Professional Documents
Culture Documents
QUESTION NO: 2
What are the supported protocols for management authentication?
A. LOCAL, LDAP, and SAML
B. RADIUS, LDAP and TACACS+
C. CERTIFICATE, LDAP and SAML
D. RADIUS, TACACS+ and CERTIFICATE
Answer: B
Explanation:
QUESTION NO: 3
Scenario: A NetScaler Engineer has discovered that the object home.php is NOT found in the
cache on the system.
Below is the relevant configuration:
add cache contentGroup cache_content_group_1 -relExpiry 0
add cache policy cache_pol_1 -rule "http.REQ.URL.CONTAINS(\"home.php\")" -action
MAY_CACHE -storeInGroup cache_content_group_1
add cache policy cache_pol_2 -rule "http.REQ.METHOD.EQ(\"GET\")" -action NOCACHE
"Pass Any Exam. Any Time." - www.actualtests.com
QUESTION NO: 4
Which two authentication types on the NetScaler support password changes? (Choose two.)
A. TACACS+
B. LDAP (TLS)
C. LDAP (SSL)
D. RADIUS (PAP)
E. LDAP (PLAINTEXT)
F. RADIUS (MSCHAPv2)
Answer: B,C
Explanation:
QUESTION NO: 5
Scenario: A NetScaler Engineer is viewing Authentication, Authorization and Access (AAA) events
on the NetScaler appliance to determine why a user is unable to log on. The events below have
been logged during this timeframe:
Fri Oct 17 18:17:16 2014
/usr/home/build/rs_80_48/usr.src/usr.bin/nsaaad/../../netscaler/aaad/ldap_drv.c[40\]:
start_ldap_auth attempting to
auth scottli @ 10.12.33.216
QUESTION NO: 6
A company has an external-facing web application that requires end-to-end encryption and Layer7 functionality.
Which protocol type would an engineer choose for the virtual server and service?
A. SSL
B. SSL_TCP
C. SSL_PUSH
D. SSL_BRIDGE
Answer: B
Explanation:
QUESTION NO: 7
Scenario: A NetScaler Engineer has enabled the HTTP Compression feature on an existing
"Pass Any Exam. Any Time." - www.actualtests.com
QUESTION NO: 8
Which two of the listed statements are true about Access Control Lists (ACLs) on the NetScaler?
(Choose two.)
A. Extended ACLs may BRIDGE traffic.
B. Simple ACLs are bound on ALL interfaces.
C. Extended ACLs are evaluated after creation.
D. Simple ACLs are processed after Extended ACLs.
Answer: A,B
Explanation:
QUESTION NO: 9
What is the purpose of the SSL Certificate Authority (CA) root certificate during an SSL
connection?
A. SSL Cipher Exchange
B. Session Key Exchange
C. Pre Shared Master Secret Generation
D. Server Certificate Signature Verification
Answer: A
Explanation:
QUESTION NO: 11
Scenario: A NetScaler Engineer has been tasked with reconfiguring an existing NetScaler
deployment. The engineer is currently running a high-availability (HA) pair of NetScaler 10.5
appliances, but the Vice President of IT has requested a more efficient way of preserving and
balancing network resources and throughput while having a single point of management for the
NetScaler appliances.
What should the engineer configure to satisfy the requirements outlined by the Vice President of
IT?
A. Switch from traditional HA to -INC mode HA.
B. Break the HA pair and configure clustering instead.
C. Break the HA pair and configure three standalone NetScaler nodes.
D. Leave HA enabled and increase bandwidth to both NetScaler nodes.
Answer: B
Explanation:
QUESTION NO: 12
A NetScaler Engineer plans to deploy a third-party application that will perform scheduled
configuration auditing by using NITRO API with a REST interface.
Which management protocol should the engineer enable to allow NITRO API access?
A. SSH
"Pass Any Exam. Any Time." - www.actualtests.com
QUESTION NO: 13
Traffic to which destination is sourced from the NetScaler IP (NSIP) by default?
A. NTP servers
B. Clients on the Internet
C. Load-balanced web services
D. Load-balanced authentication services
Answer: A
Explanation:
QUESTION NO: 14
Scenario: A NetScaler Engineer configures COOKIEINSERT persistence method for an HTTP
VServer named 'myApp'. Many clients do NOT allow the persistence cookie to be set and
application sessions fail as a result. All clients are behind a network address translation (NAT)
gateway, which will insert the client IP address into an HTTP header called X-Forwarded-For.
Which command could the engineer execute to provide persistence for clients while still
distributing the requests across the bound services?
