Citrix 1Y0-A11 Exam

Citrix 1Y0-A11
1Y0-A11 Basic Administration for Citrix NetScaler 9.0

Practice Test
Updated: Jan 19, 2010

Version 1.5
Citrix 1Y0-A11: Practice Exam
QUESTION NO: 1
An administrator should configure Link Aggregation on a 7000 NetScaler system when

__________. (Choose the correct option to complete the sentence.)
A. redundancy on a half duplex operation is required

B. redundancy on an operation across multiple data rates is required
C. the bandwidth requirements inbound to or outbound from the Netscaler are greater than 1
Gb/sec
D. the bandwidth requirements inbound to or outbound from the Netscaler are greater than 8
Gb/sec
Answer: C
QUESTION NO: 2
m
Scenario: An administrator must set up a NetScaler system network with USIP mode enabled.
.co
The NetScaler must be able to preserve client IP addresses in TCP/IP packets reaching the
backend servers except for connections coming from particular IP addresses that are defined in an
ACL. In the case of connections coming from the IP addresses defined in the ACL, the packets
sts
reaching the back-end servers should receive the NetScaler IP address instead of the client IP
address. On which entity should RNAT be configured to meet the requirements in this scenario
lTe
according to best practices?
A. ACL
B. Client
tua
C. Virtual server
D. Back-end server
Ac
Answer: A
QUESTION NO: 3
How can an administrator configure a health check for a server receiving HTTP traffic so that it
monitors the responses of the server to actual client requests as opposed to probes whenever
possible?
A. Use the default TCP monitor

B. Configure an HTTP-ECV monitor
C. Configure an HTTP-Inline monitor
D. Use the TCP monitor with the transparent parameter selected
E. Configure an HTTP monitor with the transparent parameter selected
"Pass Any Exam. Any Time." - www.actualtests.com 2

Answer: C
QUESTION NO: 4
An administrator configured cache redirection and needs to provide a report of how that feature is
functioning in the network environment. What can the administrator use to see a graphical
representation of the statistics for the vserver performing the cache redirection?
A. The monitor view for the service bound to the correct vserver
B. The chart option in the Dashboard once the correct vserver is selected
C. The chart option in the Dashboard for the service bound to the correct vserver
D. The request and response rates option in the Dashboard oncete correct vserver is selected
Answer: B
m
QUESTION NO: 5 .co
Page 2 of 24
An administrator has just enabled caching and wants to make sure that this will positively impact
sts
server performance. Which information can the administrator get from the Dashboard to
determine whether server performance was positively affected by enabling caching?
lTe
A. Client connection count increases

B. Server side request rate increases
C. Client connection count decreases
tua
D. Server side request rate decreases
Answer: D
Ac
QUESTION NO: 6
An SNMP manager attempted to poll for an OID but received the error message: "response
timeout." Which option could the administrator have misconfigured for SNMPv2 to cause this
error message?
A. SNMP trap
B. SNMP user
C. SNMP group
D. SNMP community
Answer: D

QUESTION NO: 7
Which SNMP trap must an administrator configure to be informed when the response time for a
monitor probe that had exceeded the set threshold returns to normal?
A. entityup
B. entitydown
C. monRespTimeoutAboveThresh
D. monRespTimeoutBelowThresh
Answer: D
m
QUESTION NO: 8
Scenario: An administrator needs to create a health check that will mark an HTTP service down if
.co
the bound monitor probe fails. The administrator wants to create a monitor and configure the
health check so that a trap is sent if the monitor probe reply exceeds 20 milliseconds. How can
the administrator create the monitor for this health check using the command line interface?
sts
A. setmon monitor-HTTP-1 HTTP -interval 20 milli

B. add lbmon monitor-HTTP-1 HTTP -interval 20 milli
lTe
C. setmon monitor-HTTP-1 HTTP -resptimeout 20 milli

D. add lbmon monitor-HTTP-1 HTTP -resptimeout 20 milli
tua
Answer: D
Ac
QUESTION NO: 9
Scenario: An administrator is planning on configuring health checks for services bound to web
servers 1 and 2 which are listening on TCP port 80 for HTTP and TCP port 443 for HTTPS.
Service1 receives the encrypted traffic and Service 2 receives the clear text traffic.
How should the administrator create the monitor for Service1 using the command line interface?
A. setmon monitor-SVC1-Mon TCP -secure YES

B. add lbmon monitor-SVC1-Mon HTTP -secure YES
C. setmon monitor-SVC1-Mon HTTP -transparent NO
D. add lbmon monitor-SVC1-Mon TCP -transparent NO
Answer: B

QUESTION NO: 10 DRAG DROP
Scenario: A multinational company operates in areas where there is significant threat of natural
disaster. The administrator decides to create redundancy in their network because of a
continuous power outage threat at the South America site. The company also has two sites in
North America, one near New York and the other near the San Andreas fault line, a site of
frequent earthquakes and tremors. The company also has a site in Tokyo, Japan, which
experiences several natural disaster threats. The company plans to use a NetScaler system for
load balancing and to prevent interruption of network services because of a local natural or
human disaster. Would a high availability (HA) deployment resolve the issue described in the
scenario, and if so, how should the HA nodes be paired?
Click the Task button to answer.
Click the Exhibit button for instructions on how to complete a Drag and Drop item.
m
.co
sts
lTe
tua
Ac
Answer:

m
.co
sts
QUESTION NO: 11
Where in the configuration utility can an administrator configure a NetScaler high availability pair
lTe
to ensure that specific interfaces are NOT monitored?
A. The root of the System node

