New Citrix CCA-N Certified 1Y0-240 Study Guide

1. A Citrix Administrator wants to configure independent and isolated access on a single appliance for three different departments to allow them to manage and isolate their own applications.

How can the administrator isolate department-level administration?

2. A Citrix Administrator is configuring Unified Gateway with authentication policies.

Where should the administrator configure NetScaler Gateway authentication policies?

3. Scenario: A Citrix Administrator needs to implement a Content Filter policy to ensure the following conditions are met:

The user with source IP 10.100.32.211 should NOT be allowed to access the vserver 10.10.10.1. All other users from subnet 10.100.32.0/24 should have access to the vserver 10.10.10.1. Access to the vserver should be blocked for all the other users.

Which policy expression will meet this requirement if the policy action is RESET and the policy is bound to the server (VIP:10.10.10.1)?

4. Scenario: A Citrix Administrator observes that when the client gets redirected to the URL www.citrix.com/owa/search?q-userbame, an HTTP 503 response is received from the Content Switching vServer.

The relevant configuration is as follows:

How will the administrator correct the issue?

5. A Citrix Administrator needs to match the host name ‘www.example.com’ in all HTTP requests.

Which expression, when used, meets this requirement?

6. What is the first thing a Citrix Administrator should create when creating a Server Certificate for NetScaler to secure traffic?

7. Scenario: A Citrix Administrator would like to grant access to a Junior Administrator on the NetScaler. The administrator would like to grant full access to everything except the following:

Shell Access User Configuration access Partition Configuration access

Which pre-existing command policy would meet the needs of the scenario?

8. Scenario: A Citrix Administrator used the commands in the screenshot to apply the user-agent check to all the virtual servers.

However, the administrator observed that it is NOT being applied to the vServer lb_vsrv_www.

Click on the ‘Exhibit’ button to view the screenshot of the command-line interface.

What can be causing this issue?

9. Scenario: A Citrix Administrator is troubleshooting a NetScaler issue. The administrator goes to the command line and from the Shell, tails the ns.log to view the log in real time to find the issue. After a few minutes, the administrator noticed that the logs stopped scrolling and the issue was missed.

How can troubleshooting continue using the ns.log?

10. What is the effect of the set gslb parameter C GSLBvcStateDelayTime 10 command on the Global Server Load Balancing (GSLB) environment, when Metric Exchange Protocol (MEP) is enabled?

11. Before:

<link rel=”stylesheet” type=”text/css” href=”sheet/abc.css”>

<link rel=”stylesheet” type=”text/css” href=”sheet/xyz.css”>

After:

<link rel=”stylesheet” type=”text/css” href=”sheet/abc.css+ xyz.css”>

Which Front-End Optimization (FEO) action can a Citrix Administrator use to achieve the results above?

12. A Citrix Administrator would like to configure the network in a way that will allow the traffic requests coming from the client to pass through the NetScaler, but the responses from the back-end resources will be sent directly to the client bypassing the NetScaler.

Which feature can the administrator use for this configuration?

13. A Citrix Administrator needs to block all the DNS requests from subnet 10.107.149.0/24.

Which expressions can the administrator use to match the required traffic?

14. Scenario: User authentication is failing through the NetScaler. A Citrix Administrator checked the Authentication, Authorization and Auditing (AAA) policy, action and virtual server and verified that the correct configuration was in place. The administrator bypassed the NetScaler and the authentication worked.

Which NetScaler utility can the administrator use to troubleshoot the access issue?

15. Scenario: A Citrix Administrator manages an environment that has three SSL websites, all serving the same content.

www.company.com

www.company.net

www.company.org

The administrator would like to consolidate the website into a single, load-balanced SSL virtual server.

Which action can the administrator take to use a single SSL virtual server?

16. In the Global Server Load Balancing (GSLB) configuration when dynamic proximity is implemented, the round trip time (RTT) between the _____________ and _____________ is measured to make the load decision. (Choose the correct option to complete the sentence.)

17. Scenario: A Load Balancing virtual server (lb_vsrv_www) is configured to load balance service_1 and service_2. A Citrix Administrator needs to bind a content filter policy to the virtual server, such that if the user tries to access http://xenapp.citrix.com, then the request should go to service_1.

Which policy can the administrator use in this scenario?

18. Scenario: A Citrix Administrator is concerned about the amount of health checks the NetScaler is sending to the backend resources. The administrator would like to find a way to remove health checks from specific bound services.

How can the administrator accomplish this?

19. Which scenario will cause automatic high availability (HA) synchronization to fail?

20. Users are experiencing resets from the Intranet server website, which is load-balanced through the NetScaler.

Which NetScaler tool can a Citrix Administrator use to troubleshoot the reset issue?

21. Which policy will allow a Citrix Administrator to modify all the URLs in the response body from “http://” to “https://” in an SSL offload deployment?

22. Scenario: A Citrix Administrator notices user sessions are disconnecting and reconnecting more often this week than last week, signaling a problem.

The administrator troubleshoots this issue and prepares to resolve it using persistence.

However, the following consideration apply in the environment:

It is a multi-proxy environment behind the NetScaler. Use Source IP (USIP) mode is enabled and applied to the services. The session timeout is very short. All users connect from the same location.

The administrator can use persistence based on the ______________ setting to resolve this issue. (Choose the correct option to complete the sentence.)

23. Scenario: A user is attempting to access a web server which is load balanced by the NetScaler using HTTPS. The user received the following message:

SSL/TLS error: You have not chosen to trust “Certificate Authority” the issuer of the server’s security certificate.

What can a Citrix Administrator do to prevent users from viewing this message?

24. View the Exhibit.

A Citrix Administrator has configured the commands using the command-line interface.