A. set lb vserver myApp -persistenceType SOURCEIP
B. set lb vserver myApp -persistenceType NONE -lbmethod SRCIPDESTIPHASH
C. set lb vserver myApp -persistenceType COOKIEINSERT -timeout 0 -cookieName XForwarded-For
D. set lb vserver myApp -persistenceType NONE -lb method TOKEN -rule
"HTTP.REQ.HEADER(\"X-Forwarded-For\").VALUE(0)
Answer: D
Explanation:
QUESTION NO: 16
Which service setting would a NetScaler Engineer use in the command-line interface to limit
connections to server resources?
A. -maxReq
B. -maxClient
C. -monThreshold
D. -maxBandwidth
Answer: B
Explanation:
QUESTION NO: 17
Which statement is true about interface link-state on the NetScaler?
A. Interface link-state is controlled by ifconfig in BSD.
B. Interface link-state is dependent on the HAMON setting.
C. Interface link-state CANNOT be brought down from the NetScaler.
D. Interface link-state on both appliances is unaffected by the force failover command.
Answer: C
Explanation:
"Pass Any Exam. Any Time." - www.actualtests.com
QUESTION NO: 18
In order to configure integrated cache, a NetScaler Engineer would need to reboot the NetScaler
when the integrated caching feature is __________ and cache memory limit is set to __________.
(Choose the correct set of options to complete the sentence.)
A. enabled; zero
B. disabled; zero
C. enabled; non-zero
D. disabled; non-zero
Answer: A
Explanation:
QUESTION NO: 19
Which two certificate formats are supported when creating a certificate key pair on the NetScaler?
(Choose two.)
A. PEM
B. DER
C. PKCS7
D. PKCS12
Answer: A,B
Explanation:
QUESTION NO: 20
As a result of connecting two NetScaler interfaces in the same L2 broadcast domain/VLAN (unless
link aggregation is configured), the NetScaler will __________. (Choose the correct option to
complete the sentence.)
A. restart
B. disable one interface
C. cause a network loop
D. disable both interfaces
"Pass Any Exam. Any Time." - www.actualtests.com
10
QUESTION NO: 21
Scenario: Users in an organization need to access several web applications daily. Management
has asked a NetScaler Engineer to reduce the amount of times users have to enter credentials
when accessing web applications.
What should the engineer configure to meet this requirement?
A. A load-balancing VServer and an authorization policy
B. An authentication VServer and an authorization policy
C. An authentication VServer and an authentication policy
D. A content switching VServer and an authentication profile
Answer: C
Explanation:
QUESTION NO: 22
The upgrade script copies the updated NetScaler kernel file to the __________ NetScaler
directory. (Choose the correct option to complete the sentence.)
A. /var
B. /flash
C. /nsconfig
D. /flash/boot
Answer: B
Explanation:
QUESTION NO: 23
Which setting must an engineer ensure is configured before a Subnet IP (SNIP) could be used to
communicate with servers on the same network segment?
11
QUESTION NO: 24
Which tool could a NetScaler Engineer use to monitor client-side rendering times for a Web
application that is load-balanced by NetScaler?
A. Tcpdump
B. Insight Center
C. Command Center
D. NetScaler Dashboard
Answer: A
Explanation:
QUESTION NO: 25
What should a NetScaler Engineer configure to create load-balancing virtual servers and services
on the same VLAN with overlapping IP addresses?
A. Listen policies
B. Traffic domains
C. Dynamic routing
D. Policy-based routing
Answer: B
Explanation:
QUESTION NO: 26
Scenario: NetScaler is configured with a Subnet IP (SNIP) 192.168.1.10/24 on VLAN 1 and a
SNIP 172.168.1.50/24 on VLAN 100.
12
QUESTION NO: 27
Which outcome does the minify JavaScript option of the Front End Optimization (FEO) feature
provide?
A. It will replace characters with shorter names.
B. It will change all uppercase letters to lowercase.
C. It will remove all comments from the JavaScript.
D. It will compress JavaScript with the GZIP algorithm.
Answer: C
Explanation:
QUESTION NO: 28
Which feature could a Network Engineer configure in order to restrict client connections to a
specific bandwidth limit?
A. Spillover
B. Rate Limiting
C. SureConnect
"Pass Any Exam. Any Time." - www.actualtests.com
13
QUESTION NO: 29
Scenario: A web server needs to be load-balanced but the content for the web page is retrieved
from different server pools. There is a server pool for images, another for text files, and another for
documents.
Which NetScaler feature would allow a user to retrieve content from all pools through a single IP
address by leveraging the ability of NetScaler to forward traffic based on the incoming request?
