citrix.actualtests.1y0-250.v2014-02-13.by.pkash...exam a question 1 a company uses various...

Citrix.Actualtests.1Y0-250.v2014-02-13.by.PKASH.65q

Number: 1Y0-250Passing Score: 800Time Limit: 120 minFile Version: 12.5

http://www.gratisexam.com/

Exam Code: 1Y0-250

Exam Name: Implementing Citrix NetScaler 10 for App and Desktop Solutions

Exam A

QUESTION 1A company uses various pre-approved user devices in the environment, including mobile devices running iOSand Android operating systems.

Which two types of policies could an administrator use on the NetScaler Gateway virtual server to allow accessto these mobile devices? (Choose two.)

A. Rewrite policies, including endpoint analysis scansB. Session policies, excluding the endpoint analysis scansC. Authorization policies, including the endpoint analysis scansD. Pre-authentication policies, excluding the endpoint analysis scans

Correct Answer: BDSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 2An administrator plans to configure a NetScaler Gateway virtual server to be able to provide SmartAccess,endpoint analysis and network layer tunneling features.

Which client option should the administrator use for this scenario?

A. Offline plug-inB. Online plug-inC. Citrix ReceiverD. Access Gateway plug-in

Correct Answer: DSection: (none)Explanation


QUESTION 3An administrator is planning a NetScaler Gateway implementation and must ensure that users are only allowedto access the company resources if a specific file is present on the endpoint device they connect from.

Which component should the administrator include within the plan?

A. An SSL Offload virtual serverB. A double-hop NetScaler Gateway virtual serverC. A Basic mode NetScaler Gateway virtual serverD. A SmartAccess mode NetScaler Gateway virtual server



QUESTION 4Which information is required to license a NetScaler VPX 1000?

A. NSIPB. MAC addressC. NetScaler host nameD. Citrix License Server host name

Correct Answer: BSection: (none)Explanation


QUESTION 5An administrator created a service for a Web Interface server that is encrypted by an SSL certificate.

Which command should the administrator run at the command-line interface to create a monitor that will checkthe Web Interface by logging on to it with a test user's credentials?

A. add lb monitor mon-WebInterface CITRIX-WI-EXTENDED -sitePath "/Citrix/XenApp" - userName user -domain DomainName -password P@ssw0rd -encrypted

B. add lb monitor mon-WebInterface CITRIX-WI-EXTENDED -sitePath "/Citrix/XenApp" - userName user -domain DomainName -password P@ssw0rd -secure YES

C. add lb monitor mon-WebInterface CITRIX-WI-EXTENDED -sitePath "/Citrix/XenApp" - userName user -domain DomainName -password P@ssw0rd -destPort 443

D. add lb monitor mon-WebInterface CITRIX-WI-EXTENDED -sitePath "/Citrix/XenApp" - userName user -domain DomainName -password P@ssw0rd -encrypted -secure YES



QUESTION 6Scenario: An administrator configured a NetScaler Gateway session policy named spol_ICAP. Theadministrator needs to bind the policy to ensure that it is evaluated only when users of the ICAP security grouplog on to the NetScaler Gateway virtual server named vsrv_AGEE.


Which command should the administrator run at the command-line interface to meet the needs of thescenario?

A. bind vpn vserver vsrv_AGEE ICAPB. bind aaa group ICAP -policy spol_ICAPC. bind aaa group ICAP -policy spol_ICAP -global OFF

D. bind vpn vserver vsrv_AGEE -policy spol_ICAP -priority 1



QUESTION 7An administrator plans to use only Citrix Receiver for XenDesktop remote access through a NetScaler Gatewaydevice.

Which type of policy should the administrator configure to meet this requirement?

A. SessionB. AuthenticationC. Clientless accessD. Pre-authentication

Correct Answer: ASection: (none)Explanation


QUESTION 8Which configuration option should an administrator select to pass users' credentials to a file share in aNetScaler Gateway environment?

