Professional Documents
Culture Documents
Answer: C
QUESTION NO: 2
m
Scenario: An administrator must set up a NetScaler system network with USIP mode enabled.
.co
The NetScaler must be able to preserve client IP addresses in TCP/IP packets reaching the
backend servers except for connections coming from particular IP addresses that are defined in an
ACL. In the case of connections coming from the IP addresses defined in the ACL, the packets
sts
reaching the back-end servers should receive the NetScaler IP address instead of the client IP
address. On which entity should RNAT be configured to meet the requirements in this scenario
lTe
A. ACL
B. Client
tua
C. Virtual server
D. Back-end server
Ac
Answer: A
QUESTION NO: 3
How can an administrator configure a health check for a server receiving HTTP traffic so that it
monitors the responses of the server to actual client requests as opposed to probes whenever
possible?
QUESTION NO: 4
An administrator configured cache redirection and needs to provide a report of how that feature is
functioning in the network environment. What can the administrator use to see a graphical
representation of the statistics for the vserver performing the cache redirection?
A. The monitor view for the service bound to the correct vserver
B. The chart option in the Dashboard once the correct vserver is selected
C. The chart option in the Dashboard for the service bound to the correct vserver
D. The request and response rates option in the Dashboard oncete correct vserver is selected
Answer: B
m
QUESTION NO: 5 .co
Page 2 of 24
An administrator has just enabled caching and wants to make sure that this will positively impact
sts
server performance. Which information can the administrator get from the Dashboard to
determine whether server performance was positively affected by enabling caching?
lTe
Answer: D
Ac
QUESTION NO: 6
An SNMP manager attempted to poll for an OID but received the error message: "response
timeout." Which option could the administrator have misconfigured for SNMPv2 to cause this
error message?
A. SNMP trap
B. SNMP user
C. SNMP group
D. SNMP community
Answer: D
QUESTION NO: 7
Which SNMP trap must an administrator configure to be informed when the response time for a
monitor probe that had exceeded the set threshold returns to normal?
A. entityup
B. entitydown
C. monRespTimeoutAboveThresh
D. monRespTimeoutBelowThresh
Answer: D
m
QUESTION NO: 8
Scenario: An administrator needs to create a health check that will mark an HTTP service down if
.co
the bound monitor probe fails. The administrator wants to create a monitor and configure the
health check so that a trap is sent if the monitor probe reply exceeds 20 milliseconds. How can
the administrator create the monitor for this health check using the command line interface?
sts
Answer: D
Ac
QUESTION NO: 9
Scenario: An administrator is planning on configuring health checks for services bound to web
servers 1 and 2 which are listening on TCP port 80 for HTTP and TCP port 443 for HTTPS.
Service1 receives the encrypted traffic and Service 2 receives the clear text traffic.
How should the administrator create the monitor for Service1 using the command line interface?
Answer: B
Scenario: A multinational company operates in areas where there is significant threat of natural
disaster. The administrator decides to create redundancy in their network because of a
continuous power outage threat at the South America site. The company also has two sites in
North America, one near New York and the other near the San Andreas fault line, a site of
frequent earthquakes and tremors. The company also has a site in Tokyo, Japan, which
experiences several natural disaster threats. The company plans to use a NetScaler system for
load balancing and to prevent interruption of network services because of a local natural or
human disaster. Would a high availability (HA) deployment resolve the issue described in the
scenario, and if so, how should the HA nodes be paired?
Click the Task button to answer.
Click the Exhibit button for instructions on how to complete a Drag and Drop item.
m
.co
sts
lTe
tua
Ac
Answer:
m
.co
sts
QUESTION NO: 11
Where in the configuration utility can an administrator configure a NetScaler high availability pair
lTe
Answer: D
QUESTION NO: 12
The primary node of a NetScaler high availability (HA) pair failed over immediately at start up
during the initial testing of the system. Which configuration step can the administrator take to
prevent this from happening again?
QUESTION NO: 13
A. Static Routes
B. Link Load Balancing
C. Route Health Injection
D. Front-end Health Check
Answer: C
m
QUESTION NO: 14
.co
Which event would trigger a failover in a high availability pair?
sts
Answer: A
Ac
QUESTION NO: 15
A. VMAC
B. VIP address
C. MIP address
D. NSIP address
Answer: D
A NetScaler system is running with high CPU usage frequently. Which log can the administrator
view to determine if the high CPU is being caused by the processes running in the user space?