A. Load Balancing
B. Content Filtering
C. Content Switching
D. Global Server Load Balancing
Answer: A
Explanation:
QUESTION NO: 30
Server Name Indication (SNI) is required when __________. (Choose the correct option to
complete the sentence.)
A. TLS 1.1/1.2 is enabled exclusively
B. a SAN extension certificate is used
C. multiple certificates are used on multiple domains on the same VServer
D. configuring a content switching SSL VServer with a single domain certificate
Answer: C
Explanation:
QUESTION NO: 31
What should an engineer configure in an environment where two NetScaler appliances are
"Pass Any Exam. Any Time." - www.actualtests.com
14
QUESTION NO: 32
When creating a link aggregation channel on the NetScaler, the "-throughput" option sets the
__________. (Choose the correct option to complete the sentence.)
A. max interface speed of the channel
B. interface threshold for channel failover
C. interface bandwidth limit for the channel
D. interface speed of each member of the channel
Answer: B
Explanation:
QUESTION NO: 33
Scenario: A NetScaler Engineer is asked to interpret the following configuration:
add audit syslogAction syslog_srv_1 192.168.0.1 -logLevel ERROR
add audit syslogAction syslog_srv_2 192.168.0.2 -logLevel WARNING
add audit syslogAction syslog_srv_3 192.168.0.3 -logLevel CRITICAL
add audit syslogAction syslog_srv_4 192.168.0.4 -logLevel ALERT
add audit syslogPolicy audit_pol_1 ns_true syslog_srv_1
add audit syslogPolicy audit_pol_2 ns_true syslog_srv_2
add audit syslogPolicy audit_pol_3 ns_true syslog_srv_3
"Pass Any Exam. Any Time." - www.actualtests.com
15
QUESTION NO: 34
Scenario: A NetScaler Engineer is working with a NetScaler appliance that has two network
interface cards (NICs). The first NIC is placed on the DMZ network and the second NIC is on the
internal network. The default route is configured to the gateway on the internal network. A virtual
server is configured on the DMZ-network and the firewall on the DMZ is using network address
translation (NAT) to allow external traffic to the virtual server.
When a user from the Internet attempts to connect to the NAT'd external address, the session
never establishes. The engineer performs an nstrace and sees that the user's traffic hits the
NetScaler. The engineer then discovers that the problem is an asymmetrical packet flow.
Which two settings could the engineer configure to resolve the issue? (Choose two.)
16
QUESTION NO: 35
Scenario: A NetScaler Engineer connected a new NetScaler MPX appliance to the network.
However, some of the interfaces were blocked on the uplink switch. The engineer needs to
perform a network packet trace on the NetScaler appliance. For troubleshooting purposes, the
engineer needs to separate trace files for each interface. The engineer executed the following
command from the NetScaler CLI:
start nstrace -perNIC ENABLED
However, NetScaler created a single trace file.
What should the engineer do to produce separate trace files for each interface?
A. Specify the nodes parameter.
B. Use the nsconmsg command.
C. Specify the tcpdump parameter.
D. Use the nstracemerge.sh command.
Answer: C
Explanation:
QUESTION NO: 36
On a load-balancing virtual server with multiple bound services, Redirect URL will be invoked
when __________. (Choose the correct phrase to complete the sentence.)
A. a backup virtual server has been configured
B. Health Based Spillover has been configured
C. one of the bound services is marked as DOWN
17
QUESTION NO: 37
Which two encryption algorithms are supported on the NetScaler to store the encrypted SSL
private key with a password? (Choose two.)
A. AES
B. RC4
C. DES
D. DES3
Answer: C,D
Explanation:
QUESTION NO: 38
Scenario: A website that provides hotel bookings lists each hotel through their membership
number on the site URL. For example, the Martello Tower member ID is 6754 and its web
presence is at http://www.hoteltestwebsite.com/hotels/6754/index.html.
There are 20,000 hotels in the database of the website. The website business owner no longer
wants to display the hotel sites for hotel numbers 1-10000, inclusive. A NetScaler Engineer must
configure an appropriate responder page to indicate that these sites are unavailable.
Which expression will meet the requirements of the business owner?
A. HTTP.REQ.URL.PATH.GET(2).TYPECAST_NUM_T(DECIMAL).BETWEEN(0, 10000)
B. HTTP.REQ.URL.AFTER_STR("hotels").TYPECAST_NUM_T(DECIMAL).BETWEEN(0, 10000)
C. HTTP.REQ.URL.BEFORE_STR("index.html").TYPECAST_NUM_T(DECIMAL).BETWEEN(0,
10000)
D. HTTP.REQ.URL.PATH.GET(1).TYPECAST_NUM_T(DECIMAL).GT(0) &&
HTTP.REQ.URL.PATH.GET(1).TYPECAST_NUM_T(DECIMAL).LT(10000)
Answer: A
Explanation:
18
QUESTION NO: 39
In which two places could a NetScaler Engineer enable TCP Buffering? (Choose two.)