A. Local LAN-AccessB. Single sign-on to a domainC. Single sign-on with WindowsD. Single sign-on to Web applications

Correct Answer: CSection: (none)Explanation


QUESTION 9Scenario: An administrator has an existing SSL certificate that is installed and used on a Microsoft Windows IISserver. The administrator exported the certificate, including the private key, to a PFX file and now wants to usethat certificate for SSL Offloading on NetScaler.

Which two methods could the administrator use to import the certificate on NetScaler? (Choose two.)

A. Import PKCS#12.B. Change advanced SSL settings.C. Use the Server Certificate Wizard.D. Convert the certificate to PEM format.

Correct Answer: AD

Section: (none)Explanation


QUESTION 10An administrator needs to install a certificate from the NetScaler onto a Microsoft Windows IIS server.

Which action should the administrator complete before the certificate can be imported on the IIS server?

A. Select Export PKCS#12 and copy the file to Windows.B. Copy the certificate file from /nsconfig/ssl to Windows.C. Copy the certificate file and the key file from /nsconfig/ssl to Windows.D. Manage Certificates / Keys / CSRs and download the certificate file to Windows.



QUESTION 11Scenario: For auditing requirements, NetScaler administrators are required to use their Active Directoryaccounts to log on to NetScaler. All NetScaler administrators belong to the NSAdmins Active Directory group.

Which configuration must an administrator create in NetScaler to meet the requirements of the scenario?

A. User accountsB. NSAdmins groupC. Authorization policyD. Service Groups policy



QUESTION 12Scenario: An administrator is implementing a two-factor authentication solution with an RSA SecureID product.The administrator already has the server name and port number of the RSA server.

Which additional information does the administrator need to configure RSA SecureID?

A. LDAP passwordB. Firewall access ruleC. Authentication policyD. RADIUS shared secret



QUESTION 13Scenario: An administrator is creating a NetScaler Gateway virtual server for mobile devices only. Theadministrator must include two-factor authentication.Which two steps must the administrator take to configure two-factor authentication for this environment?(Choose two.)

A. Bind the RSA policy first.B. Bind the LDAP policy first.C. Create an authentication policy.D. Create a pre-authentication policy.

Correct Answer: ACSection: (none)Explanation


QUESTION 14Scenario: An administrator implemented RADIUS with NetScaler Gateway as a two-factor authenticationsolution for a XenDesktop implementation. A planned outage is scheduled in wake of a software upgrade onthe RADIUS infrastructure. During the outage, the administrator needs to disable the two-factor authenticationon NetScaler Gateway to enable users' continued access to published applications.

Which action could the administrator take to meet the needs of the scenario without affecting the connectedusers?

A. Delete the RADIUS authentication policy.B. Set the RADIUS policy to be secondary authentication.C. Disable authentication on the NetScaler Gateway virtual server.D. Unbind the RADIUS authentication policy from the NetScaler Gateway virtual server.



QUESTION 15In which format should an administrator save the AppExpert Template files in order to import and upload to theNetScaler?

A. XMLB. ASPC. CSVD. HTML


Explanation/Reference:

Explanation:

QUESTION 16Scenario: A company had a single datacenter location with a single NetScaler installed. A second datacenterlocation was added and an administrator installed a second Citrix NetScaler at the second datacenter location.The NetScaler is used for load balancing internal infrastructure solutions.

The administrator plans to configure the environment so that it will continue to work even if there is a datacenterfailure. Only the primary datacenter location is connected to the Internet. The configuration has to besynchronized automatically so that the configuration of both appliances is always identical.

How should the administrator configure the NetScaler devices so that continuity is maintained in the event of adatacenter failure?

A. As a GSLB clusterB. In a VRRP configurationC. As a high availability pairD. As standalone appliances



QUESTION 17An administrator notices that a NetScaler high availability (HA) pair has changed the primary node severaltimes in the past few days due to intermittent issues.

What could the administrator configure to ensure that HA failures are alerted?

