Citrix CCP-N 1Y0-351 Questions & Answers

• Question 251:

  In which two places could a NetScaler Engineer enable TCP Buffering? (Choose two.)

  A. Service

  B. Globally

  C. HTTP profile

  D. Virtual server

  Correct Answer: AB

• Question 252:

  Scenario: A website that provides hotel bookings lists each hotel through their membership number on the site URL. For example, the Martello Tower member ID is 6754 and its web presence is at http:// www.hoteltestwebsite.com/hotels/6754/index.html.

  There are 20,000 hotels in the database of the website. The website business owner no longer wants to display the hotel sites for hotel numbers 1-10000, inclusive. A NetScaler Engineer must configure an appropriate responder page to indicate that these sites are unavailable.

  Which expression will meet the requirements of the business owner?

  A. HTTP.REQ.URL.PATH.GET(2).TYPECAST_NUM_T(DECIMAL).BETWEEN(0, 10000)

  B. HTTP.REQ.URL.AFTER_STR("hotels").TYPECAST_NUM_T(DECIMAL).BETWEEN(0, 10000)

  C. HTTP.REQ.URL.BEFORE_STR("index.html").TYPECAST_NUM_T(DECIMAL).BETWEEN(0, 10000)

  D. HTTP.REQ.URL.PATH.GET(1).TYPECAST_NUM_T(DECIMAL).GT(0) andand HTTP.REQ.URL.PATH.GET(1).TYPECAST_NUM_T(DECIMAL).LT(10000)

  Correct Answer: A

• Question 253:

  Which two encryption algorithms are supported on the NetScaler to store the encrypted SSL private key with a password? (Choose two.)

  A. AES

  B. RC4

  C. DES

  D. DES3

  Correct Answer: CD

• Question 254:

  On a load-balancing virtual server with multiple bound services, Redirect URL will be invoked when __________. (Choose the correct phrase to complete the sentence.)

  A. a backup virtual server has been configured

  B. Health Based Spillover has been configured

  C. one of the bound services is marked as DOWN

  D. the load-balancing virtual server is marked as DOWN

  Correct Answer: D

• Question 255:

  Scenario: A NetScaler Engineer connected a new NetScaler MPX appliance to the network. However, some of the interfaces were blocked on the uplink switch. The engineer needs to perform a network packet trace on the NetScaler appliance. For troubleshooting purposes, the engineer needs to separate trace files for each interface. The engineer executed the following command from the NetScaler CLI:

  start nstrace -perNIC ENABLED

  However, NetScaler created a single trace file.

  What should the engineer do to produce separate trace files for each interface?

  A. Specify the nodes parameter.

  B. Use the nsconmsg command.

  C. Specify the tcpdump parameter.

  D. Use the nstracemerge.sh command.

  Correct Answer: C

• Question 256:

  Scenario: A NetScaler Engineer is working with a NetScaler appliance that has two network interface cards (NICs). The first NIC is placed on the DMZ network and the second NIC is on the internal network. The default route is configured to the gateway on the internal network. A virtual server is configured on the DMZ-network and the firewall on the DMZ is using network address translation (NAT) to allow external traffic to the virtual server.

  When a user from the Internet attempts to connect to the NAT'd external address, the session never establishes. The engineer performs an nstrace and sees that the user's traffic hits the NetScaler. The engineer then discovers that the problem is an asymmetrical packet flow.

  Which two settings could the engineer configure to resolve the issue? (Choose two.)

  A. Link load balancing (LLB)

  B. Policy-based routing (PBR)

  C. Extended access list (ACL)

  D. MAC-based forwarding (MBF)

  E. Reverse network address translation (RNAT)

  Correct Answer: BD

• Question 257:

  Scenario: A NetScaler Engineer is asked to interpret the following configuration: add audit syslogAction syslog_srv_1 192.168.0.1 -logLevel ERROR add audit syslogAction syslog_srv_2 192.168.0.2 -logLevel WARNING add audit syslogAction syslog_srv_3 192.168.0.3 -logLevel CRITICAL add audit syslogAction syslog_srv_4 192.168.0.4 -logLevel ALERT add audit syslogPolicy audit_pol_1 ns_true syslog_srv_1 add audit syslogPolicy audit_pol_2 ns_true syslog_srv_2 add audit syslogPolicy audit_pol_3 ns_true syslog_srv_3 add audit syslogPolicy audit_pol_4 ns_true syslog_srv_4 bind system global audit_pol_1 -priority 100 bind system global audit_pol_2 -priority 100 bind system global audit_pol_3 -priority 100 bind system global audit_pol_4 -priority 100 add audit messageaction log-act1 CRITICAL '"Client:"+CLIENT.IP.SRC+" accessed "+HTTP.REQ.URL'

  bypassSafetyCheck YES add responder policy RP_pol http.REQ.IS_VALID NOOP -logAction log-act1 bind responder global RP_pol 100 END -type REQ_OVERRIDE Which syslog server will receive log information?

  A. syslog_srv_3

  B. syslog_srv_4

  C. syslog_srv_1

  D. syslog_srv_2

  Correct Answer: A

• Question 258:

  When creating a link aggregation channel on the NetScaler, the "-throughput" option sets the __________. (Choose the correct option to complete the sentence.)

  A. max interface speed of the channel

  B. interface threshold for channel failover

  C. interface bandwidth limit for the channel

  D. interface speed of each member of the channel

  Correct Answer: B

• Question 259:

  What should an engineer configure in an environment where two NetScaler appliances are configured in high availability (HA) mode to prevent both nodes from reporting a state of NOT_UP at the same time?

  A. Fail-Safe Mode

  B. Route Monitors

  C. Command Propagation

  D. Configuration Synchronization

  Correct Answer: A

• Question 260:

  Server Name Indication (SNI) is required when __________. (Choose the correct option to complete the sentence.)

  A. TLS 1.1/1.2 is enabled exclusively

  B. a SAN extension certificate is used

  C. multiple certificates are used on multiple domains on the same VServer

  D. configuring a content switching SSL VServer with a single domain certificate

  Correct Answer: C