Citrix CCP-N 1Y0-351 Questions & Answers

• Question 221:

  On which two objects could a NetScaler Engineer bind cipher groups? (Choose two.)

  A. Server

  B. Service

  C. SSL policy

  D. SSL profile

  E. Virtual server

  Correct Answer: BE

• Question 222:

  Which two NetScaler command-line interface commands could an engineer execute to change TCP Window Scaling settings on the NetScaler? (Choose two.)

  A. set netProfile

  B. add ns tcpProfile

  C. unset ns tcpParam

  D. set ns tcpbufParam

  E. add autoscale profile

  Correct Answer: BC

• Question 223:

  Which troubleshooting tool will show policy hits and verify that a policy expression is being invoked?

  A. nspepi

  B. nsapimgr

  C. nstrace.sh

  D. nsconmsg

  Correct Answer: D

• Question 224:

  Which NetScaler caching type requires proxy configuration on all client devices?

  A. SOCKS

  B. REVERSE

  C. FORWARD

  D. TRANSPARENT

  Correct Answer: C

• Question 225:

  Scenario: A client connecting to an SSL virtual server receives the following error: "Invalid Server Certificate The server certificate is invalid. Do you wish to accept this certificate and connect to the server anyway?"

  What is a possible cause of this error message?

  A. The private key is NOT password-protected.

  B. The certificate key pair is password-protected.

  C. The intermediate CA certificate is NOT linked to the server certificate.

  D. Certificate Revocation Lists (CRLs) have NOT been defined on the NetScaler.

  Correct Answer: C

• Question 226:

  What are two benefits of using Link Aggregation Control Protocol (LACP)? (Choose two.)

  A. Redundancy

  B. Compression

  C. Reduce TCP latency

  D. Increased throughput

  E. Automatic configuration of TCP windows

  Correct Answer: AD

• Question 227:

  A NetScaler Engineer created an HTTP service and did NOT bind any monitors to the service.

  Which monitor will the NetScaler automatically bind to the HTTP service?

  A. tcp

  B. http

  C. tcp-ecv

  D. http-ecv

  E. tcp-default

  F. ping-default

  Correct Answer: E

• Question 228:

  Scenario: A NetScaler Engineer is using the following policy to forward traffic when performing content

  switching:

  add cs action cs1_act -targetVserverExpr "HTTP.REQ.HOSTNAME"

  add cs policy cs1_switch_policy -rule true -action cs1_act

  bind cs vserver CS1-VIP -policyName cs1_switch_policy -priority 10

  In order to make sure the policy works correctly, the engineer must name the __________ to match the

  hostname. (Choose the correct option to complete the sentence.)

  A. load-balancing servers

  B. load-balancing services

  C. load-balancing virtual servers

  D. content-switching virtual server

  Correct Answer: C

• Question 229:

  Scenario: A NetScaler Engineer has created a local account for a user according to the below

  configuration:

  add system user NSUser userpassword -timeout 900

  add system group "NetScaler users" -timeout 900

  add system cmdPolicy netscaler-users ALLOW

  "(^man.*)|(^show\\s+(?!system)(?!configstatus)(?!ns ns\\.conf)(?!ns savedconfig)(?!ns runningConfig)(?

  !gslb runningConfig)(?!audit messages)(?!techsupport).*)|(^stat.*)"

  bind system group "NetScaler users" -userName NSUser

  bind system group "NetScaler users" -policyName netscaler-users 100

  The user is able to log on but is NOT able to execute certain commands. The engineer goes back and

  looks at the logs, and the following is displayed:

  Oct 6 13:34:15 192.168.10.50 10/06/2014:13:34:15 GMT ns1 0-PPE-0 : CLI

  CMD_EXECUTED 4303 0 : User NSUser - Remote_ip 192.168.10.10 - Command "show ns

  runningConfig" - Status "ERROR: Not authorized to execute this command"

  Why is the command NOT working for the user?

  A. cmdPolicy is NOT configured to allow the command

  B. cmdPolicy should be set to DENY, instead of ALLOW

  C. The user should be bound to the cmdPolicy netscaler-users

  D. The priority of the cmdPolicy bound to the group "NetScaler users" should be higher

  Correct Answer: A

• Question 230:

  A NetScaler Engineer has been given the task of protecting an internal web site by requiring users to enter their credentials.

  Which feature should the engineer configure?

  A. AAA

  B. SSL Offloading

  C. Content Filtering

  D. Application Firewall

  Correct Answer: D