A. Service
B. Globally
C. HTTP profile
D. Virtual server
Answer: A,B
Explanation:
QUESTION NO: 40
Which two content types are, by default, compressible content on the NetScaler? (Choose two.)
A. zip
B. png
C. css
D. jpeg
E. html
Answer: C,E
Explanation:
QUESTION NO: 41
On a NetScaler system, the __________ timeout value will mark any session that has reached the
idle timeout for cleanup. (Choose the correct option to complete the sentence.)
A. Client
B. Server
C. Zombie
D. NATPCB
Answer: C
Explanation:
19
QUESTION NO: 42
Scenario: A NetScaler Engineer has configured COOKIEINSERT persistence with a timeout value
of two minutes on an SSL LBvServer. The idle time requirement for the application itself CANNOT
be determined. Users report connections are intermittent. Once a session is disconnected, a user
must re-authenticate in order to regain access.
In order to correct this issue, the engineer should set persistence to __________ with a timeout of
__________ minutes. (Choose the correct set of options to complete the sentence.)
A. SOURCEIP; two
B. SSLSESSION; ten
C. SRCIPDESTIP; two
D. COOKIEINSERT; zero
Answer: D
Explanation:
QUESTION NO: 43
What does the TCP Buffering feature on the NetScaler accomplish?
A. It enables the TCP options field syn-cookie.
B. It optimizes the client and server TCP window size.
C. It buffers incoming client connections on the NetScaler.
D. It offloads the server response to the NetScaler before delivering it to the client.
Answer: D
Explanation:
QUESTION NO: 44
Which setting would a NetScaler Engineer disable in order to stop the NetScaler from acting as a
router for non-NetScaler owned IP addresses or entities?
A. Layer 2 mode
B. Layer 3 mode
C. MAC-based forwarding
"Pass Any Exam. Any Time." - www.actualtests.com
20
QUESTION NO: 45
What is the purpose of binding Certificate Authority (CA) certificates to a virtual server?
A. For SSL Offload
B. To validate the server certificate
C. For client certificate authentication
D. To provide intermediate certificates to the client
Answer: C
Explanation:
QUESTION NO: 46
Which option needs to be set on the service in order to maintain the original client-IP to the
backend service?
A. -cka yes
B. -usip yes
C. -cip disabled
D. -useproxyport yes
Answer: B
Explanation:
QUESTION NO: 47
A NetScaler Engineer is required to use SNMP v3 on a NetScaler instance and needs to use
authentication and encryption for all SNMP v3 communication.
What are two places where the engineer could set mandatory authentication and encryption?
(Choose two.)
21
QUESTION NO: 48
Scenario: Users complain that they are NOT able to connect to a web site using the IP address.
The relevant portion of the configuration is shown below:
add ssl profile srv-web -sessReuse ENABLED -sessTimeout 120 -tls11 DISABLED -tls12
DISABLED -strictCAChecks YES
add service svc-web 192.168.1.3 HTTP 80
add lb vserver srv-web SSL 192.168.1.22 443 -persistenceType NONE -cltTimeout 180
bind lb vserver srv-web svc-web
set ssl vserver srv-web -eRSA DISABLED -clientAuth ENABLED -clientCert Optional -tls11
DISABLED -tls12 DISABLED -SNIEnable ENABLED
add ssl policy svc-web -rule true -action NOOP
bind ssl vserver srv-web -certkeyName WebCert -SNICert
bind ssl vserver srv-web -policyName svc-web -priority 100
What is the likely cause of the connectivity issue?
A. SSL policy is incorrect.
B. Client Authentication is enabled.
C. Server Name Indication is enabled.
D. Load Balancing persistence is set to NONE.
Answer: C
Explanation:
QUESTION NO: 49
"Pass Any Exam. Any Time." - www.actualtests.com
22
QUESTION NO: 50
Scenario: A NetScaler Engineer has received complaints from some users stating that their
business applications are running slow. The engineer analyzes the application servers and sees
the following CPU utilization:
ServerA is utilizing 20% CPU
ServerB is utilizing 20% CPU
ServerC is utilizing 100% CPU
The engineer had set the load-balancing method to round robin but decided to change the loadbalancing configuration for the business applications.
Which load-balancing method could the engineer use to address this issue?
