Citrix Citrix Certifications 1Y0-253 Questions & Answers

• Question 161:

  Scenario:Afterarestartofasingle NetScaler, userscomplain thatthelogonpagehaschanged. An administrator

  plans to verify that a startup script exists and contains the necessary command.

  Where can the administrator find the startup script?

  A. jetc

  B. jdev

  C. jnsconfig

  D. jnetscaler

  Correct Answer: C

• Question 162:

  Scenario: An administrator configured link load balancing to balance outbound traffic between two Internet

  Service Providers. When testing the configuration, the administrator notices NetScaler is unable to connect

  to any external addresses.

  Which mode should the administrator verify is enabled?

  A. Layer 3

  B. Layer 2

  C. Use Subnet IP

  D. Use Source IP

  Correct Answer: C

• Question 163:

  When a user launches a published version of Notepad, the user receives the following error message:

  'Cannot connect to the Citrix XenApp server.SSL Error: The proxy denied access to 10; STA393B6A5D1088; 9764757E39D0BEBB0BFC66E9EE146FF4 port 1494.'

  What could be the cause of this error message?

  A. Web Interface CANNOT reach the XML broker.

  B. Web Interface CANNOT reach the XenApp server.

  C. NetScaler Gateway CANNOT reach the XenApp server.

  D. NetScaler Gateway CANNOT reach the Secure Ticket Authority server.

  Correct Answer: D

• Question 164:

  Scenario: A company currently has a working production XenApp and NetScaler environment. An administrator recently implemented a test NetScaler environment and tried to duplicate the NetScaler Gateway configuration from the production environment in the test environment. When the administrator configured the Secure Ticket Authority in the test environment, the Secure Ticket Authority showed a DOWN state. The administrator verified that the Secure Ticket Authority state shows as UP on the production NetScaler. What should the administrator check to troubleshoot the issue?

  A. NetScaler route table

  B. NetScaler Gateway Resources

  C. NetScaler Gateway Session Profiles

  D. Secure Ticket Authority server IP address

  Correct Answer: A

• Question 165:

  Scenario: A number of administrators received the following error when they attempted to connect to the

  Configuration Utility using a secured HTTPS connection:

  The site's security certificate is not trusted!

  One of the administrators installed a certificate from a trusted Certificate Authority on the NetScaler and is

  planning to configure the Configuration Utility to use this certificate.

  Which NetScaler command must the administrator run at the command-line interface to configure the

  Configuration Utility with the new certificate?

  A. set ssl service

  B. set ssl vserver

  C. bind ssl service

  D. bind ssl vserver

  Correct Answer: C

• Question 166:

  Scenario: An administrator plans to troubleshoot connections to the SSL virtual server configured on the

  NetScaler by using the WireShark tool. The administrator created a network trace file.

  What will the administrator need to decrypt the network trace?

  A. NS-root key

  B. NS-serverkey

  C. Private key of the root certification authority

  D. Private key of the certificate that is bound to the virtual server

  Correct Answer: D

• Question 167:

  After restarting one node on a two-node NetScaler cluster, an administrator notices that the node that was

  restarted no longer accepts traffic.

  Which action could the administrator take to resolve this issue?

  A. Run the nsconmsg -g feature -d stats from the shell.

  B. Run the sync cluster files command from the command-line interface.

  C. Replace the cluster license file and restart the NetScaler software only.

  D. Restart the NetScaler software and operating system for the failing node.

  Correct Answer: C

• Question 168:

  Scenario: An administrator configured an LDAP authentication policy and bound it globally. The only system group configured on the Netscaler is NS Admins. After reviewing the security logs, the administrator notices that users in the External Contractors LDAP group are able to log on to NetScaler using SSH; however, members of the External Contractors group are NOT authorized to run any commands. Which action could the administrator take to prevent the members of the External Contractors LDAP Group from logging on to NetScaler using SSH without affecting other users?

  A. Configure an authorization policy that allows logon only by members of the IExternal ContractorsI LDAP Group. Bind the new policy globally.

  B. Specify (memberOf=ICN=External Contractors, CN=Groups, CN=example, CN=comI) as a filter in the properties of the configured LDAP server.

  C. Specify(!(memberOf=ICN=External Contractors, CN=Groups, CN=example, CN=comI)) asa filterinthe properties of the configured LDAP server.

  D. Create a new command policy with a DENY action. Create a System Group named IExternal ContractorsI and assign the new command policy to the External Contractors group.

  Correct Answer: C

• Question 169:

  Which command-line interface command could an administrator use to display communication between the LDAP server and the NetScaler system?

  A. cat jetcjkrb5.conf

  B. cat jetcjkrb5.keytab

  C. cat jtmpjaaad.debug

  D. cat jvarjlogjaaad.debug

  E. tail -f jvarjlogjaaad.debug

  Correct Answer: C

• Question 170:

  An administrator notices that a NetScaler high availability (HA) pair has changed the primary node several

  times in the past few days due to intermittent issues.

  What could the administrator configure to ensure that HA failures are alerted?

  A. SNMP

  B. Syslog

  C. Route Monitors

  D. Failover Interface Set

  Correct Answer: A