B. The root of the Network node
tua
C. The interface sub node in the System node

D. The interface sub node in the Network node
Ac
Answer: D
QUESTION NO: 12
The primary node of a NetScaler high availability (HA) pair failed over immediately at start up
during the initial testing of the system. Which configuration step can the administrator take to
prevent this from happening again?
A. Disable monitoring on all connected interfaces

B. Enable node monitoring on all primary node interfaces
C. Run the "force HA sync" command from the primary node
D. Execute the "disable interface" command for all unused interfaces

Answer: D
QUESTION NO: 13
Scenario: An administrator is planning the necessary configurations on a NetScaler system for an

environment that requires the NetScaler system to advertise virtual IP addresses, directly
connected routes and static routes on the upstream routers. What must the administrator ensure
is configured on the NetScaler system for this environment?
A. Static Routes
B. Link Load Balancing
C. Route Health Injection
D. Front-end Health Check
Answer: C
m
QUESTION NO: 14
.co
Which event would trigger a failover in a high availability pair?
sts
A. The primary appliance reboots.

B. A forced synchronization event fails.
lTe
C. A monitored interface fails on the secondary node.

D. The default gateway does not return a heartbeat packet from the primary node.
tua
Answer: A
Ac
QUESTION NO: 15
A company is planning on implementing NetScaler systems in high availability pairs.

Which entry in the NS.CONF file of the secondary system needs to be unique from those of the
primary system?
A. VMAC
B. VIP address
C. MIP address
D. NSIP address
Answer: D

QUESTION NO: 16
A NetScaler system is running with high CPU usage frequently. Which log can the administrator
view to determine if the high CPU is being caused by the processes running in the user space?
A. syslog
B. nswlog
C. newnslog
D. nsconmsg
Answer: C
QUESTION NO: 17
Scenario: An administrator set up a NetScaler system in a one-arm mode configuration with high
m
availability. The system failed over unexpectedly.
Which two occurences could be causing this issue? (Choose two.)
A. An interface is down
.co
B. Layer 2 mode is disabled
sts
C. An SSL acceleration card is down
D. The heartbeat is being sent every two seconds
lTe
Answer: A,C
tua
QUESTION NO: 18
An administrator notices that the CPU usage on a NetScaler system spikes for aproximately one
Ac
minute every two days.

Which step can the administrator take to find out what is causing the spike?
A. View the syslog

B. Run events on newnslog
C. View the Dashboard statistics
D. Run the stat ns node command
Answer: B
QUESTION NO: 19
Scenario: An administrator installed a NetScaler system and configured the NSIP and MIP for the
system. The NetScaler system will be used primarily for load balancing in this environment.

Which additional step must the administrator take to ensure that the NetScaler system can
perform the necessary server load balancing in this environment?
A. Disable USIP mode on both nodes

B. Use the MIP as the NSIP for a high availability environment
C. Create VIPs for the front-end connections to the back-end servers
D. Enable USNIP mode for the front-end connections to the back-end servers
Answer: C
QUESTION NO: 20
Scenario: A network administrator is deploying a NetScaler system in an environment with a

single subnet using this IP information: subnet: 192.168.10.32
netmask: 255.255.255.224 default gateway: 192.168.10.40
m
The administrator already set up the NSIP and MIP addresses using the command line interface.
.co
Which command could the administrator use to complete this set up successfully?
A. add route 0.0.0.0 0.0.0.0 192.168.10.32

B. add route 0.0.0.0 0.0.0.0 192.168.10.40
sts
C. add route 0.0.0.0 0.0.0.0 192.168.10.62

D. add route 192.168.10.0 255.255.255.224 192.168.10.32
lTe
E. add route 192.168.10.0 255.255.255.224 192.168.10.62
Answer: B
tua
QUESTION NO: 21
Ac
Scenario: An administrator is configuring a NetScaler system in one-armed mode. The NetScaler

appliances are connected to the network through a switch and will be configured as a pair with
high availability (HA) enabled.
Which two steps should the administrator take to succesfully configure HA in this environment?
(Choose two.)
A. Ensure the NSIP is identical on both systems

B. Configure a unique nsroot password on each node of the HA pair
C. Disable all system interfaces except the one connected to the switch
D. Configure a Remote Procedural Call (RPC) node password on each node of the HA pair
Answer: C,D

QUESTION NO: 22
Which command can an administrator use to set up a NetScaler system to use SNIPs instead of
MIPs for connections to local resources?
A. set ns ip snip -mip

B. set ns mode USNIP
C. add ns mode USNIP
D. enable ns mode USNIP
Answer: D
QUESTION NO: 23
Scenario: An administrator is configuring the NetScaler-owned IP address for a network
m
environment where the NetScaler IP, the mapped IP, and the back-end servers will be located on
separate subnets. The administrator wants to create as few additional routes on devices, such as
.co
the servers, as possible while maintaining the communications between the NetScaler and the
other devices. Which two steps can the administrator take to achieve this? (Choose two.)
sts
A. Enable USIP mode
B. Configure VIPs for the devices
C. Ensure USNIP mode is enabled
lTe
D. Make the MIP and the NSIP address the same

E. Configure SNIPs on the subnets of the devices
tua
Answer: C,E
Ac
QUESTION NO: 24
An administrator is deploying a NetScaler system using the command line interface and plans to
configure the MIP as 10.48.192.17. Which command must the administrator use to correctly
configure the MIP for this NetScaler system?
A. set ns config -ipaddress 10.48.192.17