A. SNMPB. SyslogC. Route MonitorsD. Failover Interface Set



QUESTION 18Which command-line interface command could an administrator use to display communication between theLDAP server and the NetScaler system?

A. cat /etc/krb5.confB. cat /etc/krb5.keytabC. cat /tmp/aaad.debugD. cat /var/log/aaad.debugE. tail -f /var/log/aaad.debug

Correct Answer: CSection: (none)

Explanation


QUESTION 19Scenario: An administrator configured an LDAP authentication policy and bound it globally. The only systemgroup configured on the Netscaler is NS_Admins. After reviewing the security logs, the administrator noticesthat users in the External_Contractors LDAP group are able to log on to NetScaler using SSH; however,members of the External_Contractors group are NOT authorized to run any commands.

Which action could the administrator take to prevent the members of the External_Contractors LDAP Groupfrom logging on to NetScaler using SSH without affecting other users?

A. Configure an authorization policy that allows logon only by members of the "External_Contractors" LDAPGroup. Bind the new policy globally.

B. Specify (memberOf="CN=External_Contractors, CN=Groups, CN=example, CN=com") as a filter in theproperties of the configured LDAP server.

C. Specify (!(memberOf="CN=External_Contractors, CN=Groups, CN=example, CN=com")) as a filter in theproperties of the configured LDAP server.

D. Create a new command policy with a DENY action. Create a System Group named "External_Contractors"and assign the new command policy to the External_Contractors group.



QUESTION 20After restarting one node on a two-node NetScaler cluster, an administrator notices that the node that wasrestarted no longer accepts traffic.

Which action could the administrator take to resolve this issue?

A. Run the nsconmsg -g feature -d stats from the shell.B. Run the sync cluster files command from the command-line interface.C. Replace the cluster license file and restart the NetScaler software only.D. Restart the NetScaler software and operating system for the failing node.



QUESTION 21Scenario: An administrator plans to troubleshoot connections to the SSL virtual server configured on theNetScaler by using the WireShark tool. The administrator created a network trace file.

What will the administrator need to decrypt the network trace?

A. NS-root keyB. NS-server keyC. Private key of the root certification authority

D. Private key of the certificate that is bound to the virtual server



QUESTION 22Scenario: A number of administrators received the following error when they attempted to connect to theConfiguration Utility using a secured HTTPS connection:

The site's security certificate is not trusted!

One of the administrators installed a certificate from a trusted Certificate Authority on the NetScaler and isplanning to configure the Configuration Utility to use this certificate.Which NetScaler command must the administrator run at the command-line interface to configure theConfiguration Utility with the new certificate?

A. set ssl serviceB. set ssl vserverC. bind ssl serviceD. bind ssl vserver



QUESTION 23Scenario: A company currently has a working production XenApp and NetScaler environment. An administratorrecently implemented a test NetScaler environment and tried to duplicate the NetScaler Gateway configurationfrom the production environment in the test environment. When the administrator configured the Secure TicketAuthority in the test environment, the Secure Ticket Authority showed a DOWN state. The administrator verifiedthat the Secure Ticket Authority state shows as UP on the production NetScaler.

What should the administrator check to troubleshoot the issue?

A. NetScaler route tableB. NetScaler Gateway ResourcesC. NetScaler Gateway Session ProfilesD. Secure Ticket Authority server IP address



QUESTION 24When a user launches a published version of Notepad, the user receives the following error message:

"Cannot connect to the Citrix XenApp server.SSL Error: The proxy denied access to 10; STA393B6A5D1088;

9764757E39D0BEBB0BFC66E9EE146FF4 port 1494."

What could be the cause of this error message?

A. Web Interface CANNOT reach the XML broker.B. Web Interface CANNOT reach the XenApp server.C. NetScaler Gateway CANNOT reach the XenApp server.D. NetScaler Gateway CANNOT reach the Secure Ticket Authority server.