A. syslog
B. nswlog
C. newnslog
D. nsconmsg
Answer: C
QUESTION NO: 17
Scenario: An administrator set up a NetScaler system in a one-arm mode configuration with high
m
availability. The system failed over unexpectedly.
Which two occurences could be causing this issue? (Choose two.)
A. An interface is down
.co
B. Layer 2 mode is disabled
sts
C. An SSL acceleration card is down
D. The heartbeat is being sent every two seconds
lTe
Answer: A,C
tua
QUESTION NO: 18
An administrator notices that the CPU usage on a NetScaler system spikes for aproximately one
Ac
Answer: B
QUESTION NO: 19
Scenario: An administrator installed a NetScaler system and configured the NSIP and MIP for the
system. The NetScaler system will be used primarily for load balancing in this environment.
Answer: C
QUESTION NO: 20
m
The administrator already set up the NSIP and MIP addresses using the command line interface.
.co
Which command could the administrator use to complete this set up successfully?
Answer: B
tua
QUESTION NO: 21
Ac
Answer: C,D
Which command can an administrator use to set up a NetScaler system to use SNIPs instead of
MIPs for connections to local resources?
Answer: D
QUESTION NO: 23
m
environment where the NetScaler IP, the mapped IP, and the back-end servers will be located on
separate subnets. The administrator wants to create as few additional routes on devices, such as
.co
the servers, as possible while maintaining the communications between the NetScaler and the
other devices. Which two steps can the administrator take to achieve this? (Choose two.)
sts
A. Enable USIP mode
B. Configure VIPs for the devices
C. Ensure USNIP mode is enabled
lTe
Answer: C,E
Ac
QUESTION NO: 24
An administrator is deploying a NetScaler system using the command line interface and plans to
configure the MIP as 10.48.192.17. Which command must the administrator use to correctly
configure the MIP for this NetScaler system?
Answer: B
During the initial setup of a NetScaler system, an administrator can use the __________
command to correctly set the nsroot password. (Choose the correct option to complete the
sentence).
A. passwd
B. set rpc node
C. set system user
D. add nsroot password
Answer: C
QUESTION NO: 26
m
An administrator is setting up high availability (HA) using the command line interface.
Which additional step should the administrator take to configure HA when using the command
line interface?
.co
A. Reboot the primary node
sts
B. Specify each interface number
C. Synchronize the SSL certificates, start up scripts and other configuration files on the primary
node
lTe
D. Manually disable the HA monitor for each interface that is not connected or not being used for
traffic
tua
Answer: D
Ac
QUESTION NO: 27
Answer: A
Scenario: An administrator is configuring two NetScaler appliances for high availability (HA) using
the command line interface. The administrator plans to have the primary NetScaler have the
NSIP address 172.16.200.52 and the secondary NetScaler to have the NSIP address
172.16.200.53. Which two command line interface commands could the administrator use to
configure HA in this environment? (Choose two.)
Answer: A,D
m
QUESTION NO: 29
.co
Which advanced service option should an administrator configure so that a server is off-loaded
faster from having to serve slow clients?
sts
A. Max Client
B. Max Request
C. TCP Buffering
lTe
Answer: C
tua
QUESTION NO: 30
Ac
An administrator wants to configure load balancing so that all requests coming from a particular
network are sent to the same server.
Which load balancing method meets the needs of this environment?
A. Domain Hash
B. Source IP Hash
C. Destination IP Hash
D. Source IP/Destination IP Hash
Answer: B
QUESTION NO: 31
A. add a policy filter with the policy expression and the action specified
B. add a compression policy with the policy expression and action specified
C. configure the action and then add the policy filter with the policy expression and the action
specified
D. configure the action and then add a compression policy with the policy expression and the
action specified
Answer: B
QUESTION NO: 32
m
Scenario: An administrator needs to configure services and vservers for connection-based
.co
content switching of transport control protocol traffic. The traffic must be decrypted by the
NetScaler and sent as plain text to the back-end server.