B. add ns ip 10.48.192.17 255.255.255.0 -typemip
C. add ns config -ipaddress 10.48.192.17 -subnet mask 255.0.0.0
D. set ns ip -ipaddress 10.48.192.17 -netmask 255.255.255.0 -mip
Answer: B

QUESTION NO: 25
During the initial setup of a NetScaler system, an administrator can use the __________
command to correctly set the nsroot password. (Choose the correct option to complete the
sentence).
A. passwd
B. set rpc node
C. set system user
D. add nsroot password
Answer: C
QUESTION NO: 26
m
An administrator is setting up high availability (HA) using the command line interface.
Which additional step should the administrator take to configure HA when using the command
line interface?
.co
A. Reboot the primary node
sts
B. Specify each interface number
C. Synchronize the SSL certificates, start up scripts and other configuration files on the primary
node
lTe
D. Manually disable the HA monitor for each interface that is not connected or not being used for
traffic
tua
Answer: D
Ac
QUESTION NO: 27
Scenario: An administrator is planning the deployment of a NetScaler system for a large

environment that includes sites in multiple countries. The administrator has determined that
GSLB must be enabled for this environment.
What is a DNS requirement for this environment?
A. The NetScaler must act as an ADNS server

B. The NetScaler system must contain a local DNS server
C. The NetScaler must be configured for iterative DNS lookups
D. The NetScaler system must have 15 root hint servers added as name servers
Answer: A

QUESTION NO: 28
Scenario: An administrator is configuring two NetScaler appliances for high availability (HA) using
the command line interface. The administrator plans to have the primary NetScaler have the
NSIP address 172.16.200.52 and the secondary NetScaler to have the NSIP address
172.16.200.53. Which two command line interface commands could the administrator use to
configure HA in this environment? (Choose two.)
A. add node 1 172.16.200.53 on primary

B. add node 0 172.16.200.53 on primary
C. add node 0 172.16.200.52 on secondary
D. add node 2 172.16.200.52 on secondary
Answer: A,D
m
QUESTION NO: 29
.co
Which advanced service option should an administrator configure so that a server is off-loaded
faster from having to serve slow clients?
sts
A. Max Client
B. Max Request
C. TCP Buffering
lTe
D. Client IP header insertion
Answer: C
tua
QUESTION NO: 30
Ac
An administrator wants to configure load balancing so that all requests coming from a particular
network are sent to the same server.
Which load balancing method meets the needs of this environment?
A. Domain Hash
B. Source IP Hash
C. Destination IP Hash
D. Source IP/Destination IP Hash
Answer: B
QUESTION NO: 31

In order to associate an action for a new compression policy, an administrator should
__________ prior to binding the policy at the appropriate level. (Choose the correct phrase to
complete the sentence.)
A. add a policy filter with the policy expression and the action specified
B. add a compression policy with the policy expression and action specified
C. configure the action and then add the policy filter with the policy expression and the action
specified
D. configure the action and then add a compression policy with the policy expression and the
action specified
Answer: B
QUESTION NO: 32
m
Scenario: An administrator needs to configure services and vservers for connection-based
.co
content switching of transport control protocol traffic. The traffic must be decrypted by the
NetScaler and sent as plain text to the back-end server.
Which types of services and vservers should the administrator configure for this environment?
sts
A. SSL_TCP type of load balancing vservers, content switching vservers, and services for the
NetScaler
lTe
B. An SSL_TCP type of content switching vserver and TCP type services and vservers for the
NetScaler
C. An SSL_TCP type of load balancing vserver and TCP type services and content switching
tua
vservers for the NetScaler

D. SSL_TCP type of content switching vservers and services, and TCP type of load balancing
vservers for the NetScaler
Ac
Answer: B
QUESTION NO: 33
Scenario: An administrator introduced two new servers, newSVR1 and newSVR2, into a server
farm. These new servers can handle more traffic than the older servers. The current load
balancing method set for the virtual server managing the traffic for this group of servers is Least
Connections. The administrator wants to maintain the load balancing method but also wants to
use the new servers to improve performance by routing more of the traffic to them than to the
older servers. How must the administrator configure the advanced options using the command
line interface to achieve this?

A. add vserver newSVR1 -weight 10 Service-HTTP-1
add vserver newSVR2 -weight 10 Service-HTTP-1
B. set lb vserver newSVR1 -weight 10 Service-HTTP-1
set lb vserver newSVR2 -weight 10 Service-HTTP-1
C. add lb vserver newSVR1 -weight 10 Service-HTTP-1
add lb vserver newSVR2 -weight 10 Service-HTTP-1
D. set lb vserver newSVR1 newSVR2 -weight 10 Service-HTTP-1
Answer: B
QUESTION NO: 34
Scenario: An administrator needs to configure load balancing for a web farm so that traffic will not
be dropped when the virtual server is marked down. RHI and GSLB are not configured in this
m
environment.
The administrator can configure ___________ or ____________ so that it will receive traffic when
.co
the virtual server is marked down. (Choose the two options that correctly complete the sentence.)
A. a redirect URL string

sts
B. another NetScaler system
C. the name of a backup virtual server
D. the node ID of the secondary in the HA pair
lTe
Answer: A,C
tua
QUESTION NO: 35
Scenario: The NetScaler system in an environment was set to compress text globally using the
Ac
deflate format. An administrator has been instructed to modify the compression policy so that the
NetScaler system will compress text globally using the gzip format instead of the deflate format.
Which command line interface command must the administrator use to modify the existing
compression policy correctly?
A. rm cmp policy
B. set cmp policy
C. add cmp policy
D. bind cmp policy
Answer: B

