NEW QUESTION 1
Which three statements are true when comparing a Simple Access Control List (ACL) to an Extended ACL? (Choose three.)

• A. Extended ACLs have priorities
• B. Simple ACLs can be modified
• C. Extended ACLs apply first
• D. Simple ACLs can be based on the Source and Destination IP address
• E. Simple ACLs can bridge traffic
• F. Simple ACLs are based on the Source IP address only
• G. Simple ACLs apply first

Answer: ADG

NEW QUESTION 2
Scenario: A Citrix Administrator has configured a NetScaler active-passive high availability (HA) pair. When the HA pair fails over, customers are unable to access the hosted websites. After some troubleshooting, the administrator found that the upstream router was NOT updating its ARP table.
What can the administrator configure to resolve this issue?

• A. Independent Network Configuration (INC) mode
• B. Virtual MAC
• C. HA monitor
• D. Route Monitor

Answer: B

NEW QUESTION 3
Scenario: A company recently acquired three smaller companies; this adds more than 1500 employees to the company. The current NetScaller appliance does NOT support adding that many users.
A Citrix Administrator needs to use a Multi-Tenancy solution, giving each newly acquired company its own NetScaler for VPN access, load balancing, and at least 20 GBPS of throughput.
How can the administrator meet the needs of this environment?

• A. Install XenServer and configure a NetScaler VPX 3000 for each newly acquired company.
• B. Purchase a NetScaler MPX appliance for each newly acquired company.
• C. Purchase a NetScaler CPX for each newly acquired company.
• D. Purchase a NetScaler SDX appliance and configure a NetScaler Instance for each newly acquired company.

Answer: D

NEW QUESTION 4
Scenario: A XenDesktop Administrator just updated a StoreFront server to the X1 Receiver portal theme. The NetScaler Administrator would like to update the gateway to match StoreFront as closely as possible.
How can the NetScaler Administrator accomplish this with the least amount of administrative effort and without impacting connectivity through the gateway during the change?

• A. Create a new gateway with the X1 theme.
• B. Update the existing gateway by selecting the X1 theme from the global settings.
• C. Create a new gateway with a customs theme to match StoreFront.
• D. Update the existing gateway by building a custom theme to match StoreFront.

Answer: B

NEW QUESTION 5
A Citrix Administrator needs to configure a NetScaler high availability (HA) pair with both NetScalers in different subnets.
What does the administrator need to do for the HA pair to work in different subnets?

• A. Configure Sync VLAN
• B. Turn on HA Monitoring on all Interfaces
• C. Turn on Fail-safe Mode
• D. Turn on Independent Network Configuration (INC) mode

Answer: D

NEW QUESTION 6
Which two options should a Citrix Administrator consider when adding a secondary device in a high availability (HA) pair? (Choose two.)

• A. The Independent Network Configuration (INC) mode should be enabled.
• B. Both the devices should have different SNIP addresses.
• C. The nsroot password should be the same on both nodes.
• D. HA Monitoring should be disabled on all the unused interfaces.
• E. Configure the HA status of the Primary Node as STAYPRIMARY.

Answer: CD

NEW QUESTION 7
Which reason would account for uneven user connections on a back-end server using the default load-balancing method?

• A. Persistence is enabled
• B. Application resource utilization is uneven
• C. Incorrect load-balancing method is selected
• D. Multiplexing is disabled

Answer: A

NEW QUESTION 8
Scenario: A Citrix Administrator needs to create local user accounts for other administrators with limited privileges. The other administrators will need only:
-Read-only access
-The ability to enable and disable services and servers
Which built-in Command Policy permission level can the administrator use?

• A. Network
• B. Operator
• C. Sysadmin
• D. Read-Only

Answer: B

NEW QUESTION 9
Scenario: A Citrix Administrator is managing a NetScaler SDX running eight NetScaler instances. The administrator first needs to upgrade the firmware on the instances. However, the administrator is concerned that it needs to be done all at once.
What upgrading flexibility does SDX provide in this scenario?

