Deck 3: Deploy and Manage Citrix ADC 13 with Traffic Management

Question 1

How can a Citrix Administrator configure a rewrite policy to change the version of HTTP from 1.1 to 1.0 in every request?

A) >add rewrite action RW_ACT replace http.res.version "\"HTTPS/1.0\"" > add rewrite policy RW_POL true RW_ACT
B) >add rewrite action RW_ACT replace http.req.version "\"HTTPS/1.1\""
C) >add rewrite action RW_ACT replace http.res.version "\"HTTPS/1.1\""
D) >add rewrite action RW_ACT replace http.req.version "\"HTTPS/1.0\""

Answer 1

B

Question 2

A Citrix Administrator configured an external syslog server but is NOT seeing detailed TCP information? What could be causing this?

A) Log facility is NOT configured.
B) TCP logging is NOT enabled.
C) User-defined audit log is NOT configured.
D) Log level is NOT enabled.

Answer 2

D

Question 3

Scenario: A Citrix ADC MPX is using one of four available 10G ports. A Citrix Administrator discovers a traffic bottleneck at the Citrix ADC. What can the administrator do to increase bandwidth on the Citrix ADC?

A) Purchase another Citrix ADC MPX appliance.
B) Plug another 10G Citrix ADC port into the router.
C) Add two more 10G Citrix ADC ports to the network and configure VLAN.
D) Add another 10G Citrix ADC port to the switch, and configure Link Aggregation Control Protocol (LACP).

Answer 3

D

Question 4

Which two policies can a Citrix Administrator configure using only the advanced policy expression? (Choose two.)

A) DNS
B) Integrated caching
C) SSL
D) System

Question 5

A Citrix Administrator configured global server load balancing (GSLB) for www.citrix.com, with two ADNS services named Citrix ADC 1 and Citrix ADC 2 in the setup. Which record does the administrator need to add on the parent DNS server to delegate requests from www.citrix.com to Citrix ADC 1 and Citrix ADC 2?

A) Canonical Name (CNAME)
B) Address (A) record
C) Name Server (NS) record
D) Pointer Record (PTR)

Question 6

Scenario: A Citrix Administrator gives permissions to team members to access their own admin partition. This will allow them to add resources for different departments and manage them without making changes to the default Citrix ADC partition and configuration. One team member typing to use the command line interface (CLI) to troubleshoot an authentication issue could NOT use aaad.debug. However, the team member has full permissions on the admin partition. What can be the cause of this issue?

A) The team member is NOT using the CLI correctly.
B) The team member needs to troubleshoot the issue from the GUI.
C) The team member does NOT have permission to use the CLI.
D) The team member does NOT have shell access by design.

Question 7

Scenario: A Citrix Administrator configured a global server load balancing (GSLB) setup for internal and external users using the same host name. For internal users, cvad.citrite.net should go to the Citrix StoreFront site; for external users, it should connect to the Citrix ADC Gateway VPN site. Which feature should the administrator configure to accomplish this?

A) DNS Preferred Location
B) DNS Record
C) DNS View
D) DNS Proxy

Question 8

Scenario: A Citrix Administrator made changes to a Citrix ADC, deleting parts of the configuration and saving some new ones. The changes caused an outage that needs to be resolved as quickly as possible. There is no Citrix ADC backup. What does the administrator need to do to recover the configuration quickly?

A) Restart the Citrix ADC.
B) Restore from the revision history.
C) Run saved versus running configuration.
D) Run highly availability (HA) file synchronization.

Question 9

Scenario: A Citrix Administrator configured an authentication, authorization, and auditing (AAA) policy to allow users access through the Citrix ADC. The administrator bound the policy to a specific vServer. Which policy expression will allow all users access through the vServer?

A) true
B) false
C) ns_true
D) ns_false

Question 10

Scenario: A Citrix Administrator executed the following commands on the Citrix ADC: > add policy dataset Admin_group ipv4 > bind policy dataset Admin_group 192.168.149.10 -index 11 > bind policy dataset Admin_group 192.168.149.39 -index 12 > bind policy Admin_group 192.168.149.49 -index 13 > add responder policy POL_1 "!(CLIENT.IP.SRC.TYPECAST_TEXT_T.CONTAINS_ANY(\"Admin_group\"))" RESET > bind lb vServer lb_vsrv_www -policyName POL_1 -priority 100 -gotoPriorityExpression END -type REQUEST What will be the effect of these commands?