A. Custom Load
B. Least Packets
C. Least Connections
D. Least Response time
Answer: A
Explanation:
QUESTION NO: 51
"Pass Any Exam. Any Time." - www.actualtests.com
23
QUESTION NO: 52
When using static proximity load-balancing method for a Global Server Load Balancing (GSLB)
virtual server, there must be a match between the IP addresses in the custom/static database to
the IP address of the _________ so that it is associated with a given location. (Choose the correct
option to complete the sentence.)
A. GSLB service
B. ADNS service
C. Load-balancing server
D. Client local DNS (LDNS)
Answer: A
Explanation:
QUESTION NO: 53
Scenario: A NetScaler Engineer must implement load-balancing on a web server farm that serves
video clips to end users. Video clip files vary in size. The engineer needs to send traffic to the
server with the least amount of network utilization.
Which load-balancing method should the engineer use?
A. Least Request
B. Least Bandwidth
C. Least Connection
24
QUESTION NO: 54
Which protocol is responsible for exchanging site metric, network metric, and persistence
information between sites using Global Server Load Balancing (GSLB)?
A. SSH
B. MEP
C. RPC
D. NITRO
Answer: B
Explanation:
QUESTION NO: 55
Scenario: The marketing department would like a short URL to use for a product launch that will
redirect users to the product information page on the companys website.
The marketing URL they require is http://www.turboappliances.com/prima. It should redirect the
user to http://www.turboappliances.com/products/solutions/primaversion1234.html.
Which NetScaler command should a NetScaler Engineer run in order to meet the requirements of
the scenario?
A. add responder action MarketingURL redirect
"\"http://www.turboappliances.com/products/solutions/primaversion1234.html\""
B. add rewrite action MarketingURL4 replace_http_res
"\"http://www.turboappliances.com/products/solutions/primaversion1234.html\""
C. add rewrite action MarketingURL1 insert_http_header Location
"\"http://www.turboappliances.com/products/solutions/primaversion1234.html\""
D. add transform action MarketingURL2 -priority 100 -reqUrlFrom www.turboappliances.com/ reqUrlInto "http://www.turboappliances.com/products/solutions/primaversion1234.html"
Answer: A
Explanation:
"Pass Any Exam. Any Time." - www.actualtests.com
25
QUESTION NO: 56
Which command must an engineer use to run a cluster with less than (n/2+1) number nodes
online?
A. add cluster <node> -quorumType Majority
B. add cluster instance <name> -quorum None
C. add cluster instance <clid> -quorumType None
D. add cluster instance <clid> -quorumType Majority
Answer: C
Explanation:
QUESTION NO: 57
Which of the listed options is a simple Access Control List (ACL) attribute?
A. VLAN ID
B. Source IP address
C. NetScaler interface
D. Destination IP address
Answer: A
Explanation:
QUESTION NO: 58
While binding a certificate key pair where the key is a 2048-bit, a NetScaler Engineer receives the
following error message:
"Certificate with key size greater than RSA512 or DSA512 bits not supported"
What could be causing this error?
A. The certificate being used is invalid.
B. The license file is saved in UTF-8 format.
"Pass Any Exam. Any Time." - www.actualtests.com
26
QUESTION NO: 59
A NetScaler Engineer has been given the task of protecting an internal web site by requiring users
to enter their credentials.
Which feature should the engineer configure?
A. AAA
B. SSL Offloading
C. Content Filtering
D. Application Firewall
Answer: D
Explanation:
QUESTION NO: 60
Multiple Subnet IPs (SNIPs) are defined in the same network.
A NetScaler Engineer could specify the SNIP to use to communicate with servers on that network
by configuring a __________. (Choose the correct option to complete the sentence.)
A. net profile
B. listen policy
C. traffic domain
D. policy-based route
Answer: A
Explanation:
QUESTION NO: 61
27
QUESTION NO: 62
Scenario: A NetScaler Engineer is using the following policy to forward traffic when performing
content switching:
add cs action cs1_act -targetVserverExpr HTTP.REQ.HOSTNAME
add cs policy cs1_switch_policy -rule true -action cs1_act
bind cs vserver CS1-VIP -policyName cs1_switch_policy -priority 10
28
QUESTION NO: 63
What are two benefits of using Link Aggregation Control Protocol (LACP)? (Choose two.)
A. Redundancy
B. Compression
C. Reduce TCP latency
D. Increased throughput
E. Automatic configuration of TCP windows
Answer: A,D
Explanation:
QUESTION NO: 64
A NetScaler Engineer created an HTTP service and did NOT bind any monitors to the service.