QUESTION NO: 36
An administrator needs to create a content filtering policy so that the NetScaler switches
browserbased
requests based on domain.
Which expression should an administrator use in the content filtering policy?
A. HEADER Host == http://www.domain.com/

B. REQ.HTTP.URL contains www.domain.com
C. REQ.HTTP.URL == http://www.domain.com
D. REQ.HTTP.HEADER Host == www.domain.com
Answer: D
QUESTION NO: 37
m
An administrator plans to configure a content filtering policy to drop trace and connect methods.
.co
Which expression should an administrator use in the content filtering policy to explicitly drop trace
and connect methods?
sts
A. REQ.HTTP.METHOD != TRACE || REQ.HTTP.METHOD != CONNECT
B. REQ.HTTP.METHOD == TRACE || REQ.HTTP.METHOD == CONNECT
C. REQ.HTTP.METHOD != TRACE & REQ.HTTP.METHOD != CONNECT
lTe
D. REQ.HTTP.METHOD == TRACE & REQ.HTTP.METHOD == CONNECT
Answer: B
tua
QUESTION NO: 38
Ac
Which feature must an administrator configure so that all transactions on a NetScaler which can
be logged are logged by a syslog server?
A. Device counters
B. System counters
C. HTTP transactions
D. Audited commands
Answer: D
QUESTION NO: 39

Scenario: The network administrator at a company has HTTP-Inline and TCP-ECV monitors
bound to services that send traffic to all production servers. A critical application component on
these servers must be ugraded soon. A group of administrators will be working to upgrade this
component as quickly as possible. The upgrade group has guaranteed that 60% of the production
servers will be up at any time but has not guaranteed that any one server will be up at a given
time. During the upgrade period, the network administrator wants the services bound to a server
to be marked as DOWN in the NetScaler system the first time the response timeout is reached.
The network administrator also wants the probe time to reflect the average time it takes to restart
one of the production servers.
Which two parameters must the administrator customize on these monitors to meet the
requirements of the scenario? (Choose two.)
A. Interval
B. Retries
C. Down Time
m
D. Response Timeout
Answer: B,C .co

sts
QUESTION NO: 40
An administrator is configuring custom monitors to determine the state of services based on the
lTe
network traffic of the service. Which two types of services can an administrator monitor with an
inline monitor in NetScaler 9.0? (Choose two.)
tua
A. TCP
B. HTTP
C. HTTPS
D. HTTPS GSLB local
Ac
E. HTTP GSLB remote
Answer: B,C
QUESTION NO: 41
Scenario: An administrator is creating virtual servers to receive encrypted and non-encrypted

HTTP traffic as well as non-encrypted TCP traffic. The administrator plans to forward all traffic
from the NetScaler system to the back-end servers as clear text. How should the administrator
configure the services and virtual servers?
A. Create HTTP type service

Create TCP type service

CreateTCP type vserver
Bind the HTTP type service and TCP type vserver together
Bind theTCP type service and vserver together
B. Create HTTP type service
Create HTTP type vserver
Create TCP type vserver
Bind the HTTP type service and vserver together
Bind the TCP type service and vserver together
C. Create HTTP type service
Create SSL type service
m
Bind the SSL type service and HTTP type vserver together
D. Create HTTP type service
.co
sts
Create SSL type vserver
lTe

Bind the HTTP type service and SSL type vserver together
tua
E. Create HTTP type service

Create SSL type service
Ac

Create SSL type vserver
Bind the SSL type service and vserver together
Answer: D
QUESTION NO: 42
An administrator needs to configure an SSL virtual server for HTTP content switching in an
environment that requires end-to-end encryption. Which type of content switching virtual server
(Front-end) and service (Back-end) should the administrator configure?
A. Front-end SSL, back-end SSL
B. Front-end SSL, back-end HTTP
C. Front-end TCP, back-end SSL_TCP
D. Front-end SSL_TCP, back-end SSL_TCP
Answer: A
QUESTION NO: 43
An administrator needs to configure a monitor to track the health of a POP3 entity in a network
environment that includes a NetScaler system. Which type of monitor must the administrator
configure to track the health of this entity?
A. User
B. Inline
m
C. Load
D. SASP (Server Application State Protocol) .co
Answer: A
sts
QUESTION NO: 44
lTe
Which custom monitor parameter must an administrator configure to receive an SNMP trap if a
monitor probe fails to respond within the specified parameter?
tua
A. Retries
B. Failure Retries
C. Success Retries
Ac
D. Response timeout
E. Response timeout threshold
Answer: E
QUESTION NO: 45
Scenario: An administrator has created a policy expression to identify URLs with the .JSP suffix.
The administrator plans to use the policy expression to prevent URLs with the .JSP suffix from
being compressed when the HTTP response is received.
How can the administrator associate the policy expression and action to achieve the desired
result?