A) Only users with a source IP address of 192.168.149.10, 192.168.149.39, or 192.168.149.49 will be allowed to connect to vServer lb_vsrv_www.
B) Only users with a source IP address of 192.168.149.10, 192.168.149.39, or 192.168.149.49 will be blocked when attempting to connect to vServer lb_vsrv_www.
C) Only users with a source IP address of 192.168.149.10 or 192.168.149.39 will be allowed to connect to vServer lb_vsrv_www.
D) All traffic from users with a source IP address of 192.168.149.10, 192.168.149.39, or 192.168.149.49 will be blocked through the Citrix ADC.

Question 11

Scenario: POLICY 1: add rewrite action ACT_1 corrupt_http_header Accept-Encoding add rewrite policy POL_1 HTTPS.REQ.IS_VALID ACT_1 POLICY 2: add rewrite action ACT_2 insert_http_header Accept-Encoding "\"identity\"" add rewrite policy POL_2 "HTTP.REQ.IS_VALID " ACT_2 How can a Citrix Administrator successfully bind the above rewrite policies to the load-balancing vServer lb_vsrv so that POL_2 is evaluated after POL_2 is evaluated?

A) bind lb vServer lb_vsrv -policyName POL_1 -priority 110 -gotoPriorityExpression NEXT -type REQUEST bind lb vServer lb_vsrv -policyName POL_2 -priority 100 -gotoPriorityExpression END -type REQUEST
B) bind lb vServer lb_vsrv -policyName POL_1 -priority 90 -gotoPriorityExpression NEXT -type REQUEST
C) bind lb vServer lb_vsrv -policyName POL_1 -priority 90 -gotoPriorityExpression END -type REQUEST bind lb vServer lb_vsrv -policyName POL_2 -priority 80 -gotoPriorityExpression NEXT -type REQUEST
D) bind lb vServer lb_vsrv -policyName POL_1 -priority 90 -type REQUEST bind lb vServer lb_vsrv -policyName POL_2 -priority 100 -type REQUEST

Question 12

What is the effect of the "set cs vServer-CS-1 -redirectURL http://www.newdomain.com/mysite/" command?

A) If the vServer-CS-1 encounters a high connection rate, then users will be redirected to http://www.newdomain.com/mysite/.
B) If the status of vServer-CS-1 is DOWN, then users will be redirected to http://www.newdomain .com/mysite/.
C) All the requests to vServer-CS-1 will be redirected to http://www.newdomain.com/mysite/.
D) All the requests without URL path/mysite/ will be redirected to http://www.newdomain.com/mysite/.

Question 13

Scenario: The Citrix Administrator of a Linux environment needs to load balance the web servers. Due to budget constraints, the administrator is NOT able to implement a full-scale solution. What can the administrator purchase and install to load balance the webservers?

A) Citrix ADC MPX
B) Citrix ADC VPX
C) Citrix ADC SDX
D) Citrix ADC CPX

Question 14

A Citrix Administrator receives user complaints about latency while accessing an application that is load balanced on the Citrix ADC. Which tool can the administrator use to gather information regarding response time, client network latency, and server-side processing time?

A) Citrix Application Delivery Management (ADM)
B) HDX Insight
C) WAN Insight
D) Security Insight

Question 15

Which step can a Citrix Administrator take to use default compression policies?

A) Select the compression algorithm (gzip/deflate/identity).
B) Disable the Citrix ADC compression feature at a global level.
C) Enable compression on the associated bound services.
D) Bind the default compression policies to the vServer.

Question 16

What is the first thing a Citrix Administrator should develop when creating a server certificate for Citrix ADC to secure traffic?

A) A private key
B) A certificate revocation list (CRL)
C) A certificate signing request (CSR)
D) A certificate key-pair

Question 17

Scenario: A Citrix Administrator configured Citrix ADC load balancing to send requests to one of three identical backend servers. Each server handles multiple protocols, and load balancing is set up in round-robin mode. The current load-balancing setup on the Citrix ADC is: One load-balancing vServer with one externally accessible VIP One service created for each protocol type One server entity for each backend resource During business hours, the administrator wants to make changes to one backend server without affecting the other servers. What is the most efficient way for the administrator to ensure that all traffic is routed away from the server without impeding responses from other resources?

A) Disable the backend service entity targeted for change.
B) Disable the backend server entity targeted for change.
C) Disable the load-balancing vServer.
D) Unbind the correct server entity from the load-balancing vServer.

Question 18

Scenario: Client connections to certain vServers are abnormally high. A Citrix Administrator needs to be alerted whenever the connections pass a certain threshold. How can the administrator use Citrix Application Delivery Management (ADM) to accomplish this?

A) Configure network reporting on the Citrix ADM by setting the threshold and email address.
B) Configure SMTP reporting on the Citrix ADM by adding the threshold and email address.
C) Configure TCP Insight on the Citrix ADM.
D) Configure specific alerts for vServers using Citrix ADM.

