Skip to main content

1Y0-351 Online Exam

Citrix NetScaler 10.5 Essentials and Networking

285 questions available ยท Page 1 of 29

View study plans
Question 1 Multiple choice

Which two of the following settings could be configured using a TCP profile that is bound to a service? (Choose two.)

  1. A

    TCP buffer size

  2. B

    Window scaling

  3. C

    TCP Server time-out values

  4. D

    Source IP for specific subnet

  5. E

    Allowed bandwidth throughput

  6. F

    Number of max concurrent TCP connections

Show answer and explanation

Correct answers: A, B

Explanation
Question 2 Multiple choice

Scenario: A pair of NetScaler devices have recently been installed into the corporate DMZ. The Netscalers have been installed in two-arm mode, with two interfaces in a Internet-facing VLAN and two interfaces in the internal VLAN. A private management subnet also exists.

The NetScaler engineer would like to secure and restrict communication between the management subnet and the SNIP address on that subnet.

Which two actions could the engineer take to help with these goals? (Choose two.)

  1. A

    Apply an ACL on the specified SNIP.

  2. B

    Remove the ACL list to the internal VLAN.

  3. C

    Remove the NSIP address from the Netscaler.

  4. D

    Configure the SNIP with the -gui SECUREONLY option.

Show answer and explanation

Correct answers: A, D

Explanation
Question 3 Multiple choice

Scenario: A network engineer is going to roll out an upgrade from a 9.x version on a standalone

NetScaler appliance using the command-line interface.

Which two items does the engineer need to download before proceeding with the upgrade? (Choose two.)

  1. A

    SSL Certificates Files

  2. B

    NetScaler Firmware File

  3. C

    NetScaler Configuration file

  4. D

    NetScaler Documentation File

Show answer and explanation

Correct answers: B, D

Question 4 Multiple choice

A NetScaler engineer generates a techsupport archive to be sent to Technical Support.

Which three of the following pieces of information will be included in the archive file? (Choose three.)

  1. A

    Model Number

  2. B

    SSL Private Keys

  3. C

    Old Configuration Files

  4. D

    Hardware Boot sequence

  5. E

    Webpage Customizations

  6. F

    Certificate Revocation List

Show answer and explanation

Correct answers: A, C, D

Question 5 Multiple choice

When configuring NetScaler authentication to access a web site, which two things should a network engineer verify in the environment? (Choose two.)

  1. A

    AAA is enabled.

  2. B

    One DNS server exists.

  3. C

    A Keytab file is available.

  4. D

    An authentication virtual server exists.

  5. E

    A traffic management virtual server exists.

Show answer and explanation

Correct answers: A, D

Question 6 Multiple choice

When binding a certificate to a virtual server, which two certificate formats are supported by NetScaler? (Choose two.)

  1. A

    P7B

  2. B

    PFX

  3. C

    PEM

  4. D

    DER

Show answer and explanation

Correct answers: C, D

Question 7 Multiple choice

A security test has been completed on an SSL offload implementation and it has been determined that the certificate key length is too short and must be increased.

Which two steps must the network engineer complete to resolve this? (Choose two.)

  1. A

    Bind the certificate to an SSL service group.

  2. B

    Bind the certificate to an SSL Offload virtual server.

  3. C

    Add a new SSL policy to the SSL offload virtual server.

  4. D

    Use the "Client certificate wizard" to generate a CSR, request a certificate and import.

  5. E

    Use the "Server certificate wizard" to generate a CSR, request a certificate and import.

Show answer and explanation

Correct answers: B, E

Question 8 Multiple choice

Scenario: A network engineer configured a new NetScaler MPX appliance without any VLANs and with a single interface connected to the network. The engineer has not completed any other configurations. The interface is then accidentally disabled and contact is lost with the appliance.

Which two actions can the network engineer take to restore communications to the appliance? (Choose two.)

  1. A

    Connect to the SNIP instead of the NSIP.

  2. B

    Connect another of the unused interfaces.

  3. C

    Use the serial port to connect and then bring the disabled interface online.

  4. D

    Connect a crossover cable to the port that has been disabled and connect to the NSIP.

Show answer and explanation

Correct answers: B, C

Question 9 Multiple choice

When configuring an advanced HTTP callout based on attributes, what are two valid parameters? (Choose two.)

  1. A

    SSL cipher type

  2. B

    Down state flush

  3. C

    Gateway address

  4. D

    IP address and port

  5. E

    URL stem expression

Show answer and explanation

Correct answers: D, E

Question 10 Multiple choice

Scenario: The NetScaler has been connected to two external networks provided by different Internet Service Providers (ISPs). Dynamic routing is not enabled. Traffic is expected to use the first ISP (through the 10.50.1.1 router) if possible and the second, slower ISP (through the 10.51.1.1 router) only if the Primary ISP fails.

Which two commands could the network engineer execute to configure the routes? (Choose two.)

  1. A

    add route 0.0.0.0 0.0.0.0 10.51.1.1 -cost 10 -monitor arp

  2. B

    add route 0.0.0.0 0.0.0.0 10.50.1.1 -cost 5 -monitor PING

  3. C

    add route 0.0.0.0 0.0.0.0 10.50.1.1 -cost 15 -msr ENABLED

  4. D

    add route 0.0.0.0 0.0.0.0 10.51.1.1 -cost 3 -monitor PING-DEFAULT

Show answer and explanation

Correct answers: A, B