NEW QUESTION 1
Scenario: A Citrix Administrator manages an environment that has three SSL websites, all serving the same content.
www.company.com www.company.net
www.company.org
The administrator would like to consolidate the website into a single, load-balanced SSL virtual server.
Which action can the administrator take to use a single SSL virtual server?

• A. Bind the certificate of each website to a single SSL virtual server.
• B. Bind a multiple Subject Alternative Name (SAN) certificate to a single SSL virtual server.
• C. Bind a Wildcard certificate to a single SSL virtual server.
• D. Bind a Wildcard certificate to a Content Switching virtual server.

Answer: D

NEW QUESTION 2
Scenario: A Citrix Administrator created an SSL virtual server using only the following commands:
add lb vserver sslvserver SSL 10.102.29.133 444 add service sslsvc1 192.168.0.14 SSL 443
add service sslsvc2 192.168.0.15 SSL 443 bind lb vserver sslvserver sslsvc1
bind lb vserver sslvserver sslsvc2
set ssl vserver sslvserver –ssl3 disabled
The SSL virtual server is currently in a DOWN state.
What could be the reason the SSL virtual server is in a down state?

• A. SSLv3 is disabled.
• B. The SSL Certificate is NOT bound to the virtual server.
• C. The SSL services are NOT on the 10.102.29.X network
• D. The virtual server SSL port is NOT set to port 443.

Answer: C

NEW QUESTION 3
What is the effect of the set cmp parameter –cmpBypassPct 70 command if compression is enabled on the NetScaler?

• A. Compression will be bypassed if the NetScaler bandwidth consumption is more than 70%.
• B. Compression will be bypassed if the NetScaler CPU load is 70%.
• C. Compression will be bypassed if the NetScaler bandwidth consumption is less than 70%.
• D. Compression will be bypassed if the NetScaler Memory utilization is 70%.

Answer: B

NEW QUESTION 4
Scenario: A Citrix Administrator has configured a Responder policy as follows:
add responder action Redirect_Act respond with “DIAMETER.NEW_REDIRECT(”aaa://host.example.com”)”
add responder policy Redirect_Pol “diameter.req.avp(264).value.eq(”host1.example.net”)”
Redirect_Act
bind lb vserver vs1 –policyName Redirect_Pol –priority 10 –type REQUEST What will be the effect of this configuration?

• A. Response originated from “host.example.net” will be redirected to “host1.example.com”.
• B. Request originated from “host.example.net” will be redirected to “host1.example.com”.
• C. Response originated from “host1.example.net” will be redirected to “host.example.com”.
• D. Request originated from “host1.example.net” will be redirected to “host.example.com”.

Answer: B

NEW QUESTION 5
View the Exhibit.

A Citrix Administrator has noticed that the users trying to access https://mycitrix.training.lab/exchange2021/owa are redirected to CAS_vserver_www instead of CAS_vserver_owa.
Click on the ‘Exhibit’ button to view the screenshot of the command-line interface. What should the administrator change to resolve this issue?

• A. Unbind cs vserver CAS_vserver_cs –lbvserver CAS_vserver_www
• B. Bind cs vserver CAS_vserver_cs –policyName CAS_policy_cs_owa –priority 120
• C. Bind cs vserver CAS_vserver_cs –policyName CAS_policy_cs_owa –priority 80
• D. Add cs policy CAS_policy_cs_owa –rule “HTTP.REQ.URL.SET_TEXT_MODE(IGNORECASE).CONTAINS(”/owa”)” –actionCAS_action_cs_owa

Answer: A

NEW QUESTION 6
Scenario: A Citrix Administrator has a NetScaler SDX appliance with several instances configured. The administrator needs one instance with two interfaces connected to forward packets that are NOT destined for its MAC address. Hence, the administrator has enabled Layer 2 mode. After enabling Layer 2 mode, the administrator found the interface status going up and down.
What can the administrator perform to resolve this issue?

• A. Disable Layer 2 mode on a NetScaler instance.
• B. Enable tagging on all interfaces.
• C. Enable Layer 3 mode along with Layer 2 mode.
• D. Enable MAC-based forwarding mode.

Answer: B

NEW QUESTION 7
Scenario: A Citrix Administrator is running applications on thousands of load-balanced backend servers in a large infrastructure. It is difficult to track and troubleshoot problems due to the large volume of traffic received.
Which feature of NetScaler Management and Analytics System (NetScaler MAS) can the administrator configure to monitor and troubleshoot in detail for an environment of this size?

• A. AppFlow Analytics
• B. Advanced Analytics with Telemetry Node installed
• C. Application Performance Analytics
• D. Application Security Analytics

Answer: B

NEW QUESTION 8
Scenario: A Citrix Administrator observes that when the client gets redirected to the URL www.citrix.com/owa/search?q-userbame, an HTTP 503 response is received from the Content Switching vServer.
The relevant configuration is as follows:

How will the administrator correct the issue?

• A. Unbind CS_POL_2
• B. Unbind CS_POL_1
• C. Bind Policy Unbind CS_POL_2 with priority 90
• D. Bind Policy Unbind CS_POL_3 with priority 90

Answer: C

NEW QUESTION 9
Click on the ‘Exhibit’ button to view the screenshot of the command-line interface.

How will the HTTP request “http://10.107.149.233/url1” be redirected based on the screenshot?

• A. The request will be dropped at CS vServer.
• B. The request will be sent to LB_vserver2.
• C. The request will be sent to lb_vsrv_www.
• D. The request will be sent to LB_vserver1.

Answer: A

NEW QUESTION 10
Which three statements are true when comparing a Simple Access Control List (ACL) to an Extended ACL? (Choose three.)