Which monitor will the NetScaler automatically bind to the HTTP service?
A. tcp
B. http
C. tcp-ecv
D. http-ecv
E. tcp-default
F. ping-default
Answer: E
"Pass Any Exam. Any Time." - www.actualtests.com
29
QUESTION NO: 65
Which troubleshooting tool will show policy hits and verify that a policy expression is being
invoked?
A. nspepi
B. nsapimgr
C. nstrace.sh
D. nsconmsg
Answer: D
Explanation:
QUESTION NO: 66
Which NetScaler caching type requires proxy configuration on all client devices?
A. SOCKS
B. REVERSE
C. FORWARD
D. TRANSPARENT
Answer: C
Explanation:
QUESTION NO: 67
Scenario: A client connecting to an SSL virtual server receives the following error:
"Invalid Server Certificate The server certificate is invalid. Do you wish to accept this certificate
and connect to the server anyway?"
What is a possible cause of this error message?
A. The private key is NOT password-protected.
"Pass Any Exam. Any Time." - www.actualtests.com
30
QUESTION NO: 68
Which two NetScaler command-line interface commands could an engineer execute to change
TCP Window Scaling settings on the NetScaler? (Choose two.)
A. set netProfile
B. add ns tcpProfile
C. unset ns tcpParam
D. set ns tcpbufParam
E. add autoscale profile
Answer: B,C
Explanation:
QUESTION NO: 69
On which two objects could a NetScaler Engineer bind cipher groups? (Choose two.)
A. Server
B. Service
C. SSL policy
D. SSL profile
E. Virtual server
Answer: B,E
Explanation:
QUESTION NO: 70
Which protocol can be monitored by Insight Center?
31
QUESTION NO: 71
Scenario: A NetScaler Engineer is configuring a new system with connected interfaces 10/1 - 10/4
and runs the following commands:
add ip 10.10.10.1 255.255.255.0 -type snip
add vlan 10
bind vlan 10 -ifnum 10/1
On which interface(s) will subnet 10.10.10.1 respond to requests?
A. Only interface 10/1
B. Interfaces on VLAN 10
C. Only interfaces on VLAN 1
D. Interfaces 10/1 through 10/4
Answer: D
Explanation:
QUESTION NO: 72
Which connection state is included in the Current Server Connections parameter, but not affected
by Max Clients?
A. Open
B. Listen
C. Closing
D. Open Established
Answer: C
32
QUESTION NO: 73
Which command must a NetScaler Engineer run at the command-line interface to enable a Link
Aggregation Control Protocol (LACP) channel?
A. Use "set lacp" with sysPriority parameter.
B. Use "set lacp" with ownerNode parameter.
C. Use "set interface" with lacpKey parameter.
D. Use "set interface" with lacpPriority parameter.
Answer: C
Explanation:
QUESTION NO: 74
A NetScaler Engineer created an SSL virtual server but the status is showing as state DOWN.
What could be causing the virtual server to show as state DOWN?
A. The virtual server is configured for port 444.
B. HTTP services are used instead of HTTPS services.
C. The SSL certificate is NOT bound to the virtual server.
D. The certificate bound to the virtual server has a private key of 512-bits.
Answer: C
Explanation:
QUESTION NO: 75
Which client header indicates support for the type of compression the NetScaler may use?
A. Accept
B. User-Agent
C. Content-Type
D. Accept-Encoding
33
QUESTION NO: 76
Scenario: A NetScaler Engineer has discovered that the object home.php is NOT found in the
cache on the system.
Below is the relevant configuration:
add cache contentGroup cache_content_group_1 -relExpiry 0
add cache policy cache_pol_1 -rule "http.REQ.URL.CONTAINS(\"home.php\")" -action
MAY_CACHE -storeInGroup cache_content_group_1
add cache policy cache_pol_2 -rule "http.REQ.METHOD.EQ(\"GET\")" -action NOCACHE
add cache policy cache_pol_3 -rule "HTTP.RES.HEADER(\"Set-Cookie\").EXISTS" -action
CACHE
bind cache global cache_pol_1 -priority 90 -gotoPriorityExpression END -type REQ_OVERRIDE
bind cache global cache_pol_2 -priority 100 -gotoPriorityExpression END -type REQ_OVERRIDE
bind cache global cache_pol_3 -priority 100 -gotoPriorityExpression END -type RES_OVERRIDE
The data from the client and the server are as following:
GET /home.php HTTP/1.1
Host: www.website.com
User-Agent: Mozilla Firefox/3.0.3
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
"Pass Any Exam. Any Time." - www.actualtests.com
34
QUESTION NO: 77
Which IP address type should be bound to a VLAN in order to isolate traffic to backend services?
