Citrix CCP-N 1Y0-351 Questions & Answers

• Question 241:

  A NetScaler Engineer needs to gather information from a NetScaler VPX before allocating the platform license.

  Which shell command could the engineer use to gather the needed information?

  A. lmutil lmhostid -user

  B. lmutil lmhostid -ether

  C. lmutil lmhostid -internet

  D. lmutil lmhostid -hostname

  Correct Answer: B

• Question 242:

  Scenario: Users complain that they are NOT able to connect to a web site using the IP address. The

  relevant portion of the configuration is shown below: add ssl profile srv-web -sessReuse ENABLED -sessTimeout 120 -tls11 DISABLED -tls12 DISABLED strictCAChecks YES

  add service svc-web 192.168.1.3 HTTP 80 add lb vserver srv-web SSL 192.168.1.22 443 -persistenceType NONE -cltTimeout 180 bind lb vserver srv-web svc-web set ssl vserver srv-web -eRSA DISABLED -clientAuth ENABLED -clientCert Optional -tls11 DISABLED

  tls12 DISABLED -SNIEnable ENABLED add ssl policy svc-web -rule true -action NOOP bind ssl vserver srv-web -certkeyName WebCert -SNICert bind ssl vserver srv-web -policyName svc-web -priority 100 What is the likely cause of the connectivity issue?

  A. SSL policy is incorrect.

  B. Client Authentication is enabled.

  C. Server Name Indication is enabled.

  D. Load Balancing persistence is set to NONE.

  Correct Answer: C

• Question 243:

  Which option needs to be set on the service in order to maintain the original client-IP to the backend service?

  A. -cka yes

  B. -usip yes

  C. -cip disabled

  D. -useproxyport yes

  Correct Answer: B

• Question 244:

  A NetScaler Engineer is required to use SNMP v3 on a NetScaler instance and needs to use authentication and encryption for all SNMP v3 communication.

  What are two places where the engineer could set mandatory authentication and encryption? (Choose two.)

  A. SNMP trap properties

  B. SNMP user properties

  C. SNMP group properties

  D. SNMP manager properties

  Correct Answer: BC

• Question 245:

  Which setting would a NetScaler Engineer disable in order to stop the NetScaler from acting as a router for non-NetScaler owned IP addresses or entities?

  A. Layer 2 mode

  B. Layer 3 mode

  C. MAC-based forwarding

  D. Use Subnet IP (USNIP)

  Correct Answer: C

• Question 246:

  What is the purpose of binding Certificate Authority (CA) certificates to a virtual server?

  A. For SSL Offload

  B. To validate the server certificate

  C. For client certificate authentication

  D. To provide intermediate certificates to the client

  Correct Answer: C

• Question 247:

  What does the TCP Buffering feature on the NetScaler accomplish?

  A. It enables the TCP options field syn-cookie.

  B. It optimizes the client and server TCP window size.

  C. It buffers incoming client connections on the NetScaler.

  D. It offloads the server response to the NetScaler before delivering it to the client.

  Correct Answer: D

• Question 248:

  Scenario: A NetScaler Engineer has configured COOKIEINSERT persistence with a timeout value of two minutes on an SSL LBvServer. The idle time requirement for the application itself CANNOT be determined. Users report connections are intermittent. Once a session is disconnected, a user must re-authenticate in order to regain access.

  In order to correct this issue, the engineer should set persistence to __________ with a timeout of __________ minutes. (Choose the correct set of options to complete the sentence.)

  A. SOURCEIP; two

  B. SSLSESSION; ten

  C. SRCIPDESTIP; two

  D. COOKIEINSERT; zero

  Correct Answer: D

• Question 249:

  On a NetScaler system, the __________ timeout value will mark any session that has reached the idle timeout for cleanup. (Choose the correct option to complete the sentence.)

  A. Client

  B. Server

  C. Zombie

  D. NATPCB

  Correct Answer: C

• Question 250:

  Which two content types are, by default, compressible content on the NetScaler? (Choose two.)

  A. zip

  B. png

  C. css

  D. jpeg

  E. html

  Correct Answer: CE