Citrix Deploy and Manager Citrix ADC13 with Citrix Gateway 1Y0-231 Practice Test

These questions are part of the practice quiz. Start practicing

• Which of the following is NOT a service monitored by the StoreFront monitor probe?
• Which profile can a Citrix Administrator create to configure a default profile that disables TLSv1?
• gotoPriorityExpression describes what in policy binding?
• ICA Proxy is used to provide what type of access in Citrix deployments?
• Which two schemes provide end-to-end encryption while enabling NetScaler to optimize responses?
• Which statement best indicates a cipher suite is obsolete in a modern environment?
• Which statement about unbinding a backend server from a load-balancing virtual server is true?
• Which deployment type involves traffic passing through the ADC while connecting to both client and server networks?
• How can the administrator create a blacklist/allowlist of IPs supplementing IP reputation?
• To represent a 10-minute deny in an ACL, which TTL value should be used?
• Which type of policy should a Citrix Administrator configure to ensure that only users who have data antivirus protection can connect to the environment?
• What can cause not seeing detailed TCP information on an external syslog server?
• What could prevent the VDA machines from registering in Citrix Cloud?
• Which license should be recommended for increasing 300 remote VPN users with Citrix Gateway?
• Which license type must be installed to configure endpoint analysis scans?
• What does the gotoPriorityExpression NEXT indicate in policy binding?
• Which licensing component is required for a NetScaler Unified Gateway deployment?
• In a Citrix ADC high availability pair, what should be true about the nsroot password on both nodes?
• What is a key purpose of AlwaysOn VPN in this context?
• Which quarantine group requirement is needed to downgrade a user to ICA Proxy Only when Endpoint Analysis requirements are not met?
• Which NetScaler feature allows blocking client drives if the client device fails a security scan without changing XenDesktop configuration?
• Which statement about Lights Out Management (LOM) is true?
• Which policy type would enforce a security rule prior to user authentication to prevent changes after login?
• Which is a prerequisite for configuring SmartAccess policies on a Citrix Gateway virtual server?
• Which authentication type can a Citrix Administrator use to enable Citrix ADC AAA dual-factor authentication from a user’s mobile device app?
• Which expression would block DNS requests from subnet 10.107.149.0/24 by matching both UDP and TCP port 53 traffic?
• What can an administrator use to restart a NetScaler MPX appliance and force a core dump for analysis?
• What does a Citrix Administrator need to configure to allow access to Citrix Virtual Apps and Desktops without the use of a VPN or a clientless-access connection?
• What is the effect of enabling caseSensitive ON on a vserver in terms of host header matching?
• What action should you take to revert a misconfiguration when there is no backup?
• Where should a Citrix Administrator configure SmartControl restrictions?
• Which of the following is not listed as a logon option for clientless access in Citrix Gateway?
• If no cipher suite is negotiated during an SSL handshake, what is the most likely outcome?
• Which policy setup should be used to forward requests to Service_1 when the HTTP Host header contains xenapp.citrix.com on a load balancing virtual server?
• What is the primary role of a content-switching virtual server?
• Why is the SSL virtual server down in this scenario?
• In the given Responder policy, what type of traffic is evaluated by the policy?
• Which statement about NSIP management access is correct?
• In a Citrix Gateway Unified Gateway deployment, AAA-TM session policies are bound to which object?
• What is the effect of binding the Admin_group dataset to IPs 192.168.149.10, 192.168.149.39, 192.168.149.49 and binding POL_1 to vserver lb_vsrv_www?
• Which statement best describes the CLI syntax to configure case sensitivity on a vserver?
• Which NetScaler utility should you use to troubleshoot by diagnosing authentication issues when bypassing NetScaler works?
• To provide users with multiple logon options after successful authentication for clientless access, which option is needed?
• Which statement about endpoint analysis (EPA) scans for Citrix Gateway is accurate when considering device types listed in the material?
• What type of policy can be applied to a NetScaler Gateway virtual server to limit access to XenDesktop resources if the user device does not meet security requirements?
• In an HA pair, what is the purpose of configuring a VMAC address?
