Citrix 1Y0-A28 Online Practice Questions and Exam Preparation

Citrix 1Y0-A28 Online Questions & Answers

• Question 11:

  During a recent security penetration test, several ports on the management address were identified as providing unsecured services. Which two methods could the network engineer use to restrict these services? (Choose two.)

  A. Configure Auditing policies.
  B. Create Content Filtering policies.
  C. Create Access Control Lists (ACLs).
  D. Configure options on the Management IP addresses.
  C. Create Access Control Lists (ACLs).
  D. Configure options on the Management IP addresses.

• Question 12:

  A client is trying to reach a back-end server with an IP address of 10.192.31.5 given the following routing table:

  

  Which route would the NetScaler use for this client?

  A. 1
  B. 5
  C. 6
  D. 7
  C. 6

• Question 13:

  Which two compression actions could a NetScaler engineer use? (Choose two.)

  A. bzip2
  B. deflate
  C. compress
  D. pack200-gzip
  B. deflate
  C. compress

• Question 14:

  An engineer should use the filter (content filtering) feature to prevent __________ and __________. (Choose the two correct options to complete the sentence.)

  A. the use of unauthorized HTTP methods
  B. a client from accessing a specific IP on the back-end
  C. inappropriate HTTP headers from being sent to your Web server
  D. inappropriate MSSQL commands from being sent to your SQL server
  E. a client from a specific VLAN ID to access resources on the NetScaler
  A. the use of unauthorized HTTP methods
  C. inappropriate HTTP headers from being sent to your Web server

• Question 15:

  Scenario: A network engineer adds a secondary node for high availability (HA) purposes. To confirm the implementation is working, the engineer initiates a fail over; however when this is complete, some virtual servers are un-reachable. What is a possible cause of this issue?

  A. SSL has not been enabled as a feature.
  B. The network configuration is mismatched on the nodes.
  C. HA sync does not propagate network settings by default.
  D. The nsroot password has been changed on the new node.
  B. The network configuration is mismatched on the nodes.

• Question 16:

  Scenario: An engineer is configuring services to allow load balancing of backend web servers on the internal network. The engineer bound multiple monitors to the first service, but notices that the service is reporting as DOWN. The monitor threshold default has NOT been changed.

  What could be causing this issue?

  A. The service type is HTTP.
  B. One of the monitors' tests is failing.
  C. Some of the monitors have a higher weight.
  D. The monitors are both reporting an UP status.
  B. One of the monitors' tests is failing.

• Question 17:

  A network engineer has configured two NetScaler MPX appliances as a high availability (HA) pair. What can the engineer configure to prevent failover if only a single interface fails?

  A. FIS
  B. PBR
  C. SNMP
  D. VMAC
  A. FIS

• Question 18:

  Scenario: A pair of NetScaler devices have recently been installed into the corporate DMZ. The Netscalers have been installed in two-arm mode, with two interfaces in a Internet-facing VLAN and two interfaces in the internal VLAN. A private

  management subnet also exists.

  The NetScaler engineer would like to secure and restrict communication between the management subnet and the SNIP address on that subnet.

  Which two actions could the engineer take to help with these goals? (Choose two.)

  A. Apply an ACL on the specified SNIP.
  B. Remove the ACL list to the internal VLAN.
  C. Remove the NSIP address from the Netscaler.
  D. Configure the SNIP with the -gui SECUREONLY option.
  A. Apply an ACL on the specified SNIP.
  D. Configure the SNIP with the -gui SECUREONLY option.

• Question 19:

  Why would an engineer want to specify a TCP Profile for a specific service group?

  A. To enable use of features like SSL over TCP for that specific service group.
  B. To adjust the TCP settings for traffic to and from that specific service group.
  C. To use a specific SNIP for traffic to the back-end servers in that service group.
  D. To enable features like use source IP, TCP keep alive and TCP buffering for a specific service group.
  B. To adjust the TCP settings for traffic to and from that specific service group.

• Question 20:

  A network engineer needs to upgrade both appliances of a High Availability (HA) pair. In which order should the network engineer upgrade the appliances?

  A. Disable high availability and upgrade one node at a time.
  B. Upgrade the primary node first without disabling high availability.
  C. Upgrade the secondary node first without disabling high availability.
  D. Perform the upgrade simultaneously without disabling high availability.
  C. Upgrade the secondary node first without disabling high availability.