A. Add a filter with the policy expression and the action specified, then bind the policy
B. Configure the action, then add the filter with the policy expression and the action specified
C. Add a compression policy with the policy expression and action specified, then bind the policy
D. Configure the action,then add a compression policy with the policy expression and the action
specified
Answer: C
QUESTION NO: 46
Scenario: An events ticketing company plans to use the content switching feature of NetScaler to
parse traffic so that users purchasing tickets or answering surveys go to group A servers, users
accessing images go to either group B or C servers depending on the ticket category and all
other traffic goes to group D. All servers are in the same web farm.
m
Which two actions must an administrator perform to correctly define the content switching virtual
server so that traffic NOT going to groups A -C gets directed to group D? (Choose two.)
.co
A. Bind a load balancing virtual server to the appropriate service for the web farm
B. Bind the appropriate service to a load balancing virtual server for serving content group D
sts
C. Bind the appropriate load balancing virtual server to the content switching virtual server without
a policy
D. Bind the appropriate load balancing virtual server to the content switching virtual server with
lTe
the appropriate policy for content group D
Answer: B,C
tua
QUESTION NO: 47
Ac
Which type of VLAN is used when an administrator leaves the NetScaler system interfaces on the
default VLAN?
A. Tagged
B. Port-based
C. MAC-based
D. Protocol-based
Answer: B
QUESTION NO: 48
Page 14 of 24
Scenario: The computers at a company were recently infected with the nimda virus. An
administrator at the company plans to prevent this from happening again by using the content
filtering feature of the NetScaler system to terminate a client connection when a possible instance
of the nimda virus is detected. The administrator has already created a policy expression that will
match traffic with ROOT.EXE or CMD.EXE and plans to use the NetScaler default "RESET"
action to terminate the appropriate connections. In order to achieve the desired result, the
administrator should __________ prior to binding the policy at the appropriate level. (Choose the
correct phrase to complete the sentence.)
A. add the filter with the policy expression and the action specified
B. add the filter with the policy expression and then add the action to the filter
C. create the action and then add the filter with the policy expression and the action specified
D. create the action, add the filter, and then add the action and the policy expression to the filter
Answer: A
m
QUESTION NO: 49
.co
Scenario: An administrator is troubleshooting monitoring for web servers in an environment.
Currently, services are often being marked down due to slow back-end servers. The administrator
sts
wants to configure the vserver and services so that existing connections stay open when a service
is marked down but not when a vserver is marked down.
How must the administrator configure the service and virtual server to reflect this dependency?
lTe
A. set lb vserver lbv1 -downStateFlush ENABLED

set service svc1 -downStateFlush ENABLED
tua
B. set lb vserver lbv1 -downStateFlush DISABLED

set service svc1 -downStateFlush ENABLED
C. set lb vserver lbv1 -downStateFlush ENABLED
set service svc 1 -downStateFlush DISABLED
Ac
D. set lb vserver lbv1 -downStateFlush DISABLED

set service svc1 -downStateFlush DISABLED
Answer: C
QUESTION NO: 50
Scenario: An administrator plans on configuring health checks for services bound to web servers
1 and 2 which are listening on TCP port 80 for HTTP and TCP port 443 for HTTPS. Service1
receives the encrypted traffic and Service 2 receives the clear text traffic. Which type of monitor
should the administrator bind to the services to meet the needs of this environment?

A. A TCP monitor to Service1 and Service2
B. An HTTP-ECV monitor to Service1 and Service2
C. An HTTP monitor with the secure parameter selected to Service1 and an HTTP monitor to
Service 2
D. A TCP-ECV monitor with the secure parameter selected to Service 1 and a TCP monitor to
Service 2
Answer: C
QUESTION NO: 51
Scenario: A security administrator wants to monitor the rate at which unacknowledged SYN
packets are received by the NetScaler system for individual VIP addresses. The administrator
plans to configure SNMP on the NetScaler to be informed about synflood rates.
m
Which two traps are set when the set SNMP alarm command is used? (Choose two.)
A. synflood
B. entitySynflood
.co
C. synfloodNormal
sts
D. entitySynfloodNorm
Answer: B,D
lTe
QUESTION NO: 52
tua
An administrator monitoring a NetScaler implementation configures a max client in the

environment. Which information from the Dashboard will clearly indicate to the administrator that
a service is definitely NOT able to handle the workload as configured?
Ac
A. Current request rate

B. Current server connections
C. Current load on the service
D. Current requests in the surge queue
Answer: D
QUESTION NO: 53
An SNMP manager attempted to poll for an OID but received the error message: "response
timeout." Which option could the administrator have misconfigured for SNMPv2 to cause this
error message?

A. SNMP trap
B. SNMP user
C. SNMP group
D. SNMP manager
Answer: D
QUESTION NO: 54
An administrator needs to configure a health check for a set of firewalls that are being load
balanced by the NetScaler system in the network environment. How must the administrator
configure the health check for this environment?
A. Select the secure parameter

B. Select the reverse parameter
m
C. Increase the interval parameter
D. Select the transparent parameter
E. Increase the response timeout parameter
.co
Answer: D
sts
lTe
QUESTION NO: 55
Scenario: An administrator must plan the deployment of a NetScaler system for an environment
that requires:
tua
- all traffic to pass through the NetScaler appliance(s)

- outbound connections from a non-routable subnet
- two web server farms to be load balanced by least connections
Ac
- all consumer web site traffic to be secured with SSL

- all traffic to pass through a network firewall prior to passing through the NetScaler appliance(s)
- fault tolerence
Which two steps must the administrator take to deploy the NetScaler system correctly for this
environment according to best practices? (Choose two.)
A. Configure USNIP mode

B. Configure Layer 2 mode
C. Deploy the NetScaler system in inline mode
D. Deploy the NetScaler system with high availability
E. Deploy the NetScaler system in a logical one-arm mode
F. Configure a router address as a default gateway for each web server farm

Answer: C,D
QUESTION NO: 56
Scenario: An administrator configured a NetScaler system for high availability (HA) and
configured the Failover Interface Set (FIS) feature on the appliances including interface 1/3 and
on interface 1/2 which is UP. The administrator also set an HA monitor on interface 1/3. When the
administrator unplugged the interface 1/3 to test the failover process, it did NOT failover the
primary appliance to the secondary appliance.
Which configuration option prevented the failover from occuring?
A. FIS on interface 1/2

B. FIS on interface 1/3
C. HA monitor on interface 1/3
m
D. HA monitor on any connected interface
Answer: B .co
sts
QUESTION NO: 57
In which scenario would an administrator require two NetScaler systems configured as a high
lTe
availability pair?
A. A business critical application needs to be load balanced.