• When binding two rewrite policies with NEXT, what is the effect on subsequent policies?
• For a load-balancing vServer with three identical backend servers using round-robin, what is the most efficient method to take one backend server offline for changes without affecting traffic to others?
• For SSL offload, which certificate binding is required on the NetScaler?
• Which of the following statements correctly describes the result of binding VLAN 20 to interface 1/1 if the interface was previously bound to VLAN 40 and the native VLAN remains 40?
• Which tool can be used to verify that a policy is bound and shows the number of hits?
• Which configuration would you use in Citrix ADM to email alerts when thresholds are exceeded?
• Endpoint analysis scans require which license type?
• Which feature provides centralized authentication, authorization, and accounting on Citrix ADC?
• What should a Citrix Gateway administrator configure to ensure users accept the terms and conditions before they can log on?
• If the Citrix ADC receives a packet destined for a MAC address owned by the ADC, but the destination IP does not belong to the ADC, and Layer 3 mode is enabled by default, what will the ADC do with the packet?
• In the provided MAC-forwarding scenario, which interface is bound to VLAN 10?
• Which step is essential to integrate an existing CERT-based authentication policy on Citrix Gateway?
• In a multi-tenant scenario with several acquired companies, what hardware and configuration enables each company to have its own NetScaler instance for VPN, load balancing, and throughput?
• Which load-balancing method would direct new connections to the server with the smallest expected response time?
• Which mode allows the NetScaler to forward packets that are not destined for IPs configured on the appliance?
• Citrix micro VPN features overview.
• What does the administrator need to do to recover quickly after an outage with no backup?
• What upgrading flexibility does SDX provide in this scenario?
• In a deployment where back-end servers must only reach the client through the Citrix ADC, which deployment mode should be used to ensure the ADC is transparent to the clients and servers?
• With the vserver configured as caseSensitiveON using the command 'set cs vserver Vserver-CS-1 -caseSensitiveON', which outcome occurs for a user requesting HTTP://SERVER.CITRIX.LAB?
• To remove health checks from specific bound services, which action should the administrator take?
• Which command line interface command would configure an NTP server on NetScaler?
• USIP mode stands for what?
• Which option best describes the purpose of Secure Web Gateway in Citrix ADC deployments?
• Which type of policy can be applied to a NetScaler Gateway virtual server to limit access to XenDesktop resources if the user device does not comply with security requirements?
• Which NetScaler feature can create a custom footer on a NetScaler Gateway login page?
• An HTTP request to http://xenapp.training.lab/url1 will be processed by which virtual server according to the routing rules?
• Which binding sequence properly attaches POL_1 and POL_2 with NEXT and END semantics to a vServer?
• Which Citrix ADC ACL command enables bridging traffic originating from 192.168.10.200?
• What is the first thing a Citrix Administrator should create when creating a Server Certificate for NetScaler to secure traffic?
• Expired SSL certificates primarily affect which aspect of an SSL connection?
• A Citrix ADC has Interface 1/1 bound to VLAN 40. After executing bind vlan 20 ifnum1/1, what is the result?
• In GSLB dynamic proximity RTT measurement, which pair defines the round trip time used for load decisions?
• Which built-in command policy permission level provides read-only access and the ability to enable and disable services and servers for other admins?
• Which capability is provided by the Secure Web Gateway deployment?
• How does Citrix ADC communicate IP-to-MAC address bindings that have changed to switches and routers during a failover of an HA pair?
• In a one-arm Citrix ADC deployment with tagall enabled and VLANs 20, 30, and 40 configured, which VLANs are tagged on the interface?
• In a StoreFront SSO scenario, which virtual server type enables a secure external single URL?
• To ensure that POL_2 is evaluated after POL_1 when binding rewrite policies to a LB vServer, which binding configuration is correct?
• Which tool provides visibility into gateway-related incidents across gateways, including Endpoint Analysis and SSO failures?
• Which statement describes the effect of the Responder policy bound to a vserver with type REQUEST?
• Which policy type defines criteria for granting access to internal resources after user authentication?
• Which action should be taken in a Citrix ADC high availability pair to keep the primary node in place?
