Beruflich Dokumente
Kultur Dokumente
A NetScaler Engineer has created a new custom user monitor script and needs to place it in the
NetScaler filesystem for use.
Where must the engineer place the custom script so that it is available for use?
A. /nsconfig/monitors
B. /netscaler/monitors
C. /var/nstemp/monitors
D. /netscaler/monitors/perl_mod
Answer: A
Explanation:
QUESTION NO: 2
Answer: B
Explanation:
QUESTION NO: 3
Scenario: A NetScaler Engineer has discovered that the object home.php is NOT found in the
cache on the system.
bind cache global cache_pol_2 -priority 100 -gotoPriorityExpression END -type REQ_OVERRIDE
bind cache global cache_pol_3 -priority 100 -gotoPriorityExpression END -type RES_OVERRIDE
The data from the client and the server are as following:
Host: www.website.com
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Cookie: sessionid=100xyz
HTTP/1.1 200 OK
ETag: "27db3c-12ce-5e52a600"
Accept-Ranges: bytes
Content-Length: 119
Answer: B
Explanation:
QUESTION NO: 4
Which two authentication types on the NetScaler support password changes? (Choose two.)
A. TACACS+
B. LDAP (TLS)
C. LDAP (SSL)
D. RADIUS (PAP)
E. LDAP (PLAINTEXT)
F. RADIUS (MSCHAPv2)
Answer: B,C
Explanation:
QUESTION NO: 5
Scenario: A NetScaler Engineer is viewing Authentication, Authorization and Access (AAA) events
on the NetScaler appliance to determine why a user is unable to log on. The events below have
been logged during this timeframe:
/usr/home/build/rs_80_48/usr.src/usr.bin/nsaaad/../../netscaler/aaad/ldap_drv.c[40\]:
start_ldap_auth attempting to
/usr/home/build/rs_80_48/usr.src/usr.bin/nsaaad/../../netscaler/aaad/ldap_drv.c[291\]:
recieve_ldap_bind_event receive ldap bind event
/usr/home/build/rs_80_48/usr.src/usr.bin/nsaaad/../../netscaler/aaad/ldap_drv.c[326\]:
Answer: B
Explanation:
QUESTION NO: 6
A company has an external-facing web application that requires end-to-end encryption and Layer-
7 functionality.
Which protocol type would an engineer choose for the virtual server and service?
A. SSL
B. SSL_TCP
C. SSL_PUSH
D. SSL_BRIDGE
Answer: B
Explanation:
QUESTION NO: 7
Scenario: A NetScaler Engineer has enabled the HTTP Compression feature on an existing
Answer: C
Explanation:
QUESTION NO: 8
Which two of the listed statements are true about Access Control Lists (ACLs) on the NetScaler?
(Choose two.)
Answer: A,B
Explanation:
QUESTION NO: 9
What is the purpose of the SSL Certificate Authority (CA) root certificate during an SSL
connection?
Answer: A
Explanation:
In order to create a three-node NetScaler cluster, all nodes must __________ and __________.
(Choose the two correct options to complete the sentence.)
A. be physical appliances
B. have Platinum licensing
C. be using the same build
D. be the same platform model
Answer: C,D
Explanation:
QUESTION NO: 11
Scenario: A NetScaler Engineer has been tasked with reconfiguring an existing NetScaler
deployment. The engineer is currently running a high-availability (HA) pair of NetScaler 10.5
appliances, but the Vice President of IT has requested a more efficient way of preserving and
balancing network resources and throughput while having a single point of management for the
NetScaler appliances.
What should the engineer configure to satisfy the requirements outlined by the Vice President of
IT?
Answer: B
Explanation:
QUESTION NO: 12
A NetScaler Engineer plans to deploy a third-party application that will perform scheduled
configuration auditing by using NITRO API with a REST interface.
Which management protocol should the engineer enable to allow NITRO API access?
A. SSH
Answer: B
Explanation:
QUESTION NO: 13
A. NTP servers
B. Clients on the Internet
C. Load-balanced web services
D. Load-balanced authentication services
Answer: A
Explanation:
QUESTION NO: 14
Which command could the engineer execute to provide persistence for clients while still
distributing the requests across the bound services?
Answer: D
Explanation:
Scenario: A NetScaler Engineer has created an SSL virtual server that utilizes SSL services. The
engineer needs to configure certificate authentication from the NetScaler to the backend web
services.
