Citrix CCP-N 1Y0-351 Questions & Answers

• Question 141:

  The purpose of pre-fetch in integrated caching is to automatically __________. (Choose the correct option to complete the sentence.)

  A. refresh a cached object before expiring

  B. fetch objects from the forwarding cache before expiring

  C. retrieve all objects on a published website after a policy is applied

  D. retrieve an object in the expression from a website after a policy is applied

  Correct Answer: A

• Question 142:

  Which policy expression must an engineer use to enable compression for javascript files?

  A. HTTP.RES.BODY(0).CONTAINS("javascript")

  B. HTTP.REQ.BODY(0).CONTAINS("javascript")

  C. HTTP.RES.HEADER("Content-Type").CONTAINS("javascript")

  D. HTTP.REQ.HEADER("Content-Type").CONTAINS("javascript")

  Correct Answer: C

• Question 143:

  A network engineer must determine which SSL protocols are enabled on a virtual server named SSL01.

  Which command could the engineer run to see this information?

  A. Show ssl stats

  B. Show server SSL01

  C. Show vServer SSL01

  D. Show ssl vServer SSL01

  Correct Answer: D

• Question 144:

  The security department just conducted a penetration test on the published virtual servers and all of the SSL virtual servers returned the result "Allowed changing to weak certificate standard" in the

  report.

  The reason for this result could be that the network engineer who configured the virtual servers forgot to __________. (Choose the correct option to complete the sentence.)

  A. block TLSv1

  B. apply the SSL policy

  C. configure the HIGH Cipher group only

  D. configure the DEFAULT Cipher group only

  Correct Answer: C

• Question 145:

  Users have reported that they are receiving a confusing error message related to SSL sessions when connecting from older browsers.

  How could the network engineer present this error to users in a customized format?

  A. Enable the SSL v2 protocol.

  B. Set a URL on the backup virtual server.

  C. Add a redirect URL to the virtual server.

  D. Configure SSL v2 Redirection for the virtual server.

  Correct Answer: D

• Question 146:

  Scenario: An engineer has configured an SSL virtual server and has bound a service group of type HTTP containing several servers. The service group is UP but the virtual server is in a DOWN state. The engineer has verified that the SSL feature is enabled.

  What should the engineer do to ensure that the virtual server shows as UP?

  A. Add a monitor that checks for HTTP.

  B. Change the service group to type SSL.

  C. Bind an SSL certificate to the virtual server.

  D. Configure the service group to use port 443.

  E. Change the monitor for a larger time out period.

  Correct Answer: C

• Question 147:

  Scenario: A network engineer needs to generate a certificate on the NetScaler appliance. The environment requires a private key with 4096-bit encryption.

  To generate a new SSL certificate from a NetScaler Appliance, the engineer must first create __________. (Choose the correct option to complete the sentence.)

  A. CSR

  B. DSA key

  C. RSA key

  D. Diffie-Hellman key

  Correct Answer: C

• Question 148:

  What should a network engineer configure to set high availability for a load balanced virtual server?

  A. Session persistence

  B. A backup virtual server

  C. Load balancing policies

  D. Load balancing services

  Correct Answer: B

• Question 149:

  Scenario: A NetScaler engineer is adding a new SSL certificate to a NetScaler device. During the process the engineer receives an error message:

  "Certificate with key size greater than RSA512 or DSA512 bits not supported."

  The same process has been followed previously on the same model of NetScaler successfully.

  What is the likely cause of this error?

  A. The certificate hostname is invalid.

  B. RSA authentication has been added to the VIP.

  C. The NetScaler has not been licensed correctly.

  D. The CSR has not been submitted to the certificate authority.

  Correct Answer: C

• Question 150:

  Scenario: An engineer is configuring services to allow load balancing of backend web servers on the internal network. The engineer bound multiple monitors to the first service, but notices that the service is reporting as DOWN. The monitor threshold default has NOT been changed.

  What could be causing this issue?

  A. The service type is HTTP.

  B. One of the monitors' tests is failing.

  C. Some of the monitors have a higher weight.

  D. The monitors are both reporting an UP status.

  Correct Answer: B