• The rewrite action 'add rewrite action sync_date replace http.res.date sys.time' updates which header in the HTTP response?
• Which authentication configuration does the Unified Gateway Wizard configure?
• Which licensing is associated with enabling endpoint analysis prerequisites for SmartAccess?
• Which Citrix ADC feature is used to export application-level traffic data to external analytics platforms?
• Which type of NetScaler Service Monitor can test a three-way handshake between the NetScaler and the back-end server?
• To disable USB redirection, which policy type would you configure?
• Which ACL command is used to configure a basic IPv4 access-control list on Citrix ADC?
• In a scenario with a junior administrator configuring a Content Switching virtual server on an HA pair, the next day a senior administrator finds the configuration missing. What is the most likely cause?
• Which ACL type is used to deny traffic based on the source IP with a TTL parameter?
• An administrator notices that users trying to access https://mycitrix.training.lab/exchange2016/owa are redirected to CAS_vserver_www instead of CAS_vserver_owa. Which configuration change resolves the issue?
• What is the most cost-effective upgrade to handle forecasted growth in an SSL-capable Citrix ADC environment?
• In configuring SmartAccess, which rule ensures the SmartAccess filter name on the Delivery Group matches the Citrix Gateway virtual server name?
• Which SSL offload setting should be configured to provide end-to-end encryption with caching and compression for an externally accessible website?
• For load-balancing web servers in a Linux environment with budget constraints, which NetScaler deployment is appropriate?
• Access control is also known as what?
• If an SSL handshake fails due to no cipher suite being negotiated, what is the most likely cause?
• Which option best describes how to apply the X1 Receiver theme to a NetScaler Gateway to match StoreFront?
• To fix domain session cookie resolution issues during AAA authentication, which DNS configuration is recommended?
• Which authentication method supports multiple factors or methods and can be configured as part of the Citrix ADC authentication flow?
• Which component is used to filter IPv4 addresses in Citrix ADC?
• In a policy evaluation scenario, which policy takes effect in the event of a conflict?
• During a SAML authentication test across internally hosted apps, after a successful login to one partner app, subsequent apps open without explicit authentication requests. Which statement best explains this behavior?
• Which vserver is targeted by the POL_1 policy binding in the given commands?
• Which parameter should be configured on a GSLB virtual server to ensure a service continues to serve existing client requests after the service is manually disabled and then stops accepting new ones?
• To minimize administrative effort when aligning the gateway with StoreFront's X1 Receiver portal theme, which option should you select?
• In a content-switching policy sequence where CSPOL_7 has priority 100 and others have higher numbers, which policy is evaluated first?
• What action should you take when ns.log stops scrolling after reaching 100 KB?
• Which statement about clientless access policies best describes their function?
• What is a likely cause of the Secondary state being Unknown after moving to a new switch and capturing traffic?
• Which command should a Citrix Administrator use to configure a Content Switching virtual server for implementing the Secure Web Gateway in the transparent proxy mode?
• To accommodate increased traffic on a single SDX instance that has a 2 GB dedicated bandwidth per instance, which action is recommended?
• Which statement best describes the purpose of a Content Switching virtual server?
• Which configuration enables blocking access to multiple URLs for security purposes using policy and responder rules?
• Which configuration provides end-to-end encryption while allowing NetScaler to optimize responses?
• To allow internal users to access internal web applications through Web access only, which configuration mode should be configured on the Citrix Gateway?
• In Front-End Optimization (FEO), which action moves CSS to the document head to optimize rendering?
• Which option best describes the Unified Gateway Wizard configuration scope?
• To allow Contractors to reach all internal IP addresses but prevent SSH connections, which access policy expression should be used?
• In a default ADC configuration, if VLAN 20 is bound to an interface as tagged, which VLANs will be bound as tagged?
• For a large Citrix environment with thousands of load-balanced backend servers, which NetScaler MAS feature enables detailed monitoring and troubleshooting?
• Which Citrix ADC platform is a hardware-based, multi-tenant capable appliance designed for high-performance workloads?
