Citrix 1Y0-A28 Online Practice Questions and Exam Preparation

Citrix 1Y0-A28 Online Questions & Answers

• Question 21:

  A NetScaler implementation is experiencing intermittent network issues, specifically regarding traffic to a back-end service associated with IP address 10.10.1.86. Which command should a network engineer execute to generate diagnostic information to investigate this issue?

  A. traceroute 10.10.1.86
  B. show run | grep 10.10.1.86
  C. nstcpdump.sh host 10.10.1.86
  D. show service 10.10.1.86 -summary
  C. nstcpdump.sh host 10.10.1.86

• Question 22:

  A NetScaler engineer generates a techsupport archive to be sent to Technical Support. Which three of the following pieces of information will be included in the archive file? (Choose three.)

  A. Model Number
  B. SSL Private Keys
  C. Old Configuration Files
  D. Hardware Boot sequence
  E. Webpage Customizations
  F. Certificate Revocation List
  A. Model Number
  C. Old Configuration Files
  D. Hardware Boot sequence

• Question 23:

  Scenario: A user browses to a page and is presented with a warning that he is trying to enter a web site with an untrusted certificate. The network engineer had added the correct certificate to the SSL virtual server.

  What could be the cause of this issue?

  A. TLS is disabled on the virtual server.
  B. The certificate is not linked to the intermediate CA.
  C. The certificate has expired and needs to be renewed.
  D. The CA certificate has not been added to the SSL virtual server.
  B. The certificate is not linked to the intermediate CA.

• Question 24:

  Scenario: The network engineer is setting up a new NetScaler using a direct connection. Three networks are connected to the NetScaler. After initial configuration and restart, the engineer would like to confirm the routing table entries.

  From which location and which command should the engineer run to display the routing table?

  A. From the shell 'netstat -r'
  B. From the shell 'route monitor'
  C. From the command-line interface 'show pbr'
  D. From the command-line interface 'show route'
  D. From the command-line interface 'show route'

• Question 25:

  Scenario: An organization has recently been penetration-tested by a security company. The findings have indicated that the NetScaler device is responding to requests revealing web server information within the HTTP response headers. Which NetScaler feature can a network engineer use to prevent this information from being leaked to a potential malicious user?

  A. Rewrite
  B. Responder
  C. Web Logging
  D. URL Transformation
  A. Rewrite

• Question 26:

  A network engineer is investigating a recent failure of NetScaler high availability and confirms that some recent changes were made to the configuration. What is a likely cause of the failure?

  A. Load balancing virtual server marked DOWN.
  B. SNIP has had management access removed.
  C. RPC node password changed on an appliance.
  D. The network command policy has been modified.
  C. RPC node password changed on an appliance.

• Question 27:

  Scenario: The network engineer has created a monitor and bound it to a service group containing four web servers to verify that the web application responds. During routine maintenance one of the web servers is shut down; however, the server state remains UP and user requests are still attempting to communicate with the server.

  What could be causing this problem?

  A. The server has been disabled.
  B. The monitor is not bound at the correct bind point.
  C. Health monitoring is disabled for the service group.
  D. The NetScaler configuration has not been saved since before the monitor was bound.
  C. Health monitoring is disabled for the service group.

• Question 28:

  Scenario: An application that uses HTTP for connections and other protocols for different types of content has been deployed. Load balancing virtual servers have been created for each protocol and the engineer now needs to ensure that once a load balancing decision has occurred, further requests for different content are served from the same server.

  How could the engineer achieve this?

  A. Create a persistency group.
  B. Set the Spillover method to DYNAMICCONNECTION.
  C. Add a new virtual server for each protocol that is not directly addressable.
  D. Set each virtual server to use Source IP Hash as the load balancing method.
  A. Create a persistency group.

• Question 29:

  Some SSL certificate files may be missing from a NetScaler appliance. Which directory should an engineer check to determine which files are missing?

  A. /nsconfig/ssl
  B. /nsconfig/ssh
  C. flash/nsconfig/
  D. /var/netscaler/ssl/
  A. /nsconfig/ssl

• Question 30:

  A network engineer has enabled USIP and USNIP and set a unique IP address as the source IP using the proxyIP parameter on an INAT policy. Which is the correct order of precedence for the IP addresses?

  A. Unique IP-USIP-MIP-Error
  B. USIP-unique IP-USNIP-MIP-Error
  C. USIP-Unique IP-MIP-USNIP-Error
  D. USIP-USNIP-MIP-Unique IP-Error
  B. USIP-unique IP-USNIP-MIP-Error