What should the engineer do to meet the requirements outlined in the scenario?
Answer: B
Explanation:
QUESTION NO: 16
Which service setting would a NetScaler Engineer use in the command-line interface to limit
connections to server resources?
A. -maxReq
B. -maxClient
C. -monThreshold
D. -maxBandwidth
Answer: B
Explanation:
QUESTION NO: 17
Answer: C
Explanation:
QUESTION NO: 18
In order to configure integrated cache, a NetScaler Engineer would need to reboot the NetScaler
when the integrated caching feature is __________ and cache memory limit is set to __________.
(Choose the correct set of options to complete the sentence.)
A. enabled; zero
B. disabled; zero
C. enabled; non-zero
D. disabled; non-zero
Answer: A
Explanation:
QUESTION NO: 19
Which two certificate formats are supported when creating a certificate key pair on the NetScaler?
(Choose two.)
A. PEM
B. DER
C. PKCS7
D. PKCS12
Answer: A,B
Explanation:
QUESTION NO: 20
As a result of connecting two NetScaler interfaces in the same L2 broadcast domain/VLAN (unless
link aggregation is configured), the NetScaler will __________. (Choose the correct option to
complete the sentence.)
A. restart
B. disable one interface
C. cause a network loop
D. disable both interfaces
QUESTION NO: 21
Scenario: Users in an organization need to access several web applications daily. Management
has asked a NetScaler Engineer to reduce the amount of times users have to enter credentials
when accessing web applications.
Answer: C
Explanation:
QUESTION NO: 22
The upgrade script copies the updated NetScaler kernel file to the __________ NetScaler
directory. (Choose the correct option to complete the sentence.)
A. /var
B. /flash
C. /nsconfig
D. /flash/boot
Answer: B
Explanation:
QUESTION NO: 23
Which setting must an engineer ensure is configured before a Subnet IP (SNIP) could be used to
communicate with servers on the same network segment?
Answer: C
Explanation:
QUESTION NO: 24
Which tool could a NetScaler Engineer use to monitor client-side rendering times for a Web
application that is load-balanced by NetScaler?
A. Tcpdump
B. Insight Center
C. Command Center
D. NetScaler Dashboard
Answer: A
Explanation:
QUESTION NO: 25
What should a NetScaler Engineer configure to create load-balancing virtual servers and services
on the same VLAN with overlapping IP addresses?
A. Listen policies
B. Traffic domains
C. Dynamic routing
D. Policy-based routing
Answer: B
Explanation:
QUESTION NO: 26
A user on VLAN 100 is attempting to access a virtual server on 192.168.1.25 and NOT getting a
response.
After troubleshooting the network, an engineer identifies that asymmetric packet flows are NOT
using the right interfaces on the return path to the client.
A. Layer 3 Mode
B. Layer 2 Mode
C. Direct Route Advertisement
D. MAC-based forwarding (MBF)
Answer: D
Explanation:
QUESTION NO: 27
Which outcome does the minify JavaScript option of the Front End Optimization (FEO) feature
provide?
Answer: C
Explanation:
QUESTION NO: 28
Which feature could a Network Engineer configure in order to restrict client connections to a
specific bandwidth limit?
A. Spillover
B. Rate Limiting
C. SureConnect
Answer: B
Explanation:
QUESTION NO: 29
Scenario: A web server needs to be load-balanced but the content for the web page is retrieved
from different server pools. There is a server pool for images, another for text files, and another for
documents.
Which NetScaler feature would allow a user to retrieve content from all pools through a single IP
address by leveraging the ability of NetScaler to forward traffic based on the incoming request?
A. Load Balancing
B. Content Filtering
C. Content Switching
D. Global Server Load Balancing
Answer: A
Explanation:
QUESTION NO: 30
Server Name Indication (SNI) is required when __________. (Choose the correct option to
complete the sentence.)