• Endpoint Analysis can dynamically add users to an authorization group after scanning. What happens when a user joins that group?
• Which statement best describes the effect of the redirectURL command when applied to a vserver?
• In an HA configuration, should the SNIP addresses of the primary and secondary devices be the same or different?
• Where should a CERT authentication policy be bound to apply to Citrix Gateway traffic?
• What command should you run to resume monitoring after stopping with CTRL+C during log viewing?
• When troubleshooting an SSL-based virtual server and a packet capture shows plaintext data, what is the most likely misconfiguration?
• In a Citrix ADC load balancing setup, which load-balancing method is used by default at startup of a vServer?
• Which log type records statistics, metrics, and debugging information on a Citrix ADC in a proprietary binary format?
• Scenario: MAC-based forwarding with two interfaces; The NetScaler receives a packet for VIP 192.168.30.30 on interface 1/1. Which interface will send a reply?
• Which component can filter IPv4 addresses?
• Which scenario best indicates a cipher suite is obsolete for current clients?
• What is a primary role of a Citrix ADC in application delivery?
• Which statement best describes bridge groups in a Citrix ADC deployment?
• Which file would you inspect to gather logs for troubleshooting authentication issues on NetScaler?
• What is the primary purpose of clientless access in Citrix Gateway?
• In an AAA group scenario, if LDAP misconfiguration prevents access, which misconfiguration is most likely?
• In the scenario, which IP address is bound to VLAN 10?
• Which platform is hardware-independent and designed for multi-tenant deployments on Citrix ADC?
• Which condition could cause a failover in a Citrix ADC high availability pair to not occur, keeping the secondary from becoming primary?
• What binding is required for an SSL vServer to perform TLS handshakes with clients?
• A clientless access policy is composed of which two components?
• In a GSLB vServer configuration, which method should be used to route to the next available data center based on proximity?
• To achieve end-to-end encryption while allowing NetScaler to optimize responses, which configuration is used?
• Scenario: A company has three departments and wants to use the same IP address for their load-balanced applications. How can this be configured on the Citrix ADC?
• An administrator wants to restrict access to a load-balancing virtual server (192.168.100.25) for 10 minutes using an ACL. Which command best accomplishes this?
• To ensure management changes are made on the Primary NetScaler in an HA pair, which address should have Management Access enabled?
• Which Citrix ADC platform offers an out-of-the-box, hardware-independent, multi-tenant solution?
• Which parameter controls the order of policy evaluation on a vServer?
• Which load-balancing method would ensure that the server with the least network utilization receives new connections?
• Which command option is used to configure a Secure Web Gateway content switching vserver with explicit-auth-vs?
• What is a likely reason for SNMP alerts not being received?
• Which expression confirms that all client certificates presented to the authentication vServer remain valid until the year 2023?
• To meet a requirement where internal users use corporate credentials and partners use their own directories without replication, which authentication approach is recommended?
• Which setting determines whether SSL data is encrypted on the wire?
• Which scenario will cause automatic high availability (HA) synchronization to fail?
• Which feature provides secure access to a sensitive internal web server load-balanced by a Citrix ADC?
• Which of the following is NOT a Classic policy option?
• Which mode is used to avoid asymmetrical packet flows and multiple route/ARP lookups?
• Which NetScaler mode uses the client IP address as the resource IP for connections from the NetScaler to servers?
• Which statement best describes the Least Connection load balancing method in GSLB?
• Which tool provides visibility into Endpoint Analysis and Single Sign-On failures since implementing the new Gateway?
• Based on the rewrite policy exhibit, which statement is true for the header insertion?
• Which statement best describes a Two-Arm deployment of a Citrix ADC?
• Which CLI command adds the NTP server 192.168.55.54 to a NetScaler appliance?
• Which connection method can route internal ICA connections through NetScaler without modifying the existing network routing?
• What is the purpose of the nslog log type on Citrix ADC?
• What can a Citrix Administrator configure to access RDP shortcuts?
• Which option would you select to reduce the number of health checks sent by NetScaler to backend resources?
• Which statement about bridge groups and VLANs is true?