Which types of services and vservers should the administrator configure for this environment?
sts
A. SSL_TCP type of load balancing vservers, content switching vservers, and services for the
NetScaler
lTe
B. An SSL_TCP type of content switching vserver and TCP type services and vservers for the
NetScaler
C. An SSL_TCP type of load balancing vserver and TCP type services and content switching
tua
Answer: B
QUESTION NO: 33
Scenario: An administrator introduced two new servers, newSVR1 and newSVR2, into a server
farm. These new servers can handle more traffic than the older servers. The current load
balancing method set for the virtual server managing the traffic for this group of servers is Least
Connections. The administrator wants to maintain the load balancing method but also wants to
use the new servers to improve performance by routing more of the traffic to them than to the
older servers. How must the administrator configure the advanced options using the command
line interface to achieve this?
Answer: B
QUESTION NO: 34
Scenario: An administrator needs to configure load balancing for a web farm so that traffic will not
be dropped when the virtual server is marked down. RHI and GSLB are not configured in this
m
environment.
The administrator can configure ___________ or ____________ so that it will receive traffic when
.co
the virtual server is marked down. (Choose the two options that correctly complete the sentence.)
Answer: A,C
tua
QUESTION NO: 35
Scenario: The NetScaler system in an environment was set to compress text globally using the
Ac
deflate format. An administrator has been instructed to modify the compression policy so that the
NetScaler system will compress text globally using the gzip format instead of the deflate format.
Which command line interface command must the administrator use to modify the existing
compression policy correctly?
A. rm cmp policy
B. set cmp policy
C. add cmp policy
D. bind cmp policy
Answer: B
An administrator needs to create a content filtering policy so that the NetScaler switches
browserbased
requests based on domain.
Which expression should an administrator use in the content filtering policy?
Answer: D
QUESTION NO: 37
m
An administrator plans to configure a content filtering policy to drop trace and connect methods.
.co
Which expression should an administrator use in the content filtering policy to explicitly drop trace
and connect methods?
sts
A. REQ.HTTP.METHOD != TRACE || REQ.HTTP.METHOD != CONNECT
B. REQ.HTTP.METHOD == TRACE || REQ.HTTP.METHOD == CONNECT
C. REQ.HTTP.METHOD != TRACE & REQ.HTTP.METHOD != CONNECT
lTe
Answer: B
tua
QUESTION NO: 38
Ac
Which feature must an administrator configure so that all transactions on a NetScaler which can
be logged are logged by a syslog server?
A. Device counters
B. System counters
C. HTTP transactions
D. Audited commands
Answer: D
QUESTION NO: 39
A. Interval
B. Retries
C. Down Time
m
D. Response Timeout
An administrator is configuring custom monitors to determine the state of services based on the
lTe
network traffic of the service. Which two types of services can an administrator monitor with an
inline monitor in NetScaler 9.0? (Choose two.)
tua
A. TCP
B. HTTP
C. HTTPS
D. HTTPS GSLB local
Ac
Answer: B,C
QUESTION NO: 41
m
Bind the TCP type service and vserver together
Bind the SSL type service and HTTP type vserver together
D. Create HTTP type service
.co
Create TCP type service
sts
Create HTTP type vserver
Create TCP type vserver
Create SSL type vserver
lTe
Answer: D
QUESTION NO: 42
An administrator needs to configure an SSL virtual server for HTTP content switching in an
environment that requires end-to-end encryption. Which type of content switching virtual server
(Front-end) and service (Back-end) should the administrator configure?
"Pass Any Exam. Any Time." - www.actualtests.com 17
Citrix 1Y0-A11: Practice Exam
A. Front-end SSL, back-end SSL
B. Front-end SSL, back-end HTTP
C. Front-end TCP, back-end SSL_TCP
D. Front-end SSL_TCP, back-end SSL_TCP
Answer: A
QUESTION NO: 43
An administrator needs to configure a monitor to track the health of a POP3 entity in a network
environment that includes a NetScaler system. Which type of monitor must the administrator
configure to track the health of this entity?