• A. Simple ACLs can be modified.
• B. Extended ACLs have priorities.
• C. Simple ACLs apply first.
• D. Extended ACLs apply first.
• E. Simple ACLs are based on the Source IP address only.
• F. Simple ACLs can bridge traffic.
• G. Simple ACLs can be based on the Source and Destination IP address.

Answer: BCE

NEW QUESTION 11
View the Exhibit.

A Citrix Administrator has implemented the HTTP Callout.
Click on the ‘Exhibit’ button to view the screenshot of the command-line interface.
Which part of the configuration is responsible for triggering the call to HTTP Callout server?

• A. –parameters cip(CLIENT.IP.SRC)
• B. sys.http_callout(myCallout1)
• C. –urlStemExpr “”/cgi-bin/check_clnt_from_database.pl”
• D. –headers Request(“Callout Request”)

Answer: D

NEW QUESTION 12
Scenario: A NetScaler appliance is having intermittent issues. A Citrix Administrator is unable to identify the root cause and fix them. The administrator opened a Support ticket and the Engineer assigned to the case requested all the logs and configuration information from the NetScaler.
Which technical support tool can the administrator use to gather all the information on the NetScaler to send to the Support Engineer?

• A. Batch Configuration
• B. Start New Trace
• C. Get Back Trace
• D. Generate Support File

Answer: C

NEW QUESTION 13
Scenario: An organization has a ‘bring your own device’ (BYOD) policy, so it is NOT feasible to set up proxy settings on each device in the network.
They need to implement NetScaler Secure Web Gateway to intercept all the traffic to block access to URLs serving harmful/insecure content or the URLs that are identified as social networking sites, career, and job search portals.
Which proxy mode of the Secure Web Gateway should be used in this case?

• A. Transparent
• B. Explicit
• C. Advanced
• D. HTTP

Answer: A

NEW QUESTION 14
Scenario: A Citrix Administrator is executing the following commands on the NetScaler:
add policy dataset Admin_group ipv4
bind policy dataset Admin_group 192.168.149.10 –index 11 bind policy dataset Admin_group 192.168.149.39 –index 12 bind policy dataset Admin_group 192.168.149.49 –index 13 add responder policy POL_1
“!(CLIENT.IP.SRC.TYPECAST_TEXT_T.CONTAINS_ANY(”Admin_group”))” RESET
bind lb vserver ln_vsrv_www –policyName POL_1 –priority 100 –gotoPriorityExpression END –type REQUEST
What will be the effect of these commands?

• A. All the traffic from users with a source IP address of 192.168.149.10, 192.168.149.39, or 192.168.149.49 will be blocked through the NetScaler.
• B. Only the users with a source IP address of 192.168.149.10, 192.168.149.39, or 192.168.149.49 will be allowed to connect to vserver lb_vsrv_www.
• C. Only the users with a source IP address of 192.168.149.10, 192.168.149.39, or 192.168.149.49 will be blocked when attempting to connect to vserver lb_vsrv_www.
• D. Only the users with a source IP address of 192.168.149.10 or 192.168.149.39 will be allowed to connect to the virtual server.

Answer: B

NEW QUESTION 15
A Citrix Administrator would like to configure the network in a way that will allow the traffic requests coming from the client to pass through the NetScaler, but the responses from the back-end resources will be sent directly to the client bypassing the NetScaler.
Which feature can the administrator use for this configuration?

• A. Policy-based Routing
• B. Use Source IP (USIP) address
• C. Direct Server Return (DSR)
• D. SmartAccess

Answer: D

NEW QUESTION 16
Scenario: A Load Balancing virtual server (lb_vsrv_www) is configured to load balance service_1 and service_2. A Citrix Administrator needs to bind a content filter policy to the virtual server, such that if the user tries to access http://xenapp.citrix.com, then the request should go to service_1.
Which policy can the administrator use in this scenario?

• A. add filter action Redirect_Service_1_Act redirect Service_1add filter policy Redirect_Service_1_Pol -rule “REQ.HTTP.HEADER HOSTANME CONTAINS xenapp.citrix.com” reqAction Redirect_Service_1_Act
• B. add filter action Redirect_Service_1_Act forward Service_1add filter policy Redirect_Service_1_Pol -rule “REQ.HTTP.HEADER HOSTANME CONTAINS xenapp.citrix.com” reqAction Redirect_Service_1_Act
• C. add filter action Redirect_Service_1_Act forward Service_1add filter policy Redirect_Service_1_Pol -rule “REQ.HTTP.HEADER HOSTANME CONTAINS xenapp.citrix.com”
• D. add filter action Redirect_Service_1_Act respond Service_1add filter policy Redirect_Service_1_Pol -rule “REQ.HTTP.HEADER HOSTANME CONTAINS xenapp.citrix.com”

Answer: A

NEW QUESTION 17
What is a recommended practice for managing a NetScaler high availability (HA) pair to ensure that management changes are always made on the Primary NetScaler?

• A. Connect to both NetScalers to see which one is the Primary.
• B. Enable Management Access to a SNIP.
• C. Enable Management Access on the Cluster IP (CLIP) address.
• D. Connect to the shared HA NSIP.

Answer: D

NEW QUESTION 18
Scenario: External users are currently experiencing delays while accessing XenApp and XenDesktop through the NetScaler. A Citrix Administrator needs to monitor the ICA connections to gather the performance information from the NetScaler Management and Analytics System (MAS).
Which two tools can the administrator use to gather information about WAN Latency, DC Latency and Host Delay? (Choose two.)

• A. HDX Insight
• B. Gateway Insight
• C. Web Insight
• D. TCP Insight

Answer: AC