QUESTION 25Scenario: An administrator configured link load balancing to balance outbound traffic between two InternetService Providers. When testing the configuration, the administrator notices NetScaler is unable to connect toany external addresses.

Which mode should the administrator verify is enabled?

A. Layer 3B. Layer 2C. Use Subnet IPD. Use Source IP



QUESTION 26Scenario: After a restart of a single NetScaler, users complain that the logon page has changed. Anadministrator plans to verify that a startup script exists and contains the necessary command.

Where can the administrator find the startup script?

A. /etcB. /devC. /nsconfigD. /netscaler



QUESTION 27Scenario: An administrator plans to implement NetScaler to load balance Web Interface traffic. The WebInterface servers are using standard non-secure ports. Company policy states that all external traffic must be

secure.

The administrator has added the servers for the Web Interface under Load Balancing.

In order to load balance the Web Interface traffic and comply with company policy, the administrator should addservices for __________ and create an __________. (Choose the correct set of options to complete thesentence.)

A. SSL; SSL virtual serverB. SSL; HTTP virtual serverC. HTTP; SSL virtual serverD. HTTP; HTTP virtual server



QUESTION 28An administrator needs to prevent a single point of failure for the Secure Ticket Authority servers configured onNetScaler Gateway.

Which method could the administrator use to accomplish this?

A. Create a DNS round robin for the Secure Ticket Authority servers.B. Add Secure Ticket Authority servers individually to the virtual server.C. Create a virtual server to load balance the Secure Ticket Authority servers.D. Configure Windows Network Load Balancing for the Secure Ticket Authority servers.



QUESTION 29Scenario: An administrator needs to configure secure remote access and load balancing on NetScaler for aXenDesktop implementation. The XenDesktop environment has two Desktop Delivery Controllers (DDCs) andtwo Web Interface servers.

Which action must the administrator take to configure the Secure Ticket Authority in NetScaler Gateway?

A. Bind individual DDCs as Secure Ticket Authorities on the NetScaler Gateway virtual server.B. Bind individual Web Interface servers as Secure Ticket Authorities on the NetScaler Gateway virtual server.C. Configure a load balancing virtual server for the DDC servers and configure the load balanced Secure

Ticket Authority on the NetScaler Gateway virtual server.D. Configure a load balancing virtual server for the Web Interface servers and configure the load balanced

Web Interface virtual server as the Secure Ticket Authority for the NetScaler Gateway virtual server.



QUESTION 30Which protocol could an administrator apply with rate-based monitor?

A. FTPB. ARPC. DNSD. HTTPS



QUESTION 31Scenario: After an infrastructure service review, an administrator needs to improve the availability of core Webapplications for customers. The administrator needs to place two recently purchased NetScalers in two differentdatacenters on two different subnets.

Which two options could the administrator configure for the two NetScaler devices? (Choose two.)

A. GSLBB. VRRPC. ClusterD. Virtual MAC addressE. High availability INC pair

Correct Answer: AESection: (none)Explanation


QUESTION 32Scenario: An administrator must implement NetScaler Gateway. The solution must allow users to be able tochange their Active Directory password from the NetScaler Gateway logon page.

Which two actions must the administrator perform to meet the requirements of this scenario? (Choose two.)

A. Configure LDAP authentication.B. Configure LDAPS authentication.C. Add a RADIUS authentication server.D. Enable the 'Allow password change' option for the LDAP authentication server.

Correct Answer: BDSection: (none)Explanation


QUESTION 33Scenario: An administrator needs to configure a NetScaler to provide access to users on an Exchangeplatform. The users will only use the IMAP4 protocol.

Which three features should the administrator configure for this scenario? (Choose three.)

A. SSL OffloadB. CompressionC. Load balancingD. Health monitoringE. Integrated cachingF. Route health injection

Correct Answer: ACDSection: (none)Explanation


QUESTION 34Scenario: An administrator configures load balancing in an environment to load balance a Web server. Theadministrator needs to enhance availability in the case that the virtual server goes down.