A. User
B. Inline
m
C. Load
D. SASP (Server Application State Protocol) .co
Answer: A
sts
QUESTION NO: 44
lTe
Which custom monitor parameter must an administrator configure to receive an SNMP trap if a
monitor probe fails to respond within the specified parameter?
tua
A. Retries
B. Failure Retries
C. Success Retries
Ac
D. Response timeout
E. Response timeout threshold
Answer: E
QUESTION NO: 45
Scenario: An administrator has created a policy expression to identify URLs with the .JSP suffix.
The administrator plans to use the policy expression to prevent URLs with the .JSP suffix from
being compressed when the HTTP response is received.
How can the administrator associate the policy expression and action to achieve the desired
result?
Answer: C
QUESTION NO: 46
Scenario: An events ticketing company plans to use the content switching feature of NetScaler to
parse traffic so that users purchasing tickets or answering surveys go to group A servers, users
accessing images go to either group B or C servers depending on the ticket category and all
other traffic goes to group D. All servers are in the same web farm.
m
Which two actions must an administrator perform to correctly define the content switching virtual
server so that traffic NOT going to groups A -C gets directed to group D? (Choose two.)
.co
A. Bind a load balancing virtual server to the appropriate service for the web farm
B. Bind the appropriate service to a load balancing virtual server for serving content group D
sts
C. Bind the appropriate load balancing virtual server to the content switching virtual server without
a policy
D. Bind the appropriate load balancing virtual server to the content switching virtual server with
lTe
Answer: B,C
tua
QUESTION NO: 47
Ac
Which type of VLAN is used when an administrator leaves the NetScaler system interfaces on the
default VLAN?
A. Tagged
B. Port-based
C. MAC-based
D. Protocol-based
Answer: B
QUESTION NO: 48
Page 14 of 24
Scenario: The computers at a company were recently infected with the nimda virus. An
"Pass Any Exam. Any Time." - www.actualtests.com 19
Citrix 1Y0-A11: Practice Exam
administrator at the company plans to prevent this from happening again by using the content
filtering feature of the NetScaler system to terminate a client connection when a possible instance
of the nimda virus is detected. The administrator has already created a policy expression that will
match traffic with ROOT.EXE or CMD.EXE and plans to use the NetScaler default "RESET"
action to terminate the appropriate connections. In order to achieve the desired result, the
administrator should __________ prior to binding the policy at the appropriate level. (Choose the
correct phrase to complete the sentence.)
A. add the filter with the policy expression and the action specified
B. add the filter with the policy expression and then add the action to the filter
C. create the action and then add the filter with the policy expression and the action specified
D. create the action, add the filter, and then add the action and the policy expression to the filter
Answer: A
m
QUESTION NO: 49
.co
Scenario: An administrator is troubleshooting monitoring for web servers in an environment.
Currently, services are often being marked down due to slow back-end servers. The administrator
sts
wants to configure the vserver and services so that existing connections stay open when a service
is marked down but not when a vserver is marked down.
How must the administrator configure the service and virtual server to reflect this dependency?
lTe
Answer: C
QUESTION NO: 50
Scenario: An administrator plans on configuring health checks for services bound to web servers
1 and 2 which are listening on TCP port 80 for HTTP and TCP port 443 for HTTPS. Service1
receives the encrypted traffic and Service 2 receives the clear text traffic. Which type of monitor
should the administrator bind to the services to meet the needs of this environment?
Answer: C
QUESTION NO: 51
Scenario: A security administrator wants to monitor the rate at which unacknowledged SYN
packets are received by the NetScaler system for individual VIP addresses. The administrator
plans to configure SNMP on the NetScaler to be informed about synflood rates.
m
Which two traps are set when the set SNMP alarm command is used? (Choose two.)
A. synflood
B. entitySynflood
.co
C. synfloodNormal
sts
D. entitySynfloodNorm
Answer: B,D
lTe
QUESTION NO: 52
tua
Answer: D
QUESTION NO: 53
An SNMP manager attempted to poll for an OID but received the error message: "response
timeout." Which option could the administrator have misconfigured for SNMPv2 to cause this
error message?