A. Virtual IP (VIP)
B. Cluster IP (CLIP)
C. Subnet IP (SNIP)
D. NetScaler IP (NSIP)
35
QUESTION NO: 78
Scenario: NetScaler features are NOT licensed. A NetScaler Engineer has checked that the
proper platform license file has been uploaded.
Why are the NetScaler features NOT licensed?
A. The features are NOT enabled.
B. The NetScaler needs to be restarted.
C. The NetScaler initial setup is NOT completed.
D. There is no universal license on the NetScaler.
Answer: B
Explanation:
QUESTION NO: 79
Which SSL parameter should an engineer configure to bind multiple certificate key pairs to a
virtual server?
A. SNI enable
B. Session reuse
C. Send close-notify
D. Client authentication
Answer: A
Explanation:
QUESTION NO: 80
What is the key benefit to enabling Session Reuse on an SSL offload VServer?
A. The number of HTTP requests to the backend services are decreased.
B. Resumed SSL sessions are more secure than sessions that require renegotiation.
36
QUESTION NO: 81
Which two are HTTP response codes from a successful cache hit by default? (Choose two.)
A. 304
B. 500
C. 200
D. 401
Answer: A,C
Explanation:
QUESTION NO: 82
Which persistence method is only applicable to load-balancing SIP?
A. CALLID
B. RTSPID
C. SOURCEIP
D. COOKIEINSERT
Answer: A
Explanation:
QUESTION NO: 83
Scenario: A NetScaler Engineer wants to make it easier for the help desk group to access the
active node in a high-availability pair. Members of the help desk group must be able to access the
NetScaler in a secure way without being notified of warnings in their web browsers.
37
QUESTION NO: 84
What would a NetScaler Engineer configure to allow internal IPv4 servers on a private subnet
access to the external Internet through the NetScaler?
A. Link Load Balancing (LLB)
B. Network Address Translation 64 (NAT64)
C. Inbound Network Address Translation (INAT)
D. Reverse network address translation (RNAT)
Answer: D
Explanation:
QUESTION NO: 85
A recent security audit has identified that NetScaler management is available on all Subnet IP
(SNIP) adresses.
Which step could an engineer take to ensure that these services are only available through the
NetScaler IP (NSIP)?
A. Unbind all SNIPs from the NSVLAN.
B. Disable the 'GUI' option on all SNIPs.
C. Enable the 'Restrict Access' option on all SNIPs.
D. Disable the 'Management Access' option on all SNIPs.
Answer: D
Explanation:
"Pass Any Exam. Any Time." - www.actualtests.com
38
QUESTION NO: 86
How could a NetScaler Engineer ensure that a content-switching virtual server is marked as
DOWN if all target load-balancing servers show as DOWN?
A. Specify a monitor
B. Enable State Update
C. Specify a route monitor
D. Configure a backup virtual server
Answer: B
Explanation:
QUESTION NO: 87
Scenario: A NetScaler Engineer needs to enable access to a load-balancing virtual server from
two customers that belong to different VLANs, VLAN500 and VLAN600. Each customer must
access the services and servers specific to their VLAN and should never be able to reach another
customer service or servers.
Traffic Domain (TD) 1 has been created for VLAN500 and Traffic Domain (TD) 2 for VLAN600.
Load-balancing services have also been created for each server on TD1 and TD2. The TD for the
virtual server is TD 3 and IP address 172.10.0.30.
In order to complete this setup, the engineer should create a load-balancing virtual server with IP
172.10.0.30 on TD 3 and use __________. (Choose the correct option to complete the sentence.)
A. TD2 services as a backup virtual server
B. TD1 and TD2 services on one virtual server
C. TD1 and TD2 services on two virtual servers
D. TD1 on one virtual server and TD2 on second
Answer: D
Explanation:
39
QUESTION NO: 89
A NetScaler Engineer would like to direct identical requests for the same service to specific cache
servers.
Which load-balancing method should the engineer use?
A. URL Hash
B. Domain Hash
C. Source IP Hash
D. Source IP Destination IP Hash
Answer: A
Explanation:
QUESTION NO: 90
Scenario: A Network Engineer needs to provide a solution for mobile users who use devices that
do NOT support basic access authentication.
Which three steps should be included as part of the engineer's plan to implement this requirement
using NetScaler? (Choose three.)
