Citrix 1Y0-A28 Online Practice Questions and Exam Preparation

Citrix 1Y0-A28 Online Questions & Answers

• Question 41:

  Scenario: A network engineer would like to prevent blacklisted remote clients from accessing NetScaler hosted application services. An IP address blacklist database is maintained by an external company and available to query over the Internet.

  The engineer would like to reject any connections from IP addresses that are contained in the blacklist. What could the engineer configure to achieve this goal?

  A. SSL offload
  B. HTTP callout
  C. URL transformation
  D. SSL certification revocation list check
  B. HTTP callout

• Question 42:

  Scenario: A network engineer gets an error message when using the configuration utility to import a PKCS#12 certificate that contains a dollar sign ($), a backquote (`), or an escape (\) character password. In order to address this error, the network engineer could prefix it with __________. (Choose the correct option to complete the sentence.)

  A. an escape character (\)
  B. a backquote character (`)
  C. a dollar sign character ($)
  D. a double quotation character (")
  A. an escape character (\)

• Question 43:

  Scenario: The NetScaler is configured with a NSIP of 10.20.30.40. Management access is NOT enabled on any other IP address. Which command should an engineer execute to prevent access to the NetScaler using HTTP and only allow HTTPS access?

  A. set ns ip 10.20.30.40 -gui disabled -telnet disabled
  B. set ip 10.20.30.40 -gui secureonly -mgmtaccess enabled
  C. set ip 10.20.30.40 -mgmtaccess disabled -gui secureonly
  D. set ns ip 10.20.30.40 -gui enabled -restrictAccess enabled
  B. set ip 10.20.30.40 -gui secureonly -mgmtaccess enabled

• Question 44:

  A network engineer is testing a new load balancing virtual server "test" that has the service group "test- grp" bound to it. Which command could the engineer run to show connection details for the new virtual server?

  A. show server
  B. show services
  C. show servicegroups
  D. show connectiontable
  D. show connectiontable

• Question 45:

  Scenario: The IT department in an organization manages servers and network devices from an internal management subnet. A Netscaler device has recently been installed into the DMZ network. The intranet firewall allows TCP 443 from the management subnet to the Netscaler device.

  How could the engineer ensure that only workstations in the management network are permitted to manage the Netscaler?

  A. Create an Extended ACL based on the source IP address.
  B. Create a restricted route from the internal network to the DMZ.
  C. Enable the management access control option on the NSIP address.
  D. Enable the management access control on the internal SNIP address.
  A. Create an Extended ACL based on the source IP address.

• Question 46:

  Scenario: A network engineer has configured a load balancing virtual server for an HTTP application. Due to the application architecture, it is imperative that a user's session remains on a single server during the session. The session has an idle timeout of 60 minutes. Some devices are getting inconsistent application access while most are working fine. The problematic devices all have tighter security controls in place.

  Which step should the engineer take to resolve this issue?

  A. Set the cookie timeout to 60 minutes.
  B. Configure a backup persistence of SourceIP.
  C. Change the HTTP parameters to Cookie Version 1.
  D. Utilize SSL offload to enable the application to use SSL.
  B. Configure a backup persistence of SourceIP.

• Question 47:

  Scenario: A network engineer needs to re-configure the NetScaler to utilize two new VLANs - VLAN2 and VLAN3. VLAN2 is an untagged VLAN and VLAN3 will require a .1q compliant tag. Interface 1/1 is the only interface that will be used on the NetScaler.

  How could the engineer configure the NetScaler so that it can communicate with both networks?

  A. Change the NSVLAN to 3 Add VLAN 2 and bind interface 1/1 as untagged
  B. Enable the Tag all VLANs option on interface 1/1.
  C. Add VLAN2 and bind interface 1/1 as untagged Add VLAN3 and bind interface 1/1 as tagged
  D. Add a SNIP for each VLAN Enable management access on the SNIP for VLAN3
  C. Add VLAN2 and bind interface 1/1 as untagged Add VLAN3 and bind interface 1/1 as tagged

• Question 48:

  A network engineer should use the Advanced tab when configuring load balancing to enable __________. (Choose the correct option to answer the question.)

  A. SSL offloading
  B. Integrated caching
  C. EdgeSight Monitoring
  D. Direct Server Return Mode
  D. Direct Server Return Mode

• Question 49:

  A network engineer needs to prevent too many simultaneous HTTP requests that can cause a Denial Of Service (DDoS). What could the engineer enable to prevent too many simultaneous HTTP requests?

  A. Rate Limiting
  B. SureConnect
  C. Priority Queuing
  D. Authorization Policy
  A. Rate Limiting

• Question 50:

  A company has a new CEO and wants to update their website with the new CEO's name. What could the engineer do on the website while this modification is being made?

  A. Insert the new name on the header requests using Rewrite policies.
  B. Hide the current name on the header request using Rewrite policies.
  C. Delete the current name on the body response using Rewrite policies.
  D. Replace the current name on the body response using Rewrite policies.
  D. Replace the current name on the body response using Rewrite policies.