• A. The NetScaler instance can be upgraded at the SDX management level, allowing all instances to be upgraded at once.
• B. The NetScaler instances have to be upgraded at the same time.
• C. The NetScaler instance can be upgraded on an individual basis, allowing all instances to run different firmware versions.
• D. It is NOT possible to upgrade the NetScaler instances to different firmware versions.

Answer: A

NEW QUESTION 10
Which mode on the NetScaler can a Citrix Administrator utilize to avoid asymmetrical packet flows and multiple route/ARP lookups?

• A. USNIP
• B. Layer 3
• C. MAC-based Forwarding
• D. Layer 2

Answer: C

Explanation: MAC-based forwarding can be used to avoid multiple-route/ARP lookups and to avoid asymmetrical packet flows.

NEW QUESTION 11
Which three pieces of information are required for a NetScaler Unified Gateway deployment? (Choose three.)

• A. Valid SSL Certificates
• B. Secondary Authentication for the Unified Gateway
• C. Enterprise license or higher
• D. Content Switching virtual server
• E. Multiple IP addresses for User Access

Answer: ACD

NEW QUESTION 12
Which type of policy should a Citrix Administrator configure to ensure that only users who have data antivirus protection can connect to the environment?

• A. Traffic
• B. Pre-Authentication Scan
• C. Smart Control
• D. SmartAccess

Answer: B

NEW QUESTION 13
Scenario: A Citrix Administrator found that whenever a NetScaler VPX high availability (HA) pair of
appliances fails over, the load-balanced websites are NOT accessible. The administrator investigated the issue and found that the router and switches do NOT support gratuitous ARP (GARP). However, the administrator cannot immediately afford to upgrade the network infrastructure.
What can the administrator do immediately to resolve the issue and prevent a future outage?

• A. Migrate the VPX pair to different hypervisor hosts.
• B. Replace the NetScaler VPX appliances with NetScaler MPX appliances
• C. Configure a Virtual MAC (VMAC) on the NetScaler.
• D. Utilize IPv6 instead of IPv4.

Answer: D

NEW QUESTION 14
Scenario: A Citrix Administrator deployed a NetScaler in one-arm mode. Currently, the VLANs 20, 30 and 40 are tagged on the interface with the option of ‘tagall’ on the interface.
What is true regarding the VLANs, when ‘tagall’ is enabled on the interface?

• A. VLANS 1, 20, 30, 40 and HA packets are tagged on the interface
• B. VLANS 20, 30 and 40 are tagged on the interface
• C. VLANS 20, 30, 40 and HA packets are tagged on the interface
• D. VLANS 1, 20, 30 and 40 are tagged on the interface

Answer: B

NEW QUESTION 15
A Citrix Administrator needs to create a customized blacklist of IP addresses to supplement the Webroot reputation check, and in order to have stricter access through NetScaler.
How can the administrator create this blacklist?

• A. Create several extended Access Control List policies.
• B. Create a data set for IPv4 address matching.
• C. Enable MAC-based Forwarding.
• D. Create several simple Access Control List policies.

Answer: A

NEW QUESTION 16
Which type of policy can be applied to a NetScaler Gateway virtual server to limit access to XenDesktop resources, if the user device does NOT comply with the company’s security requirements?

• A. Responder
• B. Authorization
• C. Session
• D. Traffic

Answer: A

NEW QUESTION 17
How does the NetScaler communicate that IP-to-MAC address bindings have changed to the switches and routers on the network, when a NetScaler high availability (HA) pair failover occurs?

• A. The NetScaler uses Reverse ARP (RARP) to update the devices on the network
• B. The NetScaler uses Proxy ARP to update the devices on the network
• C. The NetScaler uses Gratuitous ARPs (GARPs) to update the devices on the network
• D. The NetScaler uses MAC-based Forwarding to update the routers

Answer: C