Which two options could the administrator configure to meet the load balancing needs for this environment?(Choose two.)

A. Redirect URLB. Reverse monitoringC. Backup virtual serverD. Content Switching virtual server

Correct Answer: ACSection: (none)Explanation


QUESTION 35Scenario: An Internal_Web virtual server is configured with two services named wserv1 and wserv2. Theservices have the default weight settings. A new company policy requires that the weight ratio between wserv1and wserv2 be 10:1.

Which action could an administrator take to adjust the weight settings?

A. Add wserv1 and wserv2 servers in the Servers tab.B. Modify Internal_Web virtual server in the Services tab.C. Modify wserv1 and wserv2 services in the Services tab.D. Add a metric table with wserv1 and wserv2 metrics in the Metric Tables tab.



Explanation:

QUESTION 36Scenario: Management has requested monthly detailed performance reports for an online Web application.Management has also requested real-time monitoring of the environment with the possibility of exportinghistorical reports.

Which type of reporting or monitoring tool should an administrator use to meet the requirements of thisscenario?

A. SNMPB. SyslogC. Citrix Command CenterD. NetScaler Insight Center



QUESTION 37An administrator could generate a trace file using the __________ and the __________. (Choose the twocorrect options to complete the sentence.)

A. "nstrace.sh" command at the NetScaler shellB. Diagnostics option in the Configuration Utility GUIC. "start nstrace" command at the command-line interfaceD. "nstcpdump.sh" command at the command-line interface

Correct Answer: BCSection: (none)Explanation


QUESTION 38An administrator maintains a NetScaler environment that includes Secure Ticket Authority servers configuredwith custom ports.

Which two Secure Ticket Authority address formats could the administrator configure when using custom portson the NetScaler Gateway virtual server? (Choose two.)

A. http://STA1/citrix/ctxsta.dllB. http://STA1.company.com:portC. http://10.10.10.1:port/citrix/ctxsta.dllD. http://STA1.company.com:port/vpn/index.html



QUESTION 39An administrator needs to use the command-line interface to create a load-balanced virtual server for a Webserver listening on port 80.

Which command could the administrator run at the command-line interface to accomplish this task?

A. add vserver vServer-LB-1 10.102.29.60B. add lb vserver vServer-LB-1 10.102.29.60C. add vserver vServer-LB-1 HTTP 10.102.29.60 80D. add lb vserver vServer-LB-1 HTTP 10.102.29.60 80



QUESTION 40An administrator needs to allow remote users to access their locally-installed corporate applications over asecure connection.

In order to meet this requirement, the administrator could configure __________ on the NetScaler. (Choose thecorrect option to complete the sentence.)

A. SSL VPNB. ICA ProxyC. SSL OffloadD. Clientless Access



QUESTION 41An administrator must configure a NetScaler system to be compliant with security policies that require theSecurity Team to have the ability to provide the identity of all the connected users.

Which action could the administrator take to meet this requirement?

A. Configure SNMP.B. Generate a Trace file.C. Configure an audit policy.D. Generate a Custom Report.



QUESTION 42Which two actions should an administrator take to ensure the first NetScaler node configured in a highavailability (HA) pair remains the primary node after a second node is added? (Choose two.)

A. Set Stay Primary on the first node.B. Configure Stay Secondary on the second node.C. Enable HA Sync before adding the second node.D. Create a Route Monitor to ensure proper synchronization.E. Ensure that INC mode is enabled during creation of the HA pair.

Correct Answer: ABSection: (none)Explanation


QUESTION 43An administrator needs to implement a solution to provide users with remote access to applications from tabletdevices using Citrix Receiver.

Which component is required to fulfill these requirements?

A. Citrix Web InterfaceB. Citrix Single Sign-onC. Citrix Provisioning ServicesD. Citrix Merchandising Server



QUESTION 44Scenario: Several users in an environment connect to corporate network resources throughNetScaler Gateway. Sometimes these users only need to connect to the corporate XenDesktop environment.Some of the users do NOT need a VPN connection.