Answer: C
Explanation:
QUESTION NO: 31
What should an engineer configure in an environment where two NetScaler appliances are
A. Fail-Safe Mode
B. Route Monitors
C. Command Propagation
D. Configuration Synchronization
Answer: A
Explanation:
QUESTION NO: 32
When creating a link aggregation channel on the NetScaler, the "-throughput" option sets the
__________. (Choose the correct option to complete the sentence.)
Answer: B
Explanation:
QUESTION NO: 33
A. syslog_srv_3
B. syslog_srv_4
C. syslog_srv_1
D. syslog_srv_2
Answer: A
Explanation:
QUESTION NO: 34
Scenario: A NetScaler Engineer is working with a NetScaler appliance that has two network
interface cards (NICs). The first NIC is placed on the DMZ network and the second NIC is on the
internal network. The default route is configured to the gateway on the internal network. A virtual
server is configured on the DMZ-network and the firewall on the DMZ is using network address
translation (NAT) to allow external traffic to the virtual server.
When a user from the Internet attempts to connect to the NAT'd external address, the session
never establishes. The engineer performs an nstrace and sees that the user's traffic hits the
NetScaler. The engineer then discovers that the problem is an asymmetrical packet flow.
Which two settings could the engineer configure to resolve the issue? (Choose two.)
Answer: B,D
Explanation:
QUESTION NO: 35
Scenario: A NetScaler Engineer connected a new NetScaler MPX appliance to the network.
However, some of the interfaces were blocked on the uplink switch. The engineer needs to
perform a network packet trace on the NetScaler appliance. For troubleshooting purposes, the
engineer needs to separate trace files for each interface. The engineer executed the following
command from the NetScaler CLI:
What should the engineer do to produce separate trace files for each interface?
Answer: C
Explanation:
QUESTION NO: 36
On a load-balancing virtual server with multiple bound services, Redirect URL will be invoked
when __________. (Choose the correct phrase to complete the sentence.)
Answer: D
Explanation:
QUESTION NO: 37
Which two encryption algorithms are supported on the NetScaler to store the encrypted SSL
private key with a password? (Choose two.)
A. AES
B. RC4
C. DES
D. DES3
Answer: C,D
Explanation:
QUESTION NO: 38
Scenario: A website that provides hotel bookings lists each hotel through their membership
number on the site URL. For example, the Martello Tower member ID is 6754 and its web
presence is at http://www.hoteltestwebsite.com/hotels/6754/index.html.
There are 20,000 hotels in the database of the website. The website business owner no longer
wants to display the hotel sites for hotel numbers 1-10000, inclusive. A NetScaler Engineer must
configure an appropriate responder page to indicate that these sites are unavailable.
A. HTTP.REQ.URL.PATH.GET(2).TYPECAST_NUM_T(DECIMAL).BETWEEN(0, 10000)
B. HTTP.REQ.URL.AFTER_STR("hotels").TYPECAST_NUM_T(DECIMAL).BETWEEN(0, 10000)
C. HTTP.REQ.URL.BEFORE_STR("index.html").TYPECAST_NUM_T(DECIMAL).BETWEEN(0,
10000)
D. HTTP.REQ.URL.PATH.GET(1).TYPECAST_NUM_T(DECIMAL).GT(0) &&
HTTP.REQ.URL.PATH.GET(1).TYPECAST_NUM_T(DECIMAL).LT(10000)
Answer: A
Explanation:
QUESTION NO: 39
In which two places could a NetScaler Engineer enable TCP Buffering? (Choose two.)
A. Service
B. Globally
C. HTTP profile
D. Virtual server
Answer: A,B
Explanation:
QUESTION NO: 40
Which two content types are, by default, compressible content on the NetScaler? (Choose two.)
A. zip
B. png
C. css
D. jpeg
E. html
Answer: C,E
Explanation:
QUESTION NO: 41
On a NetScaler system, the __________ timeout value will mark any session that has reached the
idle timeout for cleanup. (Choose the correct option to complete the sentence.)
A. Client
B. Server
C. Zombie
D. NATPCB
Answer: C
Explanation:
QUESTION NO: 42
Scenario: A NetScaler Engineer has configured COOKIEINSERT persistence with a timeout value
of two minutes on an SSL LBvServer. The idle time requirement for the application itself CANNOT
be determined. Users report connections are intermittent. Once a session is disconnected, a user
must re-authenticate in order to regain access.
In order to correct this issue, the engineer should set persistence to __________ with a timeout of
__________ minutes. (Choose the correct set of options to complete the sentence.)
A. SOURCEIP; two
B. SSLSESSION; ten
C. SRCIPDESTIP; two
D. COOKIEINSERT; zero
Answer: D
Explanation:
QUESTION NO: 43
Answer: D
Explanation:
QUESTION NO: 44
Which setting would a NetScaler Engineer disable in order to stop the NetScaler from acting as a
router for non-NetScaler owned IP addresses or entities?
