ESTION NO: 118
Which two options could a NetScaler Engineer configure to ensure that a revoked client certificate CANNOT be used for a client certificate authentication? (Choose two.)
A. Server Name Indication (SNI)
B. Certificate Revocation List (CRL)
C. Certificate Signing Request (CSR)
D. Online Certification Status Protocol (OCSP)
Scenario: A NetScaler Engineer is configuring a NetScaler that has three interfaces. The first interface is connected to the internal network, the second interface is connected to the DMZ1 network, and the third interface is connected to the DMZ2-network.
DMZ1 and DMZ2 networks are behind different firewalls, and both firewalls are sending traffic through network address translation (NAT) to the DMZ networks.
The default route is to the gateway on the DMZ1-network.
DMZ1: 10.10.10.0/24 (Gateway: 10.10.10.1)
DMZ2: 10.20.20.0/24 (Gateway: 10.20.20.1)
Internal: 192.168.0.0/24 (Gateway: 192.168.0.1)
Internet traffic reaches the virtual servers located in DMZ1 but NOT the virtual servers located in DMZ2.
Which policy-based route (PBR) would resolve the issue?
A. add ns pbr PBR1 ALLOW -srcIP = 10.20.20.0-10.20.20.255 -destIP != 10.20.20.0-10.20.20.255 nextHop 10.10.10.1 -priority 10
B. add ns pbr PBR1 ALLOW -srcIP != 10.20.20.0-10.20.20.255 -destIP = 10.20.20.0-10.20.20.255 nextHop 10.20.20.1 -priority 10
C. add ns pbr PBR1 ALLOW -srcIP = 10.20.20.0-10.20.20.255 -destIP != 10.20.20.0-10.20.20.255 nextHop 10.20.20.1 -priority 10
D. add ns pbr PBR1 ALLOW -srcIP != 10.20.20.0-10.20.20.255 -destIP != 10.20.20.0-10.20.20.255 nextHop 10.10.10.1 -priority 10
Scenario: A NetScaler Engineer is configuring LACP (Link Aggregation Configuration Protocol) on the NetScaler. The engineer adds interface 10/3 and 10/4 to LA/1 (which already contains interfaces 10/1 and 10/2) and is configured for VLAN 500.
VLAN 100 is bound to interface 10/3 and VLAN 200 is bound to interface 10/4.
VLAN 500 is bound to channel LA/1.
Which VLAN is shown with a "show interface" command for interface 10/3?
A.
B.
C.
D.
Scenario: An engineer is upgrading the NetScaler firmware from version 10.1 to 10.5 and has a high-availability (HA) setup of two NetScaler MPX appliances.
What is the best practice process to upgrade this HA pair?
A. Upgrade the primary unit, test on the new build, and then upgrade the secondary unit.
B. Disable the secondary unit, upgrade the primary, test the new build and then upgrade the other unit.
C. Upgrade the secondary unit, do the failover, test on the new build, and then upgrade the primary unit.
D. Upgrade and restart both units at the same time and test on the new build after they both are running.
Scenario: A NetScaler Engineer is addressing an issue discovered during a vulnerability scan. The security team is requiring that the engineer disable specific SSL ciphers on the SSL VServer. Which two methods could the engineer use to meet this requirement? (Choose two.)
A. Modify the list of ciphers in the Default cipher group.
B. Change the list of bound ciphers on the VServer directly.
C. Enable Cipher Redirect on the VServer and configure OCSP.
D. Disable SSLv2 Redirect on the VServer and update the CRLs.
E. Un-assign the default group, create a custom cipher group and assign it to the VServer.
The Lazy Load action of Front End Optimization (FEO) improves the end-user experience by allowing images to __________. (Choose the correct phrase to complete the sentence.)
A. load faster due to compression
B. load images from the bottom of the page and then upward to the top
C. NOT load until a user scrolls the page to the location where they are displayed
D. load from the local browser cache so it does NOT have to fetch them from the origin server
Scenario: An organization has a fair usage policy that limits each customer to a maximum of five active connections in any given second. A NetScaler Engineer is given the task of implementing the requirements to enforce a policy using the Rate Limiting feature on NetScaler.
Which commands should the network engineer execute to create a proper selector and limit identifier that fulfills the policy requirement?
A. add stream selector API_selector CLIENT.IP.SRC add ns limitIdentifier API_limitidf -threshold 5 -mode CONNECTION -timeslice 1000 selectorName API_selector
B. add stream selector API_selector HTTP.REQ.URL add ns limitIdentifier API_limitidf -threshold 5 -mode CONNECTION -timeslice 1000 selectorName API_selector
C. add stream selector API_selector HTTP.REQ.URL add ns limitidentifier limit_req -mode request_rate -limitType smooth -timeslice 1000 -Threshold 5 selectorName API_selector
D. add stream selector API_selector CLIENT.IP.SRC add ns limitidentifier limit_req -mode request_rate -limitType smooth -timeslice 1000 -Threshold 5 selectorName API_selector
A NetScaler Engineer has created a new monitor using the following command:
add lb monitor mon_inline HTTP-INLINE -respCode 200 302 401 -httpRequest "HEAD /" -interval 10 reverse YES -secure YES
This monitor adds an HTTP-INLINE monitor __________. (Choose the correct phrase to complete the sentence.)
A. whose success criteria is an HTTP response code of 200,302,401
B. whose success criteria is any HTTP response code OTHER than 200,302,401
C. that will probe the Service every 10 seconds over an SSL connection whose success criteria is an HTTP response code of 200,302,401
D. that will probe the Service every 10 seconds over an SSL connection whose success criteria is any HTTP response code OTHER than 200,302,401
A NetScaler Engineer needs an SNMP alert to be sent when CPU utilization is 90% or higher on a
NetScaler instance.
Which two steps must the engineer take to configure the SNMP alert? (Choose two.)
A. Enable SNMP trap logging.
B. Add an SNMP trap destination.
C. Set an SNMP community string.
D. Set the CPU-USAGE alarm thresholds.
E. Add an SNMP manger to poll the instance.
Which command will allow an engineer to change the NetScaler IP (NSIP) from the command-line interface?
A. add ns ip 10.100.10.100 255.255.255.0 -type SNIP
B. add ns ip 10.100.10.100 255.255.255.0 -type NSIP
C. set ns config -ipaddress 10.100.10.100 -netmask 255.255.255.0
D. set ns ip 10.100.10.100 -netmask 255.255.255.0 -mgmtaccess enabled
Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Citrix exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 1Y0-351 exam preparations and Citrix certification application, do not hesitate to visit our Vcedump.com to find your solutions here.