Question 19

Scenario: A Citrix Administrator needs to configure a Responder policy, so that the string "/mytraining" is added to every URL path received. The administrator should use these commands to accomplish this: >add responder action Redirect_Act redirect "HTTP.REQ.URL.PATH_AND_QUERY+\"mytraining\"" -responseStatusCode 302 >add responder policy Redirect_Pol___________Redirect_Act >bind lb vServer lb_vsrv_www -policyName Redirect_Pol -priority 100 -gotoPriorityExpression END -type_______ (Choose the correct option to complete the set of commands.)

A) "(HTTP.REQ.URL.STARTSWITH(\"mytraining\"))" REQUEST
B) RESPONSE
C) "!(HTTP.REQ.URL.ENDSWITH(\"mytraining\"))"
D)

Question 20

Which two steps are necessary to configure global server load balancing (GSLB) service selection using content switching (CS)? (Choose two.)

A) Bind the domain to the CS vServer instead of the GSLB vServer.
B) Configure CS policies that designate a load-balancing vServer as the target vServer.
C) Configure a CS vServer of target type GSLB.
D) Bind the GSLB domain to the GSLB vServer.

Question 21

Which Citrix ADC monitor can a Citrix Administrator use to check the authentication service of the Active Directory (AD) domain controller?

A) An LDAP monitor with the LDAP Script Name, Configured Base DN, Bind DN, Filter, Attribute and Password parameters in the basic parameters.
B) A ping monitor with the IP address of the AD domain controller in the special parameters
C) A MYSQL-ECV monitor with the Base DN, Bind DN, Filter, Attribute, and Password parameters configured in the basic parameters
D) A TCP monitor with the LDAP Base DN configured in the basic parameters.

Question 22

A Citrix Administrator needs to confirm that all client certificates presented to the authentication vServer are valid until the year 2023. Which expression can the administrator use to meet this requirement?

A) CLIENT.SSL.CLIENT_CERT.VALID_NOT_AFTER.EQ(GMT2023)
B) CLIENT.SSL.CLIENT_CERT.VALID_NOT_BEFORE.EQ(GMT2023)
C) CLIENT.SSL.ORIGIN_SERVER_CERT.VALID_NOT_AFTER.EQ(GMT2023)
D) CLIENT.SSL.CLIENT_CERT.DAYS_TO_EXPIRE.EQ(2023)

Question 23

Scenario: A Citrix Administrator executed the following command in a global server load balancing (GSLB) environment: set gslb site SiteB -triggerMonitor MEPDOWN What will be the effect of this command on the default service monitoring behavior on a remote site?

A) The service monitor is invoked only when Metric Exchange Protocol (MEP) has marked the service as DOWN.
B) The service monitor is invoked only when Metric Exchange Protocol (MEP) connectivity has been lost between Site A and Site B.
C) The service monitor will take precedence over Metric Exchange Protocol (MEP).
D) The state of the GSLB service will always be controlled by Metric Exchange Protocol (MEP).

Question 24

Scenario: A company has three departments with proprietary applications that need to be load balanced on a Citrix ADC. The three department managers would like to use the same IP address to access their individual applications. This would mean configuring three load-balanced vServers, all using the same IP address. What can the Citrix Administrator configure for this scenario?

A) Three SNIPs with the same IP address on a Citrix ADC
B) Three different Citrix ADCs that use the same IP address
C) Three different admin partitions that allow use of the same IP address for each load-balanced vServer on a Citrix ADC
D) Three different load-balanced vServers with three different IP addresses on a Citrix ADC

Question 25

A Citrix Network Engineer informs a Citrix Administrator that a data interface used by Citrix ADC SDX is being saturated. Which action could the administrator take to address this bandwidth concern?

A) Add a second interface to each Citrix ADC VPX instance.
B) Configure a failover interface set on each Citrix ADC VPX instance.
C) Configure LACP on the SDX for the data interface.
D) Configure LACP on the SDX for management interface.

Question 26

Scenario: A Citrix ADC is configured with Interface 1/1 and bound to VLAN 40. A Citrix Administrator executed the below command: > bind vlan 10 -ifnum 1/1 What is the result of executing this command on the Citrix ADC?

A) Interface 1/1 is bound to VLAN 20, and native VLAN is 20.
B) Interface 1/1 is bound to VLAN 20, and native VLAN is NOT changed.
C) Interface 1/1 is bound to VLAN 20, and native VLAN is 40.
D) Interface 1/1 is bound to VLAN 20, and native VLAN is 1.