B. Two firewall devices require configuration in failover mode.
tua
C. Internal access to the intranet is required for an employee expense program.

D. One NetScaler system resides in the DMZ while the second NetScaler system resides in the
internal network.
Ac
Answer: A
QUESTION NO: 58
Scenario: An administrator set up a NetScaler system in high availability mode. The system
keeps failing over unexpectedly. Which two commands can the administrator run to determine the
cause of this issue? (Choose two.)
A. show node
B. stat ns node
C. root@ns# ls -la
D. root@ns# nsconmsg -d event

Answer: A,D
QUESTION NO: 59
An IT security policy at a company requires that a record is created every time someone alters a
system configuration. What must the administrator configure on the NetScaler log to record these
changes?
A. Access logs
Page 17 of 24
B. Event messages
m
C. System counters
D. Audited commands
Answer: D
.co
sts
QUESTION NO: 60
lTe
An administrator should configure Link Aggregation on a 7000 NetScaler system when

__________. (Choose the correct option to complete the sentence.)
A. redundancy is required
tua
B. redundancy on an operation across multiple data rates is required

C. network connections between LAN switches and network servers require more than 8 Gb/sec
D. network connections between LAN switches and network servers require more than 10 Gb/sec
Ac
Answer: A
QUESTION NO: 61
An administrator needs to set up a NetScaler system so that an alert is sent to an SNMP

manager when a specific interface changes state. Which two SNMP traps must the administrator
ensure are enabled to receive the appropriate alerts? (Choose two.)
A. entityup
B. entitydown
C. InterfaceThroughputlow
D. InterfaceThroughputNormal

Answer: A,B
QUESTION NO: 62
Scenario: A company is deploying a NetScaler system in a network environment in which there is

one non-routable subnet and some subnets are open to the public Internet. The administrator
plans to enable Use-Subnet-IP mode and disable Use-Source-IP mode. Which two IP addresses
could be set as source IP addresses for connections to back-end servers? (Choose two.)
A. VIP
B. MIP
C. SNIP
D. NSIP
Answer: B,C
m
QUESTION NO: 63
.co
Scenario: An administrator needs to upgrade a NetScaler system from 8.x to
sts
9.0 in accordance with best practices. The NetScaler system is currently configured with high
availability.
lTe
How should the administrator upgrade the NetScaler system to meet these requirements?
A. Upgrade the primary node and then set it to synch

B. Upgrade the secondary node and then set it to synch
tua
C. Upgrade the primary node and then the secondary node

D. Upgrade the secondary node and then the primary node
E. Re-configure the system as a stand-alone system and use the stand-alone upgrade path
Ac
Answer: D
Explanation:
Page 18 of 24
QUESTION NO: 64
An administrator needs to configure a NetScaler system to route packets that are not destined for
the NetScaler. Which option must the administrator enable so that the NetScaler routes these
packets?
A. L2 mode

B. L3 mode
C. Static route advertisement
D. Dynamic route advertisement
Answer: B
QUESTION NO: 65
How many untagged VLANs can an administrator configure on a single interface?
A. 1
B. 2
C. 16
D. 256
E. 4,096
m
Answer: A
.co
QUESTION NO: 66
sts
Scenario: An administrator is configuring SNMP traps for a newly deployed NetScaler system.
The administrator plans to enable an SNMP trap related to the request and response rates for a
lTe
web server farm. The administrator has just configured the SNMP destination for any generated
alerts. Which object(s) must the administrator configure to receive alerts from the SNMP trap
being configured?
tua
A. Source IP address
B. Threshold levels for the trap
Ac
C. Traffic types to consider as part of the request and response rates

D. Additional IP addresses on which the SNMP service can respond to SNMP queries
Answer: B
QUESTION NO: 67
Scenario: An administrator is planning the deployment of a NetScaler system for a large banking
corporation. The bank has very stringent Internet security policies and auditing procedures. One
of the requirements for the transaction auditing is that the web server logs record the original
client IP addresses. Which two features on the NetScaler could the administrator use to meet the
auditing requirement? (Choose two.)

A. USIP
B. RNAT
C. USNIP
D. Edge mode
E. Client IP insertion
Answer: A,E
QUESTION NO: 68
Which port will an administrator need to open on a network firewall to be able to access the
NetScaler configuration utility through a secured port?
A. 3000
B. 3008
m
C. 3010
D. 3012 .co
Answer: B
sts
QUESTION NO: 69
lTe
Scenario: An administrator is configuring a NetScaler system for an environment that includes

- a DNS server with an IP address of 10.10.10.3
- four web servers with IP address of 10.10.10.4-7
tua
- a network firewall
- default gateway with the IP address of 168.192.10.1
Which command can the administrator use to configure the NetScaler system to resolve DNS
Ac
queries using an external DNS server?
A. add dns server 10.10.10.3