How could an administrator configure access using NetScaler Gateway for this scenario?

A. Enable Client Choices.B. Set Clientless Access to Allow.C. Configure a virtual server in Basic mode.D. Configure the Plug-in Type as Windows/Mac OS X.



QUESTION 45-- Exhibit

-- Exhibit --

Which command should an administrator run at the command-line interface to show all the IPv6 static routes inthe attached Exhibit?

Click the Exhibit button to view the IPv6 static routes.

A. show route6B. show route6 -ALLC. show route ipv6 allD. show route6::/0 fe80::/67



QUESTION 46An administrator must configure SmartAccess policies within an existing NetScaler Gateway implementation.

Which action must the administrator perform to meet the objectives of this implementation?

A. Upgrade Citrix XenApp from 6.0 to 6.5.B. Upgrade Web Interface from 5.3 to 5.4.C. Configure a next hop NetScaler Gateway virtual server.D. Configure the mode of the NetScaler Gateway virtual server.



QUESTION 47Scenario: NetScaler is used to load balance Microsoft SharePoint for internal users. An administrator needs toconfigure the NetScaler device to allow for external access to the SharePoint site.

Which action could the administrator take to meet the requirements of the scenario?

A. Bind the SharePoint certificate to the virtual server.B. Add the Microsoft SharePoint server to a Web Interface site.C. Configure an Authentication, Auditing and Authorization server.D. Enable 'ICA proxy only' on the NetScaler Gateway virtual server.



QUESTION 48Scenario: An administrator configured a AAA virtual server. The AAA virtual server is NOT yet bound to a trafficmanagement virtual server.

Which two virtual servers could the administrator configure as traffic management virtual servers? (Choosetwo.)

A. GSLBB. Load balancingC. Content switchingD. NetScaler Gateway



QUESTION 49Scenario: NetScaler Gateway is implemented to provide Web Resources, including Outlook Web Access andan SAP portal, to users. Marketing and Sales department employees normally work from outside the officelocation and should be able to access Web Resources from different types of devices that are NOT maintainedby the company.

Which user access connection method should an administrator configure to meet the needs of this scenario?

A. Citrix ReceiverB. PN Agent plug-inC. Clientless accessD. Access Gateway plug-in



QUESTION 50A company plans to deploy secure LDAP authentication to their existing NetScaler Gateway implementation.

What should an administrator enable to support secure LDAP?

A. SSL security on the virtual serverB. Secure LDAP in a pre-authentication policyC. SSL security type in an authentication policyD. Secure LDAP in the NetScaler Gateway Global settings



QUESTION 51Scenario: An administrator manages a single NetScaler appliance. A Network IT Administrator has prohibitedaccess to VLAN1 and is requesting that the NetScaler Administrator change the management IP address of theappliance.

Which IP address should the NetScaler Administrator change?

A. VIPB. MIPC. NSIPD. SNIP



QUESTION 52An administrator plans to configure single sign-on with smart card on NetScaler.

What should the administrator configure to use smart cards in the environment?

A. Smart Card middlewareB. Delegation on Active DirectoryC. Secure LDAP on the Domain ControllerD. Web Interface on the Domain Controller



QUESTION 53Scenario: Multiple virtual servers are configured in a NetScaler Gateway implementation. Corporate policyrequires that an administrator restrict the number of users who can log on through each virtual server.

What could the administrator specify to meet the needs of this scenario?

A. Max Users in a session policyB. Max Users on the virtual serverC. Max Connections on the virtual serverD. Allowed users to logon in the Access Gateway Global Settings

Correct Answer: BSection: (none)

Explanation


QUESTION 54Scenario: Two NetScaler Gateway virtual servers are configured on a NetScaler appliance. Each NetScalerGateway virtual server is used to enable secure remote access to dedicated XenDesktop sites for separatedivisions:

Division A:

NetScaler Gateway: NG-A

XenDesktop Controller: DDC-A

Division B:

NetScaler Gateway: NG-B

XenDesktop Controller: DDC-B

Each XenDesktop site is placed in its own Active Directory. Firewalls prevent any communication between thedivisions.