A. Layer 2 mode
B. Layer 3 mode
C. MAC-based forwarding
Answer: C
Explanation:
QUESTION NO: 45
What is the purpose of binding Certificate Authority (CA) certificates to a virtual server?
Answer: C
Explanation:
QUESTION NO: 46
Which option needs to be set on the service in order to maintain the original client-IP to the
backend service?
A. -cka yes
B. -usip yes
C. -cip disabled
D. -useproxyport yes
Answer: B
Explanation:
QUESTION NO: 47
A NetScaler Engineer is required to use SNMP v3 on a NetScaler instance and needs to use
authentication and encryption for all SNMP v3 communication.
What are two places where the engineer could set mandatory authentication and encryption?
(Choose two.)
Answer: B,C
Explanation:
QUESTION NO: 48
Scenario: Users complain that they are NOT able to connect to a web site using the IP address.
The relevant portion of the configuration is shown below:
add ssl profile srv-web -sessReuse ENABLED -sessTimeout 120 -tls11 DISABLED -tls12
DISABLED -strictCAChecks YES
add lb vserver srv-web SSL 192.168.1.22 443 -persistenceType NONE -cltTimeout 180
set ssl vserver srv-web -eRSA DISABLED -clientAuth ENABLED -clientCert Optional -tls11
DISABLED -tls12 DISABLED -SNIEnable ENABLED
Answer: C
Explanation:
QUESTION NO: 49
Which shell command could the engineer use to gather the needed information?
Answer: B
Explanation:
QUESTION NO: 50
Scenario: A NetScaler Engineer has received complaints from some users stating that their
business applications are running slow. The engineer analyzes the application servers and sees
the following CPU utilization:
The engineer had set the load-balancing method to round robin but decided to change the load-
balancing configuration for the business applications.
Which load-balancing method could the engineer use to address this issue?
A. Custom Load
B. Least Packets
C. Least Connections
D. Least Response time
Answer: A
Explanation:
QUESTION NO: 51
Answer: C
Explanation:
QUESTION NO: 52
When using static proximity load-balancing method for a Global Server Load Balancing (GSLB)
virtual server, there must be a match between the IP addresses in the custom/static database to
the IP address of the _________ so that it is associated with a given location. (Choose the correct
option to complete the sentence.)
A. GSLB service
B. ADNS service
C. Load-balancing server
D. Client local DNS (LDNS)
Answer: A
Explanation:
QUESTION NO: 53
Scenario: A NetScaler Engineer must implement load-balancing on a web server farm that serves
video clips to end users. Video clip files vary in size. The engineer needs to send traffic to the
server with the least amount of network utilization.
A. Least Request
B. Least Bandwidth
C. Least Connection
Answer: B
Explanation:
QUESTION NO: 54
Which protocol is responsible for exchanging site metric, network metric, and persistence
information between sites using Global Server Load Balancing (GSLB)?
A. SSH
B. MEP
C. RPC
D. NITRO
Answer: B
Explanation:
QUESTION NO: 55
Scenario: The marketing department would like a short URL to use for a product launch that will
redirect users to the product information page on the companys website.
Which NetScaler command should a NetScaler Engineer run in order to meet the requirements of
the scenario?
Answer: A
Explanation:
QUESTION NO: 56
Which command must an engineer use to run a cluster with less than (n/2+1) number nodes
online?
Answer: C
Explanation:
QUESTION NO: 57
Which of the listed options is a simple Access Control List (ACL) attribute?
A. VLAN ID
B. Source IP address
C. NetScaler interface
D. Destination IP address
Answer: A
Explanation:
QUESTION NO: 58
While binding a certificate key pair where the key is a 2048-bit, a NetScaler Engineer receives the
following error message:
"Certificate with key size greater than RSA512 or DSA512 bits not supported"
Answer: D
Explanation:
QUESTION NO: 59
A NetScaler Engineer has been given the task of protecting an internal web site by requiring users
to enter their credentials.
A. AAA
B. SSL Offloading
C. Content Filtering
D. Application Firewall
Answer: D
Explanation:
QUESTION NO: 60
A NetScaler Engineer could specify the SNIP to use to communicate with servers on that network
by configuring a __________. (Choose the correct option to complete the sentence.)