A. Configure an OCSP responder.
B. Create an authentication VServer.
C. Configure a Pre-Authentication policy.
D. Create an LDAP authentication policy and bind it to the authentication server.
"Pass Any Exam. Any Time." - www.actualtests.com
40
QUESTION NO: 91
Scenario: A NetScaler Engineer recently enabled the HTTP Compression feature. In reviewing the
HTTP compression statistics, the engineer notices that content from all HTTP virtual servers
created prior to enabling the compression feature is NOT being compressed.
What should the engineer do to allow compression for any pre-existing HTTP virtual servers?
A. Recreate the HTTP virtual servers.
B. Recreate any existing compression policies.
C. Enable compression on the associated bound services.
D. Ensure 'Allow Server side compression' is unchecked on the NetScaler.
Answer: C
Explanation:
QUESTION NO: 92
Scenario: A NetScaler Engineer has configured a virtual server as follows:
set lb vserver web_vserver -redirectURL http://www.external.hosting.com -backupVServer
maint_vserver
The virtual server web_vserver is marked as DOWN; maint_vserver is marked as UP.
The following request is sent to the web_vserver:
GET /path/query HTTP/1.1
What would happen to this request?
41
QUESTION NO: 93
When would it be necessary to configure Failover Interface Set (FIS) in an environment that has
two NetScaler appliances in high availability (HA) mode?
A. Link redundancy is required.
B. Route monitors are required.
C. HA monitor is disabled in some interfaces.
D. The NetScaler appliances are configured on different networks.
Answer: A
Explanation:
QUESTION NO: 94
Scenario: A company is hosting an external, Internet-facing website that is load balanced by a
NetScaler. The backend servers are on a 1 Gbps network and clients connect over 3G
connections. The Server Administrator reviewed the performance metrics on the backend servers
and noticed a lot of overall network retirements and retransmissions.
Which NetScaler feature would help improve the network performance of the backend servers in
this scenario?
A. SureConnect
B. Compression
C. TCP Buffering
D. Surge Protection
Answer: C
Explanation:
42
QUESTION NO: 96
Scenario: A NetScaler Engineer is troubleshooting an issue and using /var/log/ns.log to view the
errors.
The logs are being filled with messages like the ones below:
Oct 6 14:03:23 <local0.info> 192.168.10.50 10/06/2014:14:03:23 GMT ns1 0-PPE-0 : TCP
CONN_DELINK 4471 0 : Source 192.168.10.10:52187 - Vserver 192.168.10.50:80 - NatIP
192.168.10.10:52187 - Destination 192.168.10.50:80 - Delink Time 10/06/2014:14:03:23 GMT Total_bytes_send 1075 - Total_bytes_recv 352
Oct 6 14:03:30 <local0.info> 192.168.10.50 10/06/2014:14:03:30 GMT ns1 0-PPE-0 : TCP
CONN_TERMINATE 4472 0 : Source 192.168.10.35:80 - Destination 192.168.10.51:35341 - Start
Time 10/06/2014:14:02:43 GMT - End Time 10/06/2014:14:03:30 GMT - Total_bytes_send 1 Total_bytes_recv 1
Oct 6 14:03:30 <local0.info> 192.168.10.50 10/06/2014:14:03:30 GMT ns1 0-PPE-0 : TCP
CONN_TERMINATE 4473 0 : Source 127.0.0.1:7776 - Destination 127.0.0.2:55623 - Start Time
10/06/2014:14:02:45 GMT - End Time 10/06/2014:14:03:30 GMT - Total_bytes_send 1 Total_bytes_recv 1
Oct 6 14:03:30 <local0.info> 192.168.10.50 10/06/2014:14:03:30 GMT ns1 0-PPE-0 : TCP
CONN_TERMINATE 4474 0 : Source 127.0.0.1:80 - Destination 127.0.0.2:39771 - Start Time
10/06/2014:14:02:46 GMT - End Time 10/06/2014:14:03:30 GMT - Total_bytes_send 1 Total_bytes_recv 1
Which option should the engineer modify to stop these types of messages from getting logged in
/var/log/ns.log?
"Pass Any Exam. Any Time." - www.actualtests.com
43
QUESTION NO: 97
Scenario: A NetScaler Engineer is troubleshooting a high-availability issue. The engineer needs to
determine if the port being used by the high-availability heartbeats is blocked.
Which port is used by high-availability heartbeats?
A. 3003
B. 3008
C. 3010
D. 3011
Answer: A
Explanation:
QUESTION NO: 98
What is the default load-balancing method?
A. Round Robin
B. Source IP Hash
C. Least Connection
D. Least Response Time
Answer: C
Explanation:
QUESTION NO: 99
Scenario: A NetScaler Engineer retrieves the following configuration from support and enters it
"Pass Any Exam. Any Time." - www.actualtests.com
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59