• In a Global Server Load Balancing Active/Active environment, when the connection proxy is used as the site persistence method, what is used to source the traffic?
• What is the primary purpose of a TCP profile in SSL traffic handling on a Citrix ADC?
• In a NetScaler HA pair, which address is commonly used to perform management changes to ensure they affect the primary?
• In GSLB dynamic proximity RTT measurement, which option describes the entities between which RTT is measured?
• In the MAC-based forwarding scenario, which VLAN is bound to IP 192.168.20.10?
• What is the name of the policy used to handle the /owa path in the example?
• Where should authentication policies be bound to enforce user authentication on the Citrix Gateway?
• Access control refers to?
• Which component of nFactor is primarily responsible for presenting the authentication prompt to users?
• When enabling Layer 2 mode on a NetScaler SDX deployment with multiple interfaces, which configuration most effectively stabilizes interface status?
• Which step can a Citrix Administrator take in order to use the default compression policies?
• Which certificate configuration step prevents trust errors when users access a TLS-enabled server behind Citrix ADC?
• To achieve independent administration for three departments on a single Citrix ADC, which configuration isolates department-level administration most effectively?
• To consolidate multiple hostnames on a single SSL virtual server, which certificate type is most suitable?
• SNMP traps showing entity UP and DOWN messages relate to what?
• In a network where a Citrix ADC has one network interface to the client network and another to the server network and all traffic flows through the appliance, what deployment type is this?
• Which of the following best describes the role of a content-switching virtual server in policy binding?
• Which Citrix Gateway feature should a Citrix Administrator configure to allow traffic for specific iOS applications only?
• In the rewrite policy example, which header is inserted into every REQUEST?
• Which NetScaler log file is used for real-time troubleshooting?
• Which description best defines a cipher suite?
• If CSPOL_7 is invoked, which policy should be invoked next?
• Which set of items can a Citrix Administrator change when configuring a portal theme for users?
• What is required to access Citrix Virtual Apps and Desktops without a VPN?
• In LDAP integration on Citrix ADC, after creating an LDAP group that matches the LDAP group name, what must be configured to define the group’s permission level?
• In a Citrix ADC high availability setup, what is the recommended practice regarding nsroot credentials across nodes?
• Which expression would configure a Citrix Gateway to accept incoming connections initiated exclusively from web browsing sessions (not Citrix Receiver)?
• In the OWA redirection scenario, which action name is bound to the policy CAS_policy_cs_owa?
• Which CLI command enables case sensitivity on a specific vserver?
• What is the effect of the command set csv server vserver-CS-1 'redirectURL http://www.newdomain.com/mysite/ ?' when the vserver is DOWN?
• Which step is a required part of completing authentication in an AAA redirect flow?
• Which Citrix ADC feature is used for exporting application-level traffic data for analytics?
• Which rewrite action correctly changes the HTTP request version to HTTP/1.0?
• Which configuration enables automatic time synchronization on the Citrix ADC?
• What does the expression diameter.req.avp(264).value.eq('host1.example.net') specify?
• A week after configuring an ACL, it disappears. What is the most likely cause?
• Which policy type enables access decisions to XenApp applications based on HDX settings?
• In a GSLB vServer, what does the backup method LEASTCONNECTION represent when the primary RTT method is unavailable?
• In Citrix ADC, which component governs the cryptographic algorithms used for SSL connections?
• In a scenario with a newly configured AAA virtual server SAML_SP that is DOWN, which action is indicated as the fix?
• Which authentication option is commonly used as a second factor to enhance security in Citrix ADC?
• In an SSL offload deployment, which rewrite action changes all occurrences of 'http://' in the HTTP response body to 'https://'?
• Which scenario could cause a Responder policy to loop, and how is it avoided?
• Which factor can content switching use to route a request to a specific server?
• Which technical support tool should you use to gather all logs and configuration information from a NetScaler to forward to the Support Engineer?
• Which rewrite option correctly changes the HTTP request version to HTTP/1.0?
• Which statement best describes MBF behavior on Citrix ADC?
• Which statement is true about ACLs when comparing Extended ACLs to Simple ACLs?