Answer: D
QUESTION NO: 54
An administrator needs to configure a health check for a set of firewalls that are being load
balanced by the NetScaler system in the network environment. How must the administrator
configure the health check for this environment?
m
C. Increase the interval parameter
D. Select the transparent parameter
E. Increase the response timeout parameter
.co
Answer: D
sts
lTe
QUESTION NO: 55
Scenario: An administrator must plan the deployment of a NetScaler system for an environment
that requires:
tua
QUESTION NO: 56
Scenario: An administrator configured a NetScaler system for high availability (HA) and
configured the Failover Interface Set (FIS) feature on the appliances including interface 1/3 and
on interface 1/2 which is UP. The administrator also set an HA monitor on interface 1/3. When the
administrator unplugged the interface 1/3 to test the failover process, it did NOT failover the
primary appliance to the secondary appliance.
Which configuration option prevented the failover from occuring?
m
D. HA monitor on any connected interface
Answer: B .co
sts
QUESTION NO: 57
In which scenario would an administrator require two NetScaler systems configured as a high
lTe
availability pair?
Answer: A
QUESTION NO: 58
Scenario: An administrator set up a NetScaler system in high availability mode. The system
keeps failing over unexpectedly. Which two commands can the administrator run to determine the
cause of this issue? (Choose two.)
A. show node
B. stat ns node
C. root@ns# ls -la
D. root@ns# nsconmsg -d event
QUESTION NO: 59
An IT security policy at a company requires that a record is created every time someone alters a
system configuration. What must the administrator configure on the NetScaler log to record these
changes?
A. Access logs
Page 17 of 24
B. Event messages
m
C. System counters
D. Audited commands
Answer: D
.co
sts
QUESTION NO: 60
lTe
A. redundancy is required
tua
Answer: A
QUESTION NO: 61
A. entityup
B. entitydown
C. InterfaceThroughputlow
D. InterfaceThroughputNormal
QUESTION NO: 62
A. VIP
B. MIP
C. SNIP
D. NSIP
Answer: B,C
m
QUESTION NO: 63
.co
Scenario: An administrator needs to upgrade a NetScaler system from 8.x to
sts
9.0 in accordance with best practices. The NetScaler system is currently configured with high
availability.
lTe
How should the administrator upgrade the NetScaler system to meet these requirements?
Answer: D
Explanation:
Page 18 of 24
QUESTION NO: 64
An administrator needs to configure a NetScaler system to route packets that are not destined for
the NetScaler. Which option must the administrator enable so that the NetScaler routes these
packets?
A. L2 mode
Answer: B
QUESTION NO: 65
A. 1
B. 2
C. 16
D. 256
E. 4,096
m
Answer: A
.co
QUESTION NO: 66
sts
Scenario: An administrator is configuring SNMP traps for a newly deployed NetScaler system.
The administrator plans to enable an SNMP trap related to the request and response rates for a
lTe
web server farm. The administrator has just configured the SNMP destination for any generated
alerts. Which object(s) must the administrator configure to receive alerts from the SNMP trap
being configured?
tua
A. Source IP address
B. Threshold levels for the trap
Ac
Answer: B
QUESTION NO: 67
Scenario: An administrator is planning the deployment of a NetScaler system for a large banking
corporation. The bank has very stringent Internet security policies and auditing procedures. One
of the requirements for the transaction auditing is that the web server logs record the original
client IP addresses. Which two features on the NetScaler could the administrator use to meet the
auditing requirement? (Choose two.)
Answer: A,E
QUESTION NO: 68
Which port will an administrator need to open on a network firewall to be able to access the
NetScaler configuration utility through a secured port?
A. 3000
B. 3008
m
C. 3010
D. 3012 .co
Answer: B
sts
QUESTION NO: 69
lTe
- a network firewall
- default gateway with the IP address of 168.192.10.1
Which command can the administrator use to configure the NetScaler system to resolve DNS
Ac
Answer: C
QUESTION NO: 70
Scenario: An administrator must set up a NetScaler system network with USIP mode enabled.
The NetScaler must be able to preserve client IP addresses in TCP/IP packets reaching the
"Pass Any Exam. Any Time." - www.actualtests.com 27
Citrix 1Y0-A11: Practice Exam
backend
servers except for connections coming from particular IP addresses that are defined in an
ACL. In the case of connections coming from the IP addresses defined in the ACL, the packets
reaching the back-end servers should receive the NetScaler IP address instead of the client IP
address. On which entity should RNAT be configured to meet the requirements in this scenario
according to best practices?