A. net profile
B. listen policy
C. traffic domain
D. policy-based route
Answer: A
Explanation:
QUESTION NO: 61
The user is able to log on but is NOT able to execute certain commands. The engineer goes back
and looks at the logs, and the following is displayed:
Answer: A
Explanation:
QUESTION NO: 62
Scenario: A NetScaler Engineer is using the following policy to forward traffic when performing
content switching:
A. load-balancing servers
B. load-balancing services
C. load-balancing virtual servers
D. content-switching virtual server
Answer: C
Explanation:
QUESTION NO: 63
What are two benefits of using Link Aggregation Control Protocol (LACP)? (Choose two.)
A. Redundancy
B. Compression
C. Reduce TCP latency
D. Increased throughput
E. Automatic configuration of TCP windows
Answer: A,D
Explanation:
QUESTION NO: 64
Scenario: A NetScaler Engineer has a high-availability (HA) pair of NetScaler MPX devices (NS1
and NS2) connected on interfaces 0/1, 1/1 and 1/2. NS1 is currently the primary unit. Fail-safe
mode is NOT enabled. High-availability monitor is enabled on all the connected interfaces. The
engineer sees the following line in the output of his "show node" command from the command-line
interface:
Answer: A
Explanation:
QUESTION NO: 65
A NetScaler Engineer created an HTTP service and did NOT bind any monitors to the service.
Which monitor will the NetScaler automatically bind to the HTTP service?
A. tcp
B. http
C. tcp-ecv
D. http-ecv
E. tcp-default
F. ping-default
Answer: E
Explanation:
QUESTION NO: 66
Which troubleshooting tool will show policy hits and verify that a policy expression is being
invoked?
A. nspepi
B. nsapimgr
C. nstrace.sh
D. nsconmsg
Answer: D
Explanation:
QUESTION NO: 67
Which NetScaler caching type requires proxy configuration on all client devices?
Answer: C
Explanation:
QUESTION NO: 68
Scenario: A client connecting to an SSL virtual server receives the following error:
"Invalid Server Certificate The server certificate is invalid. Do you wish to accept this certificate
and connect to the server anyway?"
Answer: C
Explanation:
QUESTION NO: 69
Which two NetScaler command-line interface commands could an engineer execute to change
TCP Window Scaling settings on the NetScaler? (Choose two.)
A. set netProfile
B. add ns tcpProfile
C. unset ns tcpParam
D. set ns tcpbufParam
E. add autoscale profile
Answer: B,C
Explanation:
On which two objects could a NetScaler Engineer bind cipher groups? (Choose two.)
A. Server
B. Service
C. SSL policy
D. SSL profile
E. Virtual server
Answer: B,E
Explanation:
QUESTION NO: 71
A. FTP
B. HTTP
C. RTSP
D. RADIUS
Answer: B
Explanation:
QUESTION NO: 72
Scenario: A NetScaler Engineer is configuring a new system with connected interfaces 10/1 - 10/4
and runs the following commands:
add vlan 10
Answer: D
Explanation:
QUESTION NO: 73
Which connection state is included in the Current Server Connections parameter, but not affected
by Max Clients?
A. Open
B. Listen
C. Closing
D. Open Established
Answer: C
Explanation:
QUESTION NO: 74
Which command must a NetScaler Engineer run at the command-line interface to enable a Link
Aggregation Control Protocol (LACP) channel?
Answer: C
Explanation:
QUESTION NO: 75
A NetScaler Engineer created an SSL virtual server but the status is showing as state DOWN.
Answer: C
Explanation:
QUESTION NO: 76
Which client header indicates support for the type of compression the NetScaler may use?
A. Accept
B. User-Agent
C. Content-Type
D. Accept-Encoding
Answer: D
Explanation:
QUESTION NO: 77
Scenario: A NetScaler Engineer has discovered that the object home.php is NOT found in the
cache on the system.
bind cache global cache_pol_2 -priority 100 -gotoPriorityExpression END -type REQ_OVERRIDE
The data from the client and the server are as following:
Host: www.website.com
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Cookie: sessionid=100xyz
HTTP/1.1 200 OK
ETag: "27db3c-12ce-5e52a600"
Accept-Ranges: bytes
Content-Length: 119
Connection: close
Answer: D
Explanation:
QUESTION NO: 78
Which IP address type should be bound to a VLAN in order to isolate traffic to backend services?
