Citrix 1Y0-A28 Online Practice Questions and Exam Preparation

Citrix 1Y0-A28 Online Questions & Answers

• Question 91:

  A network engineer must determine which SSL protocols are enabled on a virtual server named SSL01. Which command could the engineer run to see this information?

  A. Show ssl stats
  B. Show server SSL01
  C. Show vServer SSL01
  D. Show ssl vserver SSL01
  D. Show ssl vserver SSL01

• Question 92:

  Scenario: A network engineer created an SSL virtual server and enabled smart card on it. The engineer tried browsing to the server and noticed the back-end system could NOT see the users certificates. What could be causing this issue?

  A. The SSL virtual server cannot forward a client certificate.
  B. The network engineer has not set smart card to mandatory.
  C. The SSL virtual server cannot use smart card authentication.
  D. The network engineer has not enabled SNI on the virtual server.
  E. The network engineer forgot to enable the SSL policy allowing smart card forwarding on the SSL virtual server.
  A. The SSL virtual server cannot forward a client certificate.

• Question 93:

  Scenario: A network engineer needs to implement high availability (HA) for a pair of NetScaler appliances. The existing appliance was recently restarted and the new appliance has been rack mounted and turned on for several weeks waiting to be configured. The engineer needs to create an HA pair, but is concerned that his original appliance will get erased when the HA pair is created.

  Which two tasks could the engineer do before the creation of the HA pair to ensure that the exiting unit stays the main appliance? (Choose two.)

  A. Set StayPrimary on the existing node.
  B. Configure StaySecondary on the new node.
  C. Enable HA Sync before adding the second node.
  D. Create a Route Monitor to ensure proper synchronization.
  E. Ensure that INC mode is enabled during creation of HA Pair.
  A. Set StayPrimary on the existing node.
  B. Configure StaySecondary on the new node.

• Question 94:

  A network engineer has been tasked with identifying the cause of intermittent network connectivity issues.

  Which command should the engineer use to generate the necessary network information required to diagnose the connectivity issues?

  A. nslog
  B. nstrace
  C. nsumon
  D. nsconmsg
  B. nstrace

• Question 95:

  Scenario: An engineer has configured a virtual server that users access using HTTP port 80. The web application also uses TCP port 81 and 8080 for non-user access. The engineer would like to prevent users from connecting to web servers if any of the ports go down. How should the engineer set this configuration to ensure service availability?

  A. Increase the monitor threshold.
  B. Lower the server timeout value.
  C. Create additional virtual servers for ports 81 and 8080.
  D. Create monitors for ports 81 and 8080, and bind to the service or service group.
  D. Create monitors for ports 81 and 8080, and bind to the service or service group.

• Question 96:

  A network engineer notes that a high availability pair (HA) is NOT synchronizing correctly and decides to open a ticket with Citrix Support.

  When opening the new ticket with Citrix Support, the engineer should run show __________ and __________. (Choose the correct set of options to complete the sentence.)

  A. ha node; provide any public IP addresses listed
  B. ha node; provide the hello and dead interval data
  C. techsupport on the primary device; send the output to Citrix Support
  D. techsupport on both the primary and secondary devices; send the output to Citrix support
  D. techsupport on both the primary and secondary devices; send the output to Citrix support

• Question 97:

  Which two of the following settings could be configured using a TCP profile that is bound to a service? (Choose two.)

  A. TCP buffer size
  B. Window scaling
  C. TCP Server time-out values
  D. Source IP for specific subnet
  E. Allowed bandwidth throughput
  F. Number of max concurrent TCP connections
  A. TCP buffer size
  B. Window scaling

• Question 98:

  Scenario: A network engineer has created an SSL offload virtual server. The virtual server shows as a DOWN state. Which two scenarios could cause the virtual server showing as DOWN? (Choose two.)

  A. Persistence is set to NONE.
  B. The protocol should be SSL_TCP.
  C. A responder policy has been bound.
  D. The service is not bound to the virtual server.
  E. No SSL certificate is bound to the virtual server.
  D. The service is not bound to the virtual server.
  E. No SSL certificate is bound to the virtual server.

• Question 99:

  Scenario: A network engineer has installed a NetScaler system into their corporate DMZ and would like to provide access to a web server on the internal LAN. The web server will be accessed by external users through the Netscaler. The

  firewall administrator has opened the relevant ports required on the external and the internal firewall. The engineer notices that the virtual server and services representing the web server are down and the internal web server does NOT

  appear accessible from the NetScaler.

  What could be the cause of this?

  A. USIP is not enabled.
  B. Client IP Insertion is not enabled.
  C. A URL rewrite policy is not created.
  D. A SNIP address has not been added.
  D. A SNIP address has not been added.

• Question 100:

  An engineer has configured a DNS virtual server on a NetScaler appliance but the monitors are showing DOWN and DNS resolution is failing. Which of the following should the engineer check?

  A. Port 53 between the VIP address and the DNS servers is allowed
  B. That a ADNS_TCP service has been configured on the NetScaler
  C. That the load balancing feature has been enabled on the NetScaler
  D. Port 53 between the NSIP address and the DNS servers is allowed
  E. Port 53 between the SNIP address and the DNS servers is allowed
  E. Port 53 between the SNIP address and the DNS servers is allowed