• In an HA pair, which action places the Secondary ADC in the correct role as described in configuration steps?
• In a Citrix NetScaler HA pair that must operate across different subnets, which setting enables independent network configuration?
• A user reports authentication failures for Citrix Gateway. Which Citrix tool provides data on failure times and affected users?
• In the same scenario, which VLAN is bound to IP 192.168.30.10?
• Which Citrix ADC platform should an administrator choose to accommodate increasing bandwidth and performance demands?
• Which qualifier is used to configure the Content filter action to modify the HTTP header of an HTTP Request?
• What is a direct consequence of not configuring an SSL cipher suite on an SSL-based virtual server?
• Which configuration would resolve an ARP issue after an HA failover in a NetScaler active-passive pair?
• A redirect loop occurs when a Responder policy redirects root page requests to the home page. Which policy expression should be used to fix it?
• In a multi-proxy environment behind NetScaler, with USIP mode enabled and short session timeout, which persistence setting should be used to prevent frequent disconnects?
• SAML is an authentication protocol based on:
• Which type of virtual server would you use to enable SSO to storefront via an external, secure, single URL?
• What licensing action is recommended to handle December traffic spikes on an MPX 5550 environment?
• Which Redirect_Act action is used in the example to redirect traffic?
• Which utility can resolve DNS requests that are looked up frequently on the network?
• If users logon through Citrix Gateway and pass EPA but cannot see the client, which policy group governs visibility?
• SmartAccess availability across Citrix ADC Editions?
• Which mode on the Citrix ADC enables using the client IP address as the source IP for connections to servers?
• What is the purpose of the revision history feature in Citrix ADC?
• After creating an LDAP group on NetScaler that matches the LDAP group name, what is the next required configuration step to authorize group members?
• What is one reason to configure the AlwaysOn VPN feature?
• To address traffic bottlenecks on a Citrix ADC MPX, which change is most appropriate to increase bandwidth?
• Which single timeout setting would terminate a user session after 15 minutes of inactivity?
• What is a likely reason Citrix ADM cannot display all virtual servers when managing multiple ADCs?
• If SSLv3 is disabled on a vServer, which handshake protocol remains acceptable for client connections?
• Which license is required to enable SmartControl?
• Which load-balancing method is the simplest and does not consider current load or connections?
• Which statement about clientless access policies is true?
• Which policy type is appropriate to enforce device posture checks before granting XenDesktop access on NetScaler Gateway?
• Which action would administrators take to enhance TLS security by enabling a modern protocol?
• To address a saturated data interface on an SDX, which action should the administrator take?
• Which statement describes NetScaler VPX?
• What is the effect of binding a CERT authentication policy to the Citrix Gateway virtual server?
• Which setting reduces server load and increases SSL transactions per second on a SSL virtual server created with default settings?
• To grant a Junior Administrator full access except shell, user configuration, and partition configuration, which pre-existing command policy would meet the needs?
• In the context of configuring a DNS proxy, which statement correctly describes setting the TC bit and rcode NOERROR?
• To resolve plaintext captures in SSL traffic, what action should you take first?
• To restrict contractor access by group membership with the prefix “con,” which expression correctly checks membership?
• Which license is appropriate for supporting an additional 300 VPN users?
• On a GSLB vServer, which persistence setting is shown as NONE in the configuration?
• If no SSL cipher suite is selected for an SSL-based virtual server, which outcome is most accurate?
• Given the commands that bind Admin_group IPs and create a POL_1 policy bound to a vserver, what is the effect on access to the vserver?
• Which mode preserves the client's IP in server connections during a single-hop deployment?
• Which two items are true regarding the First-Time wizard on a NetScaler appliance?
• After creating an LDAP group on Citrix ADC whose name exactly matches the LDAP group, what is the next required step to assign permissions?
• A XenDesktop Administrator updated a StoreFront server to the X1 Receiver portal theme. To align the gateway with StoreFront with minimal effort and without disrupting connectivity, what should you do?
• In transparent mode, how do clients reach the servers?
• What is the recommended action if you need to verify that all client certificates presented to an authentication vServer are valid up to a specific year?
