Citrix 1Y0-A28 Online Practice Questions and Exam Preparation

Citrix 1Y0-A28 Online Questions & Answers

• Question 31:

  What type of protocol does AppFlow use for reporting?

  A. TCP
  B. UDP
  C. HTTP
  D. SSL_TCP
  B. UDP

• Question 32:

  Scenario: A company is using Citrix NetScaler VPX for publishing internal resources using Citrix Access Gateway with Smart Access. Since the number of users has increased the company wants to migrate from Citrix NetScaler VPX to Citrix NetScaler MPX. The engineer is running a parallel installation of the Citrix NetScaler MPX and now needs to transfer the Citrix Access Gateway Universal Licenses from a Citrix NetScaler VPX to a Citrix NetScaler MPX platform.

  How should the engineer transfer the Citrix Access Gateway Universal License files from the VPX to the MPX?

  A. Backup the /nsconfig directory from the Citrix NetScaler VPX using SCP, restore the /nsconfig directory to the Citrix NetScaler MPX using SCP.
  B. Download the Access Gateway Universal License file(s) from the Citrix NetScaler VPX using SCP. Upload the Access Gateway Universal License file(s) to the Citrix NetScaler MPX using SCP.
  C. Logon to www.MyCitrix.com, return the Citrix Access Gateway Universal License file(s), reallocate the Citrix Access Gateway Universal License file using the hostname of the Citrix NetScaler MPX.
  D. Logon to www.MyCitrix.com, return the Citrix Access Gateway Universal License file(s), reallocate the Citrix Access Gateway Universal License file using the MAC Address of the Citrix NetScaler MPX.
  C. Logon to www.MyCitrix.com, return the Citrix Access Gateway Universal License file(s), reallocate the Citrix Access Gateway Universal License file using the hostname of the Citrix NetScaler MPX.

• Question 33:

  A network engineer might choose to use SSL_Bridge instead of a SSL virtual server in order to __________. (Choose the correct option to complete the sentence.)

  A. be able to decrypt the SSL traffic
  B. enable use of OCSP for revoked certificates
  C. pass user certificates to the back-end servers
  D. enable SSL server certificates on the service group
  C. pass user certificates to the back-end servers

• Question 34:

  Scenario: Primary NetScaler (NS1) is licensed for 10000 Maximum ICA users and 305 Access Gateway users. Secondary NetScaler (NS2) is licensed for 10000 Maximum ICA users and five Access Gateway users. From where and which command should a network engineer run to display diagnostics on the licenses?

  A. From the shell, run 'view license'.
  B. From the shell, run 'more /var/log/license.log'.
  C. From the command-line interface, run 'show license'.
  D. From the command-line interface, run 'cat /var/log/license.log'.
  B. From the shell, run 'more /var/log/license.log'.

• Question 35:

  Scenario: A NetScaler engineer is adding a new SSL certificate to a NetScaler device. During the process the engineer receives an error message:

  "Certificate with key size greater than RSA512 or DSA512 bits not supported."

  The same process has been followed previously on the same model of NetScaler successfully.

  What is the likely cause of this error?

  A. The certificate hostname is invalid.
  B. RSA authentication has been added to the VIP.
  C. The NetScaler has not been licensed correctly.
  D. The CSR has not been submitted to the certificate authority.
  C. The NetScaler has not been licensed correctly.

• Question 36:

  A public SSL certificate on a virtual server is about to expire and the NetScaler engineer needs to renew the certificate before it expires. Which step must the engineer take to renew the SSL Certificate?

  A. Generate a new CSR
  B. Recreate the Private Keys
  C. Execute CRL Management
  D. Update the existing certificate
  D. Update the existing certificate

• Question 37:

  Scenario: Example.com runs a dating service site that provides a service with videos of candidates. They want to use RTSP load balancing to stream the videos more effectively. Which load balancing method should the engineer select?

  A. Least packet
  B. Round Robin
  C. Least bandwidth
  D. Least connection
  C. Least bandwidth

• Question 38:

  Scenario: A network engineer needs to add an NTP server to a NetScaler appliance. The NTP service is configured on 10.10.1.49. Which command should the network engineer use within the command-line interface to add in an NTP server for time synchronization?

  A. add ntp server 10.10.1.49
  B. add server NTP 10.10.1.49
  C. add service NTP 10.10.1.49 TCP 123
  D. add service NTP 10.10.1.49 UDP 123
  A. add ntp server 10.10.1.49

• Question 39:

  Scenario: The NetScaler has been connected to two external networks provided by different Internet service providers(ISPs). Dynamic routing is not enabled. Traffic is expected to use the first ISP (through the 10.50.1.1 router) if possible and the second, slower ISP (through the 10.51.1.1 router) only if the Primary ISP fails.

  Which two commands could the network engineer execute to configure the routes? (Choose two.)

  A. add route 0.0.0.0 0.0.0.0 10.51.1.1 -cost 10 -monitor arp
  B. add route 0.0.0.0 0.0.0.0 10.50.1.1 -cost 5 -monitor PING
  C. add route 0.0.0.0 0.0.0.0 10.50.1.1 -cost 15 -msr ENABLED
  D. add route 0.0.0.0 0.0.0.0 10.51.1.1 -cost 3 -monitor PING-DEFAULT
  A. add route 0.0.0.0 0.0.0.0 10.51.1.1 -cost 10 -monitor arp
  B. add route 0.0.0.0 0.0.0.0 10.50.1.1 -cost 5 -monitor PING

• Question 40:

  Scenario: A network engineer has bound four policies to an HTTP virtual server as follows:

  PolicyA is bound with a priority of 10 and has the following expression: REQ.IP.SOURCEIP == 10.10.10.0 PolicyB is bound with a priority of 15 and has the following expression: REQ.IP.SOURCEIP != 10.10.11.0 PolicyC is bound with a priority of 20 and has the following expression: REQ.IP.SOURCEIP == 10.10.12.0 PolicyD is bound with a priority of 25 and has the following expression: REQ.IP.SOURCEIP != 10.10.13.0 When a connection is made from a PC with an IP address of 10.10.12.15, which policy will be applied?

  A. PolicyA
  B. PolicyB
  C. PolicyC
  D. PolicyD
  B. PolicyB