW=1 -d oldconmsg Enter the following command in the shell to

  view all non-zero totals in the current newnslog file:

  nsconmsg -K /var/nslog/newnslog -d statswt0 | more

  Enter the following command in the shell to view the average rates in the current newnslog file:

  nsconmsg -K /var/nslog/newnslog d current | more

  Use -g to grep for specific counters of interest. For example:

  nsconmsg -K /var/nslog/newnslog -g cpu -d statswt0 | more nsconmsg -K /var/nslog/newnslog -g arp d

  current | more Enter following command in the shell to display CPU usage in the shell:

  nsconmsg -K /var/nslog/newnslog -s totalcount=200 -g cpu_use -d current Enter the following command in

  the shell to display NIC information:

  nsconmsg -K /var/nslog/newnslog -g nic -d current

  And watch out for the parameters: a "-k" and a "-K" (lower- vs upper-case) have VERY different

  meanings!!!!

  For example the UPPERcase "-K" refers to an input file, whilst the lowercase "-k" refers to an output file.

  Getting them wring could mean over-writing your log file!!! Ooops!

• Question 35:

  A network engineer needs to investigate why a few users have issues logging on to the NetScaler system. How can the engineer troubleshoot authentication issues on the NetScaler system?

  A. Use ECV monitoring.

  B. Run a violations report in Reporting.

  C. Use the CAT aaad.debug command.

  D. Check the system-authentication setting in the GUI.

  Correct Answer: C

  drop the the shell and the file is located at: /tmp/aaad.debug

  

• Question 36:

  A network engineer selected the option on a SSL certificate to provide notification upon expiration of the certificate; however when a certificate expires, NO notification is sent to the engineer. Which step could the engineer take to enable notification?

  A. Configure SNMP.

  B. Create a SSL policy.

  C. Enable the SSL offload feature.

  D. Ensure that the certificate is linked to a Root certificate.

  Correct Answer: A

• Question 37:

  A NetScaler implementation is experiencing intermittent network issues, specifically regarding traffic to a back-end service associated with IP address 10.10.1.86.

  Which command should a network engineer execute to generate diagnostic information to investigate this issue?

  A. traceroute 10.10.1.86

  B. show run | grep 10.10.1.86

  C. nstcpdump.sh host 10.10.1.86

  D. show service 10.10.1.86 -summary

  Correct Answer: C

  In my lab The command must be performed from the shell

  

• Question 38:

  While performing some re-cabling, a NetScaler engineer noticed that a power supply unit failed on a NetScaler appliance. What should the engineer enable to receive notification of a future hardware failure?

  A. SMTP

  B. SNMP

  C. Health monitoring

  D. EdgeSight monitoring

  Correct Answer: B

• Question 39:

  Scenario: A network engineer would like to prevent blacklisted remote clients from accessing NetScaler hosted application services. An IP address blacklist database is maintained by an external company and available to query over the Internet.

  The engineer would like to reject any connections from IP addresses that are contained in the blacklist.

  What could the engineer configure to achieve this goal?

  A. SSL offload

  B. HTTP callout

  C. URL transformation

  D. SSL certification revocation list check

  Correct Answer: B

• Question 40:

  A network engineer needs to prevent too many simultaneous HTTP requests that can cause a Denial Of Service (DDoS). What could the engineer enable to prevent too many simultaneous HTTP requests?

  A. Rate Limiting

  B. SureConnect

  C. Priority Queuing

  D. Authorization Policy

  Correct Answer: A