A. Virtual IP (VIP)
B. Cluster IP (CLIP)
C. Subnet IP (SNIP)
D. NetScaler IP (NSIP)
Answer: C
Explanation:
QUESTION NO: 79
Scenario: NetScaler features are NOT licensed. A NetScaler Engineer has checked that the
proper platform license file has been uploaded.
Answer: B
Explanation:
QUESTION NO: 80
Which SSL parameter should an engineer configure to bind multiple certificate key pairs to a
A. SNI enable
B. Session reuse
C. Send close-notify
D. Client authentication
Answer: A
Explanation:
QUESTION NO: 81
What is the key benefit to enabling Session Reuse on an SSL offload VServer?
Answer: D
Explanation:
QUESTION NO: 82
Which two are HTTP response codes from a successful cache hit by default? (Choose two.)
A. 304
B. 500
C. 200
D. 401
Answer: A,C
Explanation:
QUESTION NO: 83
A. CALLID
B. RTSPID
C. SOURCEIP
D. COOKIEINSERT
Answer: A
Explanation:
QUESTION NO: 84
Scenario: A NetScaler Engineer wants to make it easier for the help desk group to access the
active node in a high-availability pair. Members of the help desk group must be able to access the
NetScaler in a secure way without being notified of warnings in their web browsers.
Which two of the listed steps must the engineer take to meet the requirements of the scenario?
(Choose two.)
Answer: B,C
Explanation:
QUESTION NO: 85
What would a NetScaler Engineer configure to allow internal IPv4 servers on a private subnet
access to the external Internet through the NetScaler?
Answer: D
Explanation:
QUESTION NO: 86
A recent security audit has identified that NetScaler management is available on all Subnet IP
(SNIP) adresses.
Which step could an engineer take to ensure that these services are only available through the
NetScaler IP (NSIP)?
Answer: D
Explanation:
QUESTION NO: 87
Scenario: A NetScaler Engineer creates a new HTTP VServer using the following command:
During testing, the engineer notices a cookie named NSC_iuuq2 with a value of:
ffffffff020a1d1545525d5f4f58455e445a4a423660
Answer: D
Explanation:
How could a NetScaler Engineer ensure that a content-switching virtual server is marked as
DOWN if all target load-balancing servers show as DOWN?
A. Specify a monitor
B. Enable State Update
C. Specify a route monitor
D. Configure a backup virtual server
Answer: B
Explanation:
QUESTION NO: 89
Scenario: A NetScaler Engineer needs to enable access to a load-balancing virtual server from
two customers that belong to different VLANs, VLAN500 and VLAN600. Each customer must
access the services and servers specific to their VLAN and should never be able to reach another
customer service or servers.
Traffic Domain (TD) 1 has been created for VLAN500 and Traffic Domain (TD) 2 for VLAN600.
Load-balancing services have also been created for each server on TD1 and TD2. The TD for the
virtual server is TD 3 and IP address 172.10.0.30.
In order to complete this setup, the engineer should create a load-balancing virtual server with IP
172.10.0.30 on TD 3 and use __________. (Choose the correct option to complete the sentence.)
Answer: D
Explanation:
QUESTION NO: 90
Which item needs to be configured to enable content prefetch in Integrated Caching on the
NetScaler appliance?
Answer: D
Explanation:
QUESTION NO: 91
A NetScaler Engineer would like to direct identical requests for the same service to specific cache
servers.
A. URL Hash
B. Domain Hash
C. Source IP Hash
D. Source IP Destination IP Hash
Answer: A
Explanation:
QUESTION NO: 92
Scenario: A Network Engineer needs to provide a solution for mobile users who use devices that
do NOT support basic access authentication.
Which three steps should be included as part of the engineer's plan to implement this requirement
using NetScaler? (Choose three.)
Answer: B,D,F
QUESTION NO: 93
Scenario: A NetScaler Engineer recently enabled the HTTP Compression feature. In reviewing the
HTTP compression statistics, the engineer notices that content from all HTTP virtual servers
created prior to enabling the compression feature is NOT being compressed.
What should the engineer do to allow compression for any pre-existing HTTP virtual servers?