B. add server DNS1 10.10.10.3 -external
C. add dns nameserver DNS1 10.10.10.3
D. add dns server 10.10.10.3 -external 168.192.10.1
E. add lb vserver 10.10.10.4-7 dns nameserver DNS1 10.10.10.3
Answer: C
QUESTION NO: 70
Scenario: An administrator must set up a NetScaler system network with USIP mode enabled.
The NetScaler must be able to preserve client IP addresses in TCP/IP packets reaching the
backend
servers except for connections coming from particular IP addresses that are defined in an
ACL. In the case of connections coming from the IP addresses defined in the ACL, the packets
reaching the back-end servers should receive the NetScaler IP address instead of the client IP
address. On which entity should RNAT be configured to meet the requirements in this scenario
according to best practices?
A. ACL
B. Client
C. Virtual server
D. Back-end server
Answer: A
m
QUESTION NO: 71
.co
During the initial setup of a NetScaler system, an administrator can use the __________ to
correctly set the nsroot password. (Choose the correct option to complete the sentence).
A. Setup Wizard
sts
B. SSL VPN Wizard

C. passwd command
lTe
D. set nsroot user command

E. add nsroot password command
Answer: A
tua
QUESTION NO: 72
Ac
Scenario: An administrator is planning the deployment of a NetScaler system for a large banking
corporation. The bank has very stringent Internet security policies and auditing procedures. One
of the requirements for the transaction auditing is that the web server logs record the original
client IP addresses. Which two features on the NetScaler could the administrator use to meet the
auditing requirement? (Choose two.)
A. USIP
B. RNAT
C. USNIP
D. Edge mode
E. Client IP insertion
Answer: A,E

QUESTION NO: 73
Scenario: An administrator is currently specifying the NetScaler-owned IP addresses for a newly

installed system. The servers in this environment are located on a separate subnet from the
NetScaler appliance but are still routed through the NetScaler. Currently, there are no MIPs
configured on the NetScaler. Which step must the administrator take to ensure that the system
communicates correctly in this environment?
A. Disable USIP mode

B. Enable USNIP mode
C. Create a MIP to use as the NSIP
D. Create a VIP on the subnet with the servers
Answer: B
m
QUESTION NO: 74
.co
What are two actions an administrator can take to prevent failover on a NetScaler system in high
sts
availability (HA) mode and eliminate the possibility of having two primary systems during network
testing of the system? (Choose two.)
lTe
A. Set the primary node to stay primary

B. Configure the HA node to haProp disabled
C. Set the secondary node to stay secondary
tua
D. Configure the HA monitor to OFF for each of the interfaces
Answer: A,C
Ac
QUESTION NO: 75
An administrator is installing a NetScaler system using the command line interface.

Which command must the administrator use to assign a mapped IP address for the NetScaler
system?
A. add ip <mappedIP> -mip

B. set ns ip <mappedIP> type mappedIP
C. set ns ip <mappedIP> <mappedIPSubnet> -type mip
D. add ns ip <mappedIP> <mappedIPSubnet> -type mip
Answer: D

QUESTION NO: 76
An administrator needs to configure a NetScaler-owned IP address for server-side connections in

an environment that has USNIP mode globally disabled on the NetScaler system. Which step
must the administrator take to meet the needs of this scenario?
A. Ensure USIP mode is enabled globally on the NetScaler

B. Configure VIPs instead of SNIPs for the server-side connections
C. Configure a MIP instead of a SNIP for the server-side connections
D. Enable USNIP mode on the vserver entities bound to the back-end servers
Answer: C
m
QUESTION NO: 77
.co
Scenario: A network administrator is implementing a NetScaler system for a large environment.
The administrator will be using these IP addresses when configuring the NetScaler system:
?Internal web server IP address: 192.168.100.12
sts
?NetScaler-owned IP addresses:
NSIP: 10.165.30.45
lTe
MIP: 10.165.30.60
VIP: 12.15.30.62
Which two items could the administrator specify on the NetScaler system to enable
tua
communication with the web server? (Choose two.)
A. A SNIP in the 192.168.100.X subnet

B. A static route to the 192.168.100.x subnet
Ac
C. An intranet IP in the 192.168.100.X subnet

D. A virtual server in the 192.168.100.X subnet
Answer: A,B
QUESTION NO: 78
Which mode must an administrator use to override the default route on the NetScaler?
A. Layer 2
B. SSL VPN
C. Path MTU discovery
D. MAC-based forwarding (MBF)

Answer: D
QUESTION NO: 79
Scenario: An administrator has a new NetScaler system implemented in inline mode and with
high availability (HA). Each NetScaler appliance has four connected interfaces and two pairs per
appliance are configured in inline mode with link aggregation.
Which three steps should the administrator take to establish an HA monitor for each pair?
(Choose three.)
A. Disable all the interfaces that are not connected

B. Configure an HA monitor for the channel interfaces only
C. Configure an HA monitor for the physical interfaces only
D. Ensure that both nodes have the same features licensed
m
E. Ensure that the nsroot password and mapped IP addresses are different for each member in a
pair
Answer: A,B,D
.co
sts
QUESTION NO: 80
lTe
An administrator needs to add a NetScaler system to an inline configuration in a high availability

(HA) setup so that the new node maintains the configurations already existing on the old node
when adding the new NetScaler system to the configuration. Which setting should the
tua
administrator select on the new node to achieve this?
A. Stay primary
B. HA propagation
Ac
C. Stay secondary
D. HA synchronization
Answer: C
QUESTION NO: 81
Which type of content switching vserver must an administrator configure for connection-based
content switching of transport control protocol traffic when the traffic should be decrypted prior to
reaching the back-end server?
A. TCP
B. SSL_TCP