Question 27

Scenario: After deploying a Citrix ADC in production, a Citrix Administrator notices that client requests are NOT being evenly distributed among backend resources. The administrator wants to change from the default load-balancing method to one that will help distribute the load more evenly. Which load-balancing method would ensure that the server with the least amount of network utilization is receiving new connections?

A) Least connection
B) Least bandwidth
C) Least response time
D) Least packets

Question 28

set gslb vServer-GSLB-1-MIR ENABLED What will the Citrix ADC appliance send when the above command is executed?

A) The Remote GSLB service as the first record in the response and adds the remaining active services as additional records
B) The Local GSLB service as the first record in the response and adds the remaining active services as additional records
C) Only the best GSLB service in the response
D) The best global server load balancing (GSLB) service as the first record in the response, and the remaining active services as additional records

Question 29

Scenario: Users are trying to access https://cs.mycompany.com, but are receiving the error below: HTTP 503 Service Unavailable What can a Citrix Administrator change in the Citrix ADC configuration to fix this?

A) Enable the content switching feature.
B) Disable the spillover redirect URL.
C) Bind a certificate.
D) Bind the default load-balancing vServer.

Question 30

A Citrix Administrator needs to configure a rate-limiting policy setting DNS requests to a threshold of 1,000 per second. Which command does the administrator need to run to correctly configure this policy?

A) HTTP.REQ.LIMIT()
B) SYS.CHECK.LIMIT()
C) SYS.CHECK.LIMIT() || CONNECTION.IP.LIMIT()
D) SYS.CHECK.LIMIT() || HTTP.REQ.LIMIT()

Question 31

Scenario: A Citrix Administrator needs to integrate LDAP for Citrix ADC system administration using current active directory (AD) groups. The administrator created the group on the Citrix ADC, exactly matching the group name in LDAP. What can the administrator bind to specify the permission level and complete the LDAP configuration?

A) A command policy to the group
B) A nested group to the new group
C) Users to the group on the Citrix ADC
D) An authentication, authorization, and auditing (AAA) action to the group

Question 32

Scenario: A Citrix Administrator is running an e-commerce web service that uses backend SQL and RADIUS servers. The e-commerce platform runs on a web server using port 80, and a website status page on port 99 reports the status of all servers. Which monitor should the administrator choose to confirm the availability of the e-commerce solution?

A) HTTP on port 99
B) HTTP-ECV on port 80
C) HTTP on port 80
D) HTTP_ECV on port 99

Question 33

Scenario: A Citrix Administrator configured SNMP to send traps to an external SNMP system. When reviewing the messages, the administrator notices several entity UP and entity DOWN messages. To what are these messages related?

A) Load-balancing vServers
B) Network interface
C) High availability nodes
D) SSL profile

Question 34

Scenario: A Citrix Administrator manages an environment that has a Citrix ADC high availability (HA) pair running on two MPX appliances. The administrator notices that the state of the secondary Citrix ADC is 'Unknown'. What is causing the secondary state to be 'Unknown'?

A) The synchronization on the secondary appliance is disabled.
B) TCP port 22 is disabled between the primary and secondary ADCs.
C) The administrator made both Citrix ADCs primary.
D) The remote procedure call (RPC) nodes are incorrectly configured.

Question 35

Scenario: The primary content switching vServer has gone down. To troubleshoot, a Citrix Administrator has issued the following command: > show csvserver CSV CSV (10.1.100.100:443) - HTTPS Type: CONTENT State: UP Last state change was at Mon Jun 29 15:20:43 2020 Time since last state change: 1 day, 06:47:58 610 Client Idle Timeout: 180 sec Down state flush: ENABLED Disable Primary vServer On Down: DISABLED Appflow logging: ENABLED Port Rewrite: DISABLED State Update: DISABLED Default: Content Precedence: URL vServer IP and Port insertion: OFF Persistence: NONE redirect: http://www.site1.com/mysite1/maintenance Backup: vServer-LB-2 Listen Policy: NONE IcmpResponse: PASSIVE RHIstate: PASSIVE Traffic Domain: 0 Based on this output, where will the subsequent request be redirected?

A) http://www.site1.com/mysite1/maintenance
B) vServer-LB-2
C) Backup content switching vServer
D) 10.1.100.100:443

Question 36

The Citrix ADC SDX architecture allows instances to share ___________ and __________. (Choose the two correct options to complete the sentence.)

A) memory
B) a CPU
C) a physical interface
D) the kernel

Question 37

A Citrix Administrator needs to use a client's IP address as the source IP address for Citrix ADC-to-server connections. Which Citrix ADC mode can the administrator use to meet this requirement?

A) USNIP
B) Layer 2
C) Layer 3
D) USIP