An administrator should configure the Secure Ticket Authority on the NetScaler for Division B, without causingany configuration issues for NG-A, by binding __________. (Choose the correct option to complete thesentence.)

A. DDC-B to NG-AB. DDC-B to NG-BC. DDC-B to NG-A and DDC-AD. DDC-A and DDC-B to a load-balancing virtual server



QUESTION 55Scenario: An administrator has configured several load balancing virtual servers on a NetScaler to acceleratethe Web content. After an update on the Web content platform, all the servers need the client IP address toperform tracking operations.

Which two tasks should the administrator complete to pass the client IP address to all the load balancing virtualservers? (Choose two.)

A. Activate the Source-IP feature on the service.B. Configure a rewrite policy, then bind it globally.C. Activate the Client-IP Header insertion on the services.D. Configure a responder policy, then bind it to all servers.

Correct Answer: BCSection: (none)

Explanation


QUESTION 56Scenario: A virtual server has been configured in the Content Switching node to provide multiple Web servicesusing the full website path location. This website contains details that can only be displayed using a specificWeb browser such as Internet Explorer.


Which two actions must an administrator perform to ensure that users are informed of the browserrequirements? (Choose two.)

A. Configure Advanced Expression policies to determine the type of browser used.B. Create a backup server to display a website that informs users of the browser requirements.C. Configure a redirect URL to redirect users to a website that informs them of the browser requirements.D. Configure a default policy to redirect users to a website that informs them of the browser requirements.

Correct Answer: ADSection: (none)Explanation


QUESTION 57Which action could an administrator take to configure auditing of logon events for all the employees whoconnected through the NetScaler Gateway for the current day?

A. Run "df -h" from the NetScaler command-line interface.B. Configure a Syslog policy to send events to a remote server.C. Run "cat aaa.debug" from the NetScaler command-line interface.D. Review logon events through Reporting > Access Gateway > AAA > AAA Sessions.



QUESTION 58An administrator is reviewing the following output:

VIP(141.128.58.149:80:UP:WEIGHTEDRR): Hits(38200495, 18/sec) Mbps(1.02) Pers(OFF) Err(0)

Pkt(186/sec, 610 bytes) actSvc(4) DefPol(NONE) override(0)

Conn: Clt(253, 1/sec, OE[252\]) Svr(3)

S(141.128.49.40:80:UP) Hits(9443063, 4/sec, P[2602342, 0/sec\]) ATr(5) Mbps(0.23)BWlmt(100 kbits)RspTime(112.58 ms)

Other: Pkt(36/sec, 712 bytes) Wt(10000) RHits(31555)

Conn: CSvr(42, 0/sec) MCSvr(20) OE(16) RP(11) SQ(0)

How much traffic is being passed through the public IP address based on the output displayed above?

A. 100 kbitsB. 1.02 MbpsC. 0.23 MbpsD. 112.58 ms



QUESTION 59Scenario: An administrator has configured LDAPS authentication, but users are unable to log on to theNetScaler Gateway virtual server. The same users are able to log on to other systems.

Which action could the administrator take to troubleshoot this issue?

A. Run "telnet ldapsrv.example.com 389" from a PC.B. Run telnet from a LDAPS server to the NSIP address.C. Run "telnet ldapsrv.example.com 636" from the NetScaler shell.D. Run "telnet ldapsrv.example.com:636" from the NetScaler command-line interface.



QUESTION 60Scenario: An administrator needs to deliver production applications to users. Encryption must be maintainedbetween the users' managed devices.

Which two certificates could the administrator use to meet this requirement? (Choose two.)

