Citrix 1Y0-A28 Online Practice Questions and Exam Preparation

Citrix 1Y0-A28 Online Questions & Answers

• Question 51:

  Scenario: Company Inc. wants to tag incoming requests with a header that indicates which browser is being used on the connection. This helps the server keep track of the browsers after the NetScaler has delivered the connections to the back end.

  The engineer should create __________ actions to __________. (Choose the correct set of options to complete the sentence.)

  A. rewrite; insert tags on the client header
  B. responder; separate the client requests
  C. rewrite; insert tags on the server response
  D. responder; filter the browser type on the client header
  A. rewrite; insert tags on the client header

• Question 52:

  A network engineer is trying to read a nstrace from the NetScaler but can only see encrypted traffic. Which file(s) are required to decrypt the network trace?

  A. The server certificate
  B. The servers root certificate
  C. The private key for the server certificate
  D. The private key for the server root certificate
  C. The private key for the server certificate

• Question 53:

  Scenario: The network engineer is unable to access a specific SSL site through the NetScaler. While reviewing traces on the NetScaler, the network engineer noticed "Handshake" failures from the server. These handshake failures could be the result of the virtual server __________. (Choose the correct option to complete the sentence.)

  A. only allowing TLS
  B. not allowing SSLv3
  C. not allowing correct ciphers
  D. configured to demand client authentication
  C. not allowing correct ciphers

• Question 54:

  Scenario: A network engineer deployed a new NetScaler MPX appliance on the network and all interfaces are connected to the core switch. The network engineer notices the CPU utilization has become very high on the switch since the NetScaler deployment.

  Which two actions could the engineer perform on the NetScaler to resolve this issue? (Choose two.)

  A. Configure VMAC
  B. Utilize static routing
  C. Configure a channel
  D. Connect a single interface only
  C. Configure a channel
  D. Connect a single interface only

• Question 55:

  A security test has been completed on an SSL offload implementation and it has been determined that the certificate key length is too short and must be increased. Which two steps must the network engineer complete to resolve this? (Choose two.)

  A. Bind the certificate to an SSL service group.
  B. Bind the certificate to an SSL Offload virtual server.
  C. Add a new SSL policy to the SSL offload virtual server.
  D. Use the "Client certificate wizard" to generate a CSR, request a certificate and import.
  E. Use the "Server certificate wizard" to generate a CSR, request a certificate and import.
  B. Bind the certificate to an SSL Offload virtual server.
  E. Use the "Server certificate wizard" to generate a CSR, request a certificate and import.

• Question 56:

  Scenario: A network engineer has created two selectors to use to populate a cache group in integrated caching. One selector, "Hit," will determine what to add to the group. The other, "Inval", will select what should be invalidated.

  Which command should the engineer run to create the cache group?

  A. add cache contentgroup CacheGroup1 -hitParams Hit -invalParam Inval
  B. add cache contentgroup CacheGroup1 -hitSelector Hit -invalSelector Inval
  C. set cache contentgroup CacheGroup1 - hitParams Hit -invalParam Inval -type HTTP
  D. set cache contentgroup CacheGroup1 -hitSelector Hit - invalSelector Inval -type HTTP
  B. add cache contentgroup CacheGroup1 -hitSelector Hit -invalSelector Inval

• Question 57:

  A network engineer has started at a new company and has been instructed to restrict access to an external facing VIP to selected third party clients, based on their source IP address range. What could the engineer do to accomplish this task?

  A. Enable USNIP mode on the Netscaler.
  B. Enable the host route option on the external VIP.
  C. Create an Extended ACL based on the source IP address.
  D. Create a SNIP address in the external VLAN limited to the source IP addresses.
  C. Create an Extended ACL based on the source IP address.

• Question 58:

  A company wants to implement a policy where all passwords should be encrypted while transiting the network. Where in the GUI would the network engineer prevent access to unsecured management protocols?

  A. Network -> IPs
  B. System -> Auditing
  C. AppExpert -> Pattern Sets
  D. Protection Features -> Filter
  A. Network -> IPs

• Question 59:

  A network engineer wants to collect performance statistics regarding the traffic between different points in the connection, specifically from client-to-NetScaler and from NetScaler to back-end server, and be able to present this to different analysis tools. Which feature on the NetScaler could the engineer use for this?

  A. Syslog
  B. nstrace
  C. AppFlow
  D. nsconmsg
  C. AppFlow

• Question 60:

  When configuring NetScaler authentication to access a web site, which two things should a network engineer verify in the environment? (Choose two.)

  A. AAA is enabled.
  B. One DNS server exists.
  C. A Keytab file is available.
  D. An authentication virtual server exists.
  E. A traffic management virtual server exists.
  A. AAA is enabled.
  D. An authentication virtual server exists.