• What type of policy governs authorization group assignment based on Endpoint Analysis results?
• What does SmartAccess primarily control in a Citrix environment?
• In a Citrix ADC deployment with one interface in the DMZ and the other on the internal network, which deployment mode should be used?
• What is the role of a local group added as an authorization group based on Endpoint Analysis results?
• In the OWA policy rule, what does HTTP.REQ.URL.SET_TEXT_MODE(IGNORECASE).CONTAINS("/owa") check for?
• A user passes Endpoint Analysis but cannot see client choices at logon. Which feature should be disabled to reveal client choices at logon?
• After creating and correctly configuring a custom user monitor, from where do the monitor probes originate by default?
• If you want to customize the authentication landing page in Citrix ADC using the nFactor framework, which component should you modify?
• What is the primary use of content switching in Citrix ADC?
• In configuring SmartAccess, which setting should be unchecked on the Citrix Gateway virtual server?
• To address a VPX HA failover issue without gratuitous ARP (GARP) support, what immediate step can you take?
• Which mode of Citrix Gateway should be used to allow ICA traffic from the client to internal resources without requiring client installation of a plugin?
• Which statement is true regarding SSL offload prerequisites on NetScaler?
• Which NetScaler tool would you use to troubleshoot resets on an intranet server load-balanced by NetScaler?
• To enforce granular user environment attributes for XenApp and XenDesktop on NetScaler Gateway, which policy type should you use?
• What is the primary purpose of a Subnet IP (SNIP) in Citrix ADC?
• How can the administrator use Citrix Application Delivery Management to alert when the number of connections to virtual servers exceeds a threshold?
• Which NetScaler deployment option is a virtual appliance for virtualization environments?
• Which feature can a Citrix Administrator use to create a consistent set of front-end SSL parameters across multiple SSL virtual servers?
• Which symptom would most strongly suggest SSL encryption is not configured on a server?
• In Layer 3 mode, which is enabled by default, if a packet's destination MAC address belongs to the Citrix ADC but the destination IP address does not belong to the ADC, what will the ADC do with the packet?
• If a team member has full admin partition permissions but cannot use aaad.debug in the CLI, what is the most likely reason?
• For enabling Microsoft SharePoint access via Citrix Gateway from a web browser with the Gateway plug-in, which mode should be configured?
• To quarantine users who attempt to take a screenshot during a session, which Citrix ADC policy should be configured?
• Which statement is true about end-to-end encryption with NetScaler optimization for responses?
• Which statement best describes the function of the Rewrite feature in NetScaler Gateway?
• When binding session policies for clientless access, which option is considered a valid bind point?
• Which virtual server type is used to support an SSL rewrite policy?
• Which factor is cited as a cause for newly added configurations on a Content Switching virtual server to disappear when tested later on the HA pair?
• Which Citrix ADC-owned IP address will send traffic from the Citrix ADC to NTP servers by default?
• In a DNS Proxy configuration, which command outcome corresponds to creating a DNS Response with the TC bit set and rcode NOERROR?
• Which action completes LDAP integration for administration after creating a group that matches an LDAP group?
• Which expression matches requests where the host header equals www.example.com?
• Which value represents the highest precedence in content-switching policy priorities?
• Which command sets the Secondary Citrix ADC to STAY SECONDARY in the HA Node settings?
• Which authentication approach is described as using two LDAP advanced policies and one SAML advanced policy within an nFactor flow to differentiate internal and partner users?
• For a published application load-balanced through the Citrix ADC, which ADM feature helps gather metrics such as response time, client network latency, and server-side processing time?
• Which Citrix feature can be configured to block local printer access for remote users while allowing access when connected from the corporate network?
• Which NetScaler utility would you use to collect logs for troubleshooting authentication issues?
• SmartControl is implemented at which level, and what license is typically required?
• Which Citrix Application Delivery Management feature is used to monitor TCP performance and generate actionable insights?
• What is the first step often cited when creating a certificate for NetScaler security?
• How can two-factor authentication with tokens be provided in a XenDesktop with NetScaler Gateway environment?