A. PublicB. PrivateC. TrustedD. Intermediate

Correct Answer: ABSection: (none)Explanation


Explanation:

QUESTION 61Scenario: An administrator plans to publish 2010 Outlook Web Access through Citrix NetScaler AAA and allowusers to authenticate using domain credentials and their RSA tokens. Users must also have the ability tochange the password when it has expired.

The administrator should configure ________ for user authentication and ________ for RSA tokenauthentication. (Choose the correct set of options to complete the sentence.)

A. LDAP; LDAPSB. SAML; RADIUSC. LDAPS; RADIUSD. RADIUS; RADIUS



QUESTION 62An administrator is setting up two-factor authentication, using Active Directory and RSA SecurID.

Which actions could the administrator take to protect the environment from a brute force attack?

A. Bind Active Directory as Primary authentication priority 100. Bind RSA SecurID as Primary authenticationpriority 110.

B. Bind Active Directory as Primary authentication priority 110. Bind RSA SecurID as Primary authenticationpriority 100.

C. Bind Active Directory as Secondary authentication priority 100. Bind RSA SecurID as Primary authenticationpriority 100.

D. Bind Active Directory as Primary authentication priority 100. Bind RSA SecurID as Secondary authenticationpriority 100.



QUESTION 63Scenario: An administrator notices that each time the secondary node of a high availability (HA) pair isrestarted, the primary node shifts to a non-working state.

The administrator runs a command and collects the information displayed below:

1) Node ID. 0

IP: 172.31.250.10

Node StatE. NOT UP

Master StatE. Secondary

INC StatE. DISABLED

Sync StatE. DISABLED

Propagation: ENABLED

Enabled Interfaces : 1/5 1/1 1/2 1/4 0/1

Disabled Interfaces : 1/3

HA MON ON Interfaces : 1/4 1/1 0/1

Interfaces on which heartbeats are not seen : 1/4 1/1 1/2 1/5 0/1

Interfaces causing Partial FailurE. 1/4

SSL Card Status: UP

Hello Interval: 200 msecs

Dead Interval: 3 secs

Node in this Master State for: 0:0:0:35 (days:hrs:min:sec)

2) Node ID. 1

IP: 172.31.250.20

Node StatE. UNKNOWN/DOWN

Master StatE. UNKNOWN

INC StatE. UNKNOWN

Sync StatE. UNKNOWN

Propagation: UNKNOWN

Enabled Interfaces : UNKNOWN

Disabled Interfaces : UNKNOWN

HA MON ON Interfaces : UNKNOWN

SSL Card Status: UNKNOWN

What could be the cause of this issue?

A. Synchronization is disabled.B. The Hello Interval is set too high.C. One of the interfaces is disabled.D. One of the HA Monitoring interfaces is failing.



"Pass Any Exam. Any Time." - www.actualtests.com 29 Citrix 1Y0-250 Exam

QUESTION 64Which two methods could an administrator use to ensure that all HTTP traffic will be redirected to the NetScalerGateway virtual server after configuring a NetScaler Gateway virtual server? (Choose two.)

A. Configure a URL transformation policy, then bind it globally.B. Configure a rewrite policy to change all the HTTP requests, then bind it to the NetScaler Gateway virtual

server.C. Configure a responder policy based on the FQDN pointing to the NetScaler Gateway virtual server,then bind

it globally.D. Configure an HTTP virtual server with the same NetScaler Gateway virtual server IP address, then

configure a redirect URL on it.

Correct Answer: CDSection: (none)Explanation


QUESTION 65Scenario: An administrator is planning to implement NetScaler Gateway.

The administrator must ensure that users are able to change their passwords when the passwords haveexpired.

To meet the needs of the scenario, the administrator must ensure that

__________ is included in the plan.

A. LDAP authenticationB. RADIUS authenticationC. nested groups (enabled)D. the nsroot username added to Active Directory




citrix.actualtests.1y0-250.v2014-02-13.by.pkash...exam a question 1 a company uses various...

Documents