Ensurepass

 

QUESTION 111

Scenario: A NetScaler Engineer has configured a virtual server as follows:

 

set lb vserver web_vserver -redirectURL http://www.external.hosting.com -backupVServer maint_vserver

 

The virtual server web_vserver is marked as DOWN; maint_vserver is marked as UP.

 

The following request is sent to the web_vserver:

 

GET /path/query HTTP/1.1

 

What would happen to this request?

 

A.

Redirected to http://www.external.hosting.com

B.

Forwarded to the backup server, ignoring the query

C.

Forwarded to the backup server, preserving the query

D.

Redirected to http://www.external.hosting.com/path/query

 

Correct Answer: C

 

 

QUESTION 112

Scenario: A NetScaler Engineer has a high-availability (HA) pair of NetScaler MPX devices (NS1 and NS2) connected on interfaces 0/1, 1/1 and 1/2. NS1 is currently the primary unit. Fail-safe mode is NOT enabled. High-availability monitor is enabled on all the connected interfaces. The engineer sees the following line in the output of his “show node” command from the command-line interface:

 

Interfaces on which heartbeats are not seen: 1/1 1/2

 

Interfaces causing Partial Failure: None

 

What will happen if the 0/1 interface fails?

 

A.

NS1 and NS2 will both become primary.

B.

NS2 will fail and NS1 will remain primary.

C.

NS1 will fail and NS2 will become primary.

D.

NS1 and NS2 will both fail and become secondary.

 

Correct Answer: A

 

 

 

 

 

QUESTION 113

Scenario: A NetScaler Engineer is addressing an issue discovered during a vulnerability scan. The security team is requiring that the engineer disable specific SSL ciphers on the SSL VServer. Which two methods could the engineer use to meet this requirement? (Choose two.)

 

A.

Modify the list of ciphers in the Default cipher group.

B.

Change the list of bound ciphers on the VServer directly.

C.

Enable Cipher Redirect on the VServer and configure OCSP.

D.

Disable SSLv2 Redirect on the VServer and update the CRLs.

E.

Un-assign the default group, create a custom cipher group and assign it to the VServer.

 

Correct Answer: BE

 

 

QUESTION 114

When using static proximity load-balancing method for a Global Server Load Balancing (GSLB) virtual server, there must be a match between the IP addresses in the custom/static database to the IP address of the _________ so that it is associated with a given location. (Choose the correct option to complete the sentence.)

 

A.

GSLB service

B.

ADNS service

C.

Load-balancing server

D.

Client local DNS (LDNS)

 

Correct Answer: A

 

 

QUESTION 115

Scenario: A pair of NetScaler devices have recently been installed into the corporate DMZ. The Netscalers have been installed in two-arm mode, with two interfaces in a Internet- facing VLAN and two interfaces in the internal VLAN. A private management subnet also exists. The NetScaler engineer would like to secure and restrict communication between the management subnet and the SNIP address on that subnet. Which two actions could the engineer take to help with these goals? (Choose two.)

 

A.

Apply an ACL on the specified SNIP.

B.

Remove the ACL list to the internal VLAN.

C.

Remove the NSIP address from the Netscaler.

D.

Configure the SNIP with the -gui SECUREONLY option.

 

Correct Answer: AD

 

 

QUESTION 116

Scenario: A NetScaler appliance currently has a manually configured channel containing four interfaces; however, the engineer has been told that the NetScaler must now only use a single interface for this network. The engineer removes the channel and immediately notices a decrease in network performance. How could the engineer resolve this issue?

 

A.

Reset the unused interfaces

B.

Disable the unused interfaces

C.

Enable flow control on all interfaces

D.

Disable HA monitoring on the three interfaces that are no longer required

 

Correct Answer: B

 

 

QUESTION 117

A NetScaler Engineer has created a new custom user monitor script and needs to place it in the NetScaler filesystem for use. Where must the engineer place the custom script so that it is available for use?

 

A.

/nsconfig/monitors

B.

/netscaler/monitors

C.

/var/nstemp/monitors

D.

/netscaler/monitors/perl_mod

 

Correct Answer: A

 

 

QUESTION 118

What are the supported protocols for management authentication?

 

A.

LOCAL, LDAP, and SAML

B.

RADIUS, LDAP and TACACS+

C.

CERTIFICATE, LDAP and SAML

D.

RADIUS, TACACS+ and CERTIFICATE

 

Correct Answer: B

 

 

QUESTION 119

While binding a certificate key pair where the key is a 2048-bit, a NetScaler Engineer receives the following error message:

 

“Certificate with key size greater than RSA512 or DSA512 bits not supported”

 

What could be causing this error?

 

A.

The certificate being used is invalid.

B.

The license file is saved in UTF-8 format.

C.

The NetScaler does NOT have an SSL offloading card.

D.

The NetScaler appliance does NOT have an appropriate license.

 

Correct Answer: D

 

 

QUESTION 120

Which option needs to be set on the service in order to maintain the original client-IP to the backend service?

 

A.

-cka yes

B.

-usip yes

C.

-cip disabled

D.

-useproxyport yes

Correct Answer: B

Free VCE & PDF File for Citrix 1Y0-351 Real Exam

Instant Access to Free VCE Files: CompTIA | VMware | SAP …
Instant Access to Free PDF Files: CompTIA | VMware | SAP …

Comments are closed.