A. ACL
B. Client
C. Virtual server
D. Back-end server
Answer: A
m
QUESTION NO: 71
.co
During the initial setup of a NetScaler system, an administrator can use the __________ to
correctly set the nsroot password. (Choose the correct option to complete the sentence).
A. Setup Wizard
sts
Answer: A
tua
QUESTION NO: 72
Ac
Scenario: An administrator is planning the deployment of a NetScaler system for a large banking
corporation. The bank has very stringent Internet security policies and auditing procedures. One
of the requirements for the transaction auditing is that the web server logs record the original
client IP addresses. Which two features on the NetScaler could the administrator use to meet the
auditing requirement? (Choose two.)
A. USIP
B. RNAT
C. USNIP
D. Edge mode
E. Client IP insertion
Answer: A,E
QUESTION NO: 73
Answer: B
m
QUESTION NO: 74
.co
What are two actions an administrator can take to prevent failover on a NetScaler system in high
sts
availability (HA) mode and eliminate the possibility of having two primary systems during network
testing of the system? (Choose two.)
lTe
Answer: A,C
Ac
QUESTION NO: 75
Answer: D
QUESTION NO: 76
Answer: C
m
QUESTION NO: 77
.co
Scenario: A network administrator is implementing a NetScaler system for a large environment.
The administrator will be using these IP addresses when configuring the NetScaler system:
?Internal web server IP address: 192.168.100.12
sts
?NetScaler-owned IP addresses:
NSIP: 10.165.30.45
lTe
MIP: 10.165.30.60
VIP: 12.15.30.62
Which two items could the administrator specify on the NetScaler system to enable
tua
Answer: A,B
QUESTION NO: 78
Which mode must an administrator use to override the default route on the NetScaler?
A. Layer 2
B. SSL VPN
C. Path MTU discovery
D. MAC-based forwarding (MBF)
QUESTION NO: 79
Scenario: An administrator has a new NetScaler system implemented in inline mode and with
high availability (HA). Each NetScaler appliance has four connected interfaces and two pairs per
appliance are configured in inline mode with link aggregation.
Which three steps should the administrator take to establish an HA monitor for each pair?
(Choose three.)
m
E. Ensure that the nsroot password and mapped IP addresses are different for each member in a
pair
Answer: A,B,D
.co
sts
QUESTION NO: 80
lTe
A. Stay primary
B. HA propagation
Ac
C. Stay secondary
D. HA synchronization
Answer: C
QUESTION NO: 81
Which type of content switching vserver must an administrator configure for connection-based
content switching of transport control protocol traffic when the traffic should be decrypted prior to
reaching the back-end server?
A. TCP
B. SSL_TCP
Answer: B
An administrator is planning an upgrade from a NetScaler version higher than 6.1 to the
NetScaler 9 version.
In which order should the administrator upgrade the NetScaler system?
Click the Task button to answer.
Click the Exhibit button for instructions on how to complete a Drag and Drop item.
m
.co
sts
Answer:
lTe
tua
Ac
Explanation:
m
.co
sts
QUESTION NO: 83
lTe
Which qualifier designates the source IP of the outgoing packet in a classic policy for NetScaler
9?
A. RES
tua
B. RES.IP
C. RES.HTTP
D. RES.IP.SOURCEIP
Ac
E. RES.HTTP.HEADER
Answer: D
QUESTION NO: 84
A. Interval
Answer: A,D,E
QUESTION NO: 85
An administrator plans to configure a redirect URL for a load balancing virtual server so that
requests are sent to the default page of the desired URL. When configuring the redirect URL,
which format should the administrator use so that the request is sent to the correct page?
A. http://www.citrix.com
B. http://www.citrix.com/
m
C. http://www.citrix.com/index.html
D. http://www.citrix.com/%default% .co
Answer: B
sts
QUESTION NO: 86
lTe
The expression "url == *.txt || res.http.header content-encoding == text/html" can be used for
__________ and __________ actions. (Choose the two action types that correctly complete the
sentence.)
tua
A. caching
B. compression
Ac
C. content Switching
D. cache Redirection
Answer: A,B