• What could cause an HTTP vServer configured with Least Response Time to appear to use Round Robin?
• Which type of virtual server enables SSO to storefront through an external secure single URL?
• To apply an existing certificate-based authentication policy to a Citrix Gateway virtual server, which action is essential?
• Which protocol provides real-time verification of certificate revocation status for client certificates?
• If a network administrator wants to verify the case sensitivity setting on Vserver-CS-1, which option below correctly reflects the effect?
• Which deployment option provides hardware-based, scalable solution?
• Which AAA policy expression would allow all users access through a virtual server?
• Which Citrix ADC feature can be used to reuse existing TCP connections?
• Citrix Administrator needs to deploy a Citrix ADC between the servers and the client, with servers only allowed to reach the client through the Citrix ADC. In which mode should the administrator deploy the Citrix ADC?
• Which expression matches the policy used to ensure client certificates presented to authentication services remain valid through GMT 2023 without expiration before that date?
• A Citrix Administrator adds 10 new servers and wants only them to receive twice the connections of the old servers without changing overall load balancing. What weight and target servers should be used?
• In a GSLB environment, what is the effect of executing set gslb site SiteB triggerMonitor MEPDOWN on the remote site’s default service monitoring?
• In policy evaluation, which policy scope provides the final decision when conflicts arise?
• Which topology is commonly referred to as an inline ADC?
• If training.citrix.com cannot be resolved from the resolver cache or Local DNS, where will the request be forwarded next?
• In SmartAccess configuration, where should the Callback URL be defined?
• Which option correctly lists the two policy types that can be applied to a Citrix Gateway virtual server to ensure only domain-joined corporate laptops are allowed?
• To consolidate three SSL websites with the same content into a single, load-balanced SSL virtual server, which binding approach is appropriate?
• MAC-based forwarding (MBF) is designed to avoid which combination of issues?
• Which clue most strongly suggests you should inspect the cipher suite configuration on an SSL-based virtual server?
• Which expression can block all DNS requests from subnet 10.107.149.0/24?
• In configuring SmartAccess, which command should be executed on any Citrix Delivery Controller to trust requests sent to the XML service port?
• Which command ensures the Primary Citrix ADC stays PRIMARY in the HA Node settings?
• When configuring a load balancer, which monitor type and field combination is used to monitor HTTP-ECV with a keyword in the Receive String field?
• In the NetScaler configuration for HTTP Callout, which element triggers the call to the HTTP Callout server?
• Which CLI command adds the OWA policy CAS_policy_cs_owa with a rule to match the /owa path in a case-insensitive manner?
• Which configuration uses a responder policy to block POST requests with content length greater than 10000 bytes?
• If a device has MBF, USIP, USNIP, and Layer 3 modes configured, which mode should be disabled to allow routing through a newly added router?
• Which platform provides multi-tenancy by creating separate NetScaler Instances for each tenant on a single device?
• To prevent SSL/TLS trust errors when a user accesses a server behind Citrix ADC, what certificate configuration step is required?
• Which deployment method is supported for an RDP proxy?
• Which item is used to verify the binding and number of hits on a policy in NetScaler Gateway sessions?
• Which statement accurately describes management access using SNIPs and ACLs on NetScaler?
• To ensure high availability when both nodes could fail a health check, which HA configuration should be applied?
• When tagall is enabled on an interface configured with VLANs 20, 30, and 40, which additional VLAN is tagged on the interface?
• Which binding enables using a wildcard certificate with a content-switching virtual server?
• In a single-hop deployment, which mode on the Citrix ADC uses the client's IP address as the source IP for ADC-to-server connections?
• Which address should be used to perform management changes to ensure they affect the primary in an HA NetScaler pair?
• What could cause failover not to work in a Citrix ADC HA pair?
• In a rewrite policy, which option correctly rewrites the HTTP response body from 'http://' to 'https://'?
• Which set of rewrite policies should be bound to a load-balancing vServer named lb_vsrv so that POL_2 is evaluated after POL_1?
• To scale bandwidth and offload SSL, which Citrix ADC platform is recommended as the primary hardware appliance?