Click on the ‘Exhibit’ button to view the screenshots of the command-line interface.

What will be the effect of the rewrite policy, based on the exhibit?

25. Which command should a Citrix Administrator use to configure a Content Switching virtual server for implementing the Secure Web Gateway in the transparent proxy mode?

26. Scenario: A Citrix Administrator has configured a Responder policy as follows:

add responder action Redirect_Act respond with “DIAMETER.NEW_REDIRECT(”aaa://host.example.com”)”

add responder policy Redirect_Pol “diameter.req.avp(264).value.eq(”host1.example.net”)” Redirect_Act

bind lb vserver vs1 CpolicyName Redirect_Pol Cpriority 10 Ctype REQUEST

What will be the effect of this configuration?

27. Scenario: A Citrix Administrator of a Linux environment needs to load-balance the web servers in an environment.

However, due to budget constraints, the administrator is NOT able to implement a full-scale solution.

What can the administrator do to load-balance the web servers in this scenario?

28. Which mode does a Citrix Administrator need to configure in order to allow the NetScaler to forward any packets that are NOT destined for an IP address that is NOT configured on NetScaler?

29. Which NetScaler mode is commonly referred to as ‘inline mode’?

30. A Citrix Administrator needs to utilize the client IP address as the source IP address for the NetScaler to server connections.

Which mode on the NetScaler will the administrator utilize to meet this requirement?

31. Scenario: A NetScaler appliance is having intermittent issues. A Citrix Administrator is unable to identify the root cause and fix them. The administrator opened a Support ticket and the Engineer assigned to the case requested all the logs and configuration information from the NetScaler.

Which technical support tool can the administrator use to gather all the information on the NetScaler to send to the Support Engineer?

32. Scenario: A Citrix Administrator is configuring SNMP management on the NetScaler to receive alerts when something fails. The administrator was confident that the Manager, Alarms and SNMP Traps were configured correctly. The following week, there was a NetScaler-related outage and the administrator did NOT get any alerts.

What could be the reason for the SNMP alert failure?

33. What is a recommended practice for managing a NetScaler high availability (HA) pair to ensure that management changes are always made on the Primary NetScaler?

34. View the Exhibit.

A Citrix Administrator has noticed that the users trying to access https://mycitrix.training.lab/exchange2016/owa are redirected to CAS_vserver_www instead of CAS_vserver_owa.

Click on the ‘Exhibit’ button to view the screenshot of the command-line interface.

What should the administrator change to resolve this issue?

35. Which feature can a Citrix Administrator use to create a consistent set of front-end SSL parameters across multiple SSL virtual servers?

36. Scenario: A Citrix Administrator manages an environment that has multiple websites running through a NetScaler MPX 5550. The NetScaler meets the needs of the environment throughout the year, except in December, when the capacity doubles. The administrator needs to handle this increased web traffic with a temporary, cost-effective solution.

Which action should the administrator recommend in order to handle the increased web traffic?

37. Which two configurations can a Citrix Administrator use to block all the post requests that are larger than 10,000 bytes in order to protect the environment against HashDoS attacks? (Choose two.)

38. After being audited, a Citrix Administrator was notified that additional enhancements should be made of the virtual servers.

Which two options can the administrator take to make the additional enhancements? (Choose two.)

39. Scenario: A Citrix Administrator is running applications on thousands of load-balanced backend servers in a large infrastructure. It is difficult to track and troubleshoot problems due to the large volume of traffic received.

Which feature of NetScaler Management and Analytics System (NetScaler MAS) can the administrator configure to monitor and troubleshoot in detail for an environment of this size?

40. A user needs to resolve the domain training.citrix.com, and the information is NOT available in resolver cache and Local Domain Name Server (DNS).

Where will the request be forwarded next?

41. View the Exhibit.

A Citrix Administrator has implemented the HTTP Callout.

Click on the ‘Exhibit’ button to view the screenshot of the command-line interface.

Which part of the configuration is responsible for triggering the call to HTTP Callout server?

42. A Citrix Administrator needs to configure the Lights Out Management (LOM) port.

Which statement is applicable to LOM?

43. POLICY 1:

add rewrite action ACT_1 corrupt_http_header Accept-Encoding

add rewrite policy POL_1 HTTP.REQ.IS_VALID ACT_1

POLICY 2:

add rewrite action ACT_2 insert_http_header Accept-Encoding “”identity””

add rewrite policy POL_2 “HTTP.REQ.IS_VALID” ACT_2

How can a Citrix Administrator bind the rewrite policies to the LB vserver lb_vsrv such that POL_2 is evaluated after POL_1 is evaluated successfully?

44. Which VLAN(S) will be bound to an interface, if VLAN 20 is bound to the interface as tagged in an environment where NetScaler is configured with the default settings?

45. Which two options should a Citrix Administrator consider when adding a secondary device in a high availability (HA) pair? (Choose two.)

46. Scenario: External users are currently experiencing delays while accessing XenApp and XenDesktop through the NetScaler. A Citrix Administrator needs to monitor the ICA connections to gather the performance information from the NetScaler Management and Analytics System (MAS).

Which two tools can the administrator use to gather information about WAN Latency, DC Latency and Host Delay? (Choose two.)

47. Scenario: A Citrix Administrator has configured the following Access Control List (ACL) to block traffic from the IP address 10.102.29.5.

add simpleacl rule1 DENY CsrcIP 10.102.29.5

A week later, the administrator found that the ACL is no longer present on the NetScaler.

What could be the reason for this?

48. Scenario: A Citrix Administrator has configured an Authentication, Authorization, and Auditing (AAA) action policy to allow users access through the NetScaler. The administrator bound the policy to a specific virtual server.

Which policy expression will allow all users access through the virtual server?