Citrix 1Y0-A28 Online Practice Questions and Exam Preparation

Citrix 1Y0-A28 Online Questions & Answers

• Question 61:

  Company policy states that all passwords should travel the network in encrypted packets except SNMP. Which command should the network engineer execute to comply with this policy?

  A. set ns ip 10.20.30.40 -ssh disabled -telnet disabled -gui enabled
  B. set ns ip 10.20.30.40 -telnet disabled -gui secureonly -ftp disabled
  C. set ns ip 10.20.30.40 -mgmtaccess disabled -restrictaccess enabled
  D. set ns ip 10.20.30.40 -gui secureonly -ssh enabled -restrictaccess enabled
  B. set ns ip 10.20.30.40 -telnet disabled -gui secureonly -ftp disabled

• Question 62:

  Scenario: An engineer executes the following commands:

  add vlan 2 bind vlan 2 -ifnum 1/2 add ns ip 10.110.4.200 255.255.255.0 bind vlan 2 -IPAddress 10.110.4.200 255.255.255.0

  What type of IP address has been added to the NetScaler?

  A. VIP address
  B. NSIP address
  C. SNIP address
  D. GSLB Site IP address
  C. SNIP address

• Question 63:

  Scenario: The NetScaler is connected to two subnets. The NSIP is 10.2.9.12. The external SNIP is 10.2.7.3. The MIP for internal access is 10.2.9.3. Web servers, authentication servers and time servers are on the 10.2.10.0/24 network which is available through the 10.2.9.1 router. The external firewall has the 10.2.7.1 address. Traffic bound for Internet clients should flow through the external firewall.

  Which command should be used to set the default route?

  A. add route 0.0.0.0 0.0.0.0 10.2.7.1
  B. add route 0.0.0.0 0.0.0.0 10.2.9.1
  C. add route 10.0.0.0 255.0.0.0 10.2.9.1
  D. add route 10.0.0.0 255.0.0.0 10.2.7.1
  A. add route 0.0.0.0 0.0.0.0 10.2.7.1

• Question 64:

  Scenario: An engineer has three subnets configured on a NetScaler appliance. The engineer must only allow a certain group of users to access a virtual server on the appliance. The IT Manager requires that all rules are flexible and can be easily modified for ease of administration.

  How could the engineer allow certain groups to access the virtual server while still being able to modify the setting in the future?

  A. Add a Simple ACL.
  B. Disable USNIP Mode.
  C. Create an Extended ACL.
  D. Add a Host Route to the virtual server.
  C. Create an Extended ACL.

• Question 65:

  Scenario: A NetScaler engineer needs to enable access to some web servers running on an IPv6- only network. The clients connecting the services are on an IPv4 network. The engineer has already enabled IPv6 on the NetScaler. What does the engineer need to do in order to provide access to the services on the IPv6 network?

  A. Create an IPv6 tunnel and a IPv4 virtual server.
  B. Configure an IPv6 VLAN and bind the required interface.
  C. Create a IPv4 virtual server and bind the service group to it.
  D. Create an IPv6 ACL and a IPv4 virtual server and bind the ACL to the virtual server.
  C. Create a IPv4 virtual server and bind the service group to it.

• Question 66:

  When binding a certificate to a virtual server, which two certificate formats are supported by NetScaler? (Choose two.)

  A. P7B
  B. PFX
  C. PEM
  D. DER
  C. PEM
  D. DER

• Question 67:

  Scenario: A network engineer needs to generate a certificate on the NetScaler appliance. The environment requires a private key with 4096-bit encryption.

  To generate a new SSL certificate from a NetScaler Appliance, the engineer must first create __________. (Choose the correct option to complete the sentence.)

  A. CSR
  B. DSA key
  C. RSA key
  D. Diffie-Hellman key
  C. RSA key

• Question 68:

  How could a network engineer gather detailed network information?

  A. System node -> Diagnostics -> Call home
  B. System node -> Diagnostics -> Start new trace
  C. System node -> Diagnostics -> Show techsupport
  D. System node -> Diagnostics -> Show running vs saved config
  B. System node -> Diagnostics -> Start new trace

• Question 69:

  A NetScaler engineer would like to present different web pages to a user based on the device and browser type from which they are connecting. Which responder policy could assist with this requirement?

  A. HTTP.RES.URL.PATH
  B. HTTP.REQ.Host("Host")
  C. HTTP.RES.BODY(1024)
  D. HTTP.REQ.HEADER("User-Agent")
  D. HTTP.REQ.HEADER("User-Agent")

• Question 70:

  A network engineer needs to configure load balancing for an FTP site. Which type of session persistence method can the engineer select for this scenario?

  A. Rule
  B. Source IP
  C. Cookie Insert
  D. Custom Server ID
  B. Source IP