C. SSL_HTTP
D. SSL_Bridge
Answer: B
QUESTION NO: 82 DRAG DROP
An administrator is planning an upgrade from a NetScaler version higher than 6.1 to the
NetScaler 9 version.
In which order should the administrator upgrade the NetScaler system?
Click the Task button to answer.
Click the Exhibit button for instructions on how to complete a Drag and Drop item.
m
.co
sts
Answer:
lTe
tua
Ac
Explanation:

m
.co
sts
QUESTION NO: 83
lTe
Which qualifier designates the source IP of the outgoing packet in a classic policy for NetScaler
9?
A. RES
tua
B. RES.IP
C. RES.HTTP
D. RES.IP.SOURCEIP
Ac
E. RES.HTTP.HEADER
Answer: D
QUESTION NO: 84
Scenario: An administrator for a network environment with multiple subnets is planning to

configure HTTP monitors for services bound to web servers 1 and 2 which are listening on TCP
port 80 for HTTP and TCP port 443 for HTTPS. Service1 receives the clear text traffic and
Service2 receives the encrypted traffic. Which three parameters should the administrator
configure for the custom monitor being bound to Service1? (Choose three.)
A. Interval

B. Secure
C. Reverse
D. Down Time
E. Response Timeout
Answer: A,D,E
QUESTION NO: 85
An administrator plans to configure a redirect URL for a load balancing virtual server so that
requests are sent to the default page of the desired URL. When configuring the redirect URL,
which format should the administrator use so that the request is sent to the correct page?
A. http://www.citrix.com
B. http://www.citrix.com/
m
C. http://www.citrix.com/index.html
D. http://www.citrix.com/%default% .co
Answer: B
sts
QUESTION NO: 86
lTe
The expression "url == *.txt || res.http.header content-encoding == text/html" can be used for
__________ and __________ actions. (Choose the two action types that correctly complete the
sentence.)
tua
A. caching
B. compression
Ac
C. content Switching
D. cache Redirection
Answer: A,B

Citrix 1Y0-A11 Exam

Uploaded by

Document Information

Original Description:

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Citrix 1Y0-A11 Exam

Uploaded by

Copyright:

Available Formats

Citrix 1Y0-A11

1Y0-A11 Basic Administration for Citrix NetScaler 9.0

Updated: Jan 19, 2010

An administrator should configure Link Aggregation on a 7000 NetScaler system when

A. redundancy on a half duplex operation is required

according to best practices?

A. Use the default TCP monitor

"Pass Any Exam. Any Time." - www.actualtests.com 2

A. Client connection count increases

D. Server side request rate decreases

"Pass Any Exam. Any Time." - www.actualtests.com 3

A. setmon monitor-HTTP-1 HTTP -interval 20 milli

C. setmon monitor-HTTP-1 HTTP -resptimeout 20 milli

A. setmon monitor-SVC1-Mon TCP -secure YES

"Pass Any Exam. Any Time." - www.actualtests.com 4

"Pass Any Exam. Any Time." - www.actualtests.com 5

to ensure that specific interfaces are NOT monitored?

A. The root of the System node

C. The interface sub node in the System node

A. Disable monitoring on all connected interfaces

"Pass Any Exam. Any Time." - www.actualtests.com 6

Scenario: An administrator is planning the necessary configurations on a NetScaler system for an

A. The primary appliance reboots.

C. A monitored interface fails on the secondary node.

A company is planning on implementing NetScaler systems in high availability pairs.

"Pass Any Exam. Any Time." - www.actualtests.com 7

minute every two days.

A. View the syslog

"Pass Any Exam. Any Time." - www.actualtests.com 8

A. Disable USIP mode on both nodes

Scenario: A network administrator is deploying a NetScaler system in an environment with a

A. add route 0.0.0.0 0.0.0.0 192.168.10.32

C. add route 0.0.0.0 0.0.0.0 192.168.10.62

E. add route 192.168.10.0 255.255.255.224 192.168.10.62

Scenario: An administrator is configuring a NetScaler system in one-armed mode. The NetScaler

A. Ensure the NSIP is identical on both systems

"Pass Any Exam. Any Time." - www.actualtests.com 9

A. set ns ip snip -mip

Scenario: An administrator is configuring the NetScaler-owned IP address for a network

D. Make the MIP and the NSIP address the same

A. set ns config -ipaddress 10.48.192.17

"Pass Any Exam. Any Time." - www.actualtests.com 10

Scenario: An administrator is planning the deployment of a NetScaler system for a large

A. The NetScaler must act as an ADNS server

"Pass Any Exam. Any Time." - www.actualtests.com 11

A. add node 1 172.16.200.53 on primary

D. Client IP header insertion

"Pass Any Exam. Any Time." - www.actualtests.com 12

vservers for the NetScaler

"Pass Any Exam. Any Time." - www.actualtests.com 13

A. a redirect URL string

"Pass Any Exam. Any Time." - www.actualtests.com 14

A. HEADER Host == http://www.domain.com/

D. REQ.HTTP.METHOD == TRACE & REQ.HTTP.METHOD == CONNECT

"Pass Any Exam. Any Time." - www.actualtests.com 15

Answer: B,C .co

E. HTTP GSLB remote

Scenario: An administrator is creating virtual servers to receive encrypted and non-encrypted

A. Create HTTP type service

"Pass Any Exam. Any Time." - www.actualtests.com 16

Bind the HTTP type service and vserver together

E. Create HTTP type service

Create HTTP type vserver