Answer: C
Explanation:
QUESTION NO: 94
A. Redirected to http://www.external.hosting.com
B. Forwarded to the backup server, ignoring the query
C. Forwarded to the backup server, preserving the query
D. Redirected to http://www.external.hosting.com/path/query
QUESTION NO: 95
When would it be necessary to configure Failover Interface Set (FIS) in an environment that has
two NetScaler appliances in high availability (HA) mode?
Answer: A
Explanation:
QUESTION NO: 96
Which NetScaler feature would help improve the network performance of the backend servers in
this scenario?
A. SureConnect
B. Compression
C. TCP Buffering
D. Surge Protection
Answer: C
Explanation:
QUESTION NO: 97
When a content-switching virtual server is used and idle client connections must stay established
longer than the default NetScaler value, in which two locations could an engineer adjust the client
Answer: A,D
Explanation:
QUESTION NO: 98
Scenario: A NetScaler Engineer is troubleshooting an issue and using /var/log/ns.log to view the
errors.
The logs are being filled with messages like the ones below:
Which option should the engineer modify to stop these types of messages from getting logged in
/var/log/ns.log?
Answer: D
Explanation:
QUESTION NO: 99
A. 3003
B. 3008
C. 3010
D. 3011
Answer: A
Explanation:
A. Round Robin
B. Source IP Hash
C. Least Connection
D. Least Response Time
Answer: C
Explanation:
Scenario: A NetScaler Engineer retrieves the following configuration from support and enters it
into the command-line interface:
The immediate effect of this configuration is that it will __________ the server header in the
__________ if the request is coming from a network other than 172.16.0.0/16. (Choose the correct
set of options to complete the sentence.)
A. keep; request
B. keep; response
C. remove; request
D. remove; response
Answer: D
Explanation:
What is the only input format supported by the NetScaler when using the NetScaler Certificate
Import wizard within the configuration utility?
A. JKS
B. PEM
C. DER
D. PKCS#12
Answer: D
Explanation:
An end user is receiving authentication errors when accessing a load-balancing virtual server that
uses Authentication, Authorization and Access (AAA)-TM.
Which shell command should a NetScaler Engineer execute to show AAA events in real time to
help diagnose this issue?
A. tail /tmp/aaad.debug
Answer: B
Explanation:
A NetScaler Engineer would like to encrypt the LDAP authentication traffic from a NetScaler to the
internal LDAP servers.
A. SSL
B. TCP
C. RADIUS
D. SSL_TCP
Answer: D
Explanation:
A NetScaler Engineer is reviewing the performance of a NetScaler appliance and notices that TCP
multiplexing (TCP connection reuse) appears to NOT be working for a virtual server.
Answer: D
Explanation:
Scenario: A NetScaler Engineer has the following set in the Global Server Load Balancing (GSLB)
configuration:
How does this influence the default service monitoring behavior on the remote site?
Answer: C
Explanation:
Scenario: A NetScaler Engineer is using the DataStream feature. The NetScaler appliance is
located in front of a MySQL Database server in the network topology.
The engineer would like to block requests that would drop a database. The engineer comes up
with the expression MYSQL.REQ.QUERY.TEXT.CONTAINS("drop database").
The engineer should configure the expression with the ___________ feature to block these
requests. (Choose the correct option to complete the sentence.)
A. Responder
B. Rate Limiting
C. Content Filtering
D. Access Control List
Answer: A
Explanation:
A. add ns acl rule1 DENY -srcIP 10.0.1.1 -srcPort 103 -TTL 600
B. add ns acl rule1 DENY -srcIP 10.0.1.1 -srcPort 103 -protocol TCP
C. add ns acl rule1 DENY -srcport 103 -destIP 10.0.1.1 -protocol TCP
D. add ns simpleacl rule1 DENY -srcIP 10.0.1.1 -destport 103 -protocol TCP
Answer: D
Explanation:
A. Run the nstcpdump.sh command from the NetScaler shell and specify the interface
B. Run the nstcpdump.sh command from the NetScaler shell and specify the filter parameter
C. Run the start nstrace command from the NetScaler command-line interface and specify the
filter parameter
D. Run the start nstrace command from the NetScaler command-line interface and specify the
PerNIC parameter
Answer: C
Explanation:
A NetScaler Engineer has installed Command Center, Insight Center, Web Logging and an
Integration Pack for System Center.
A. Web Logging
B. Insight Center
Answer: B
Explanation:
A NetScaler Engineer needs to audit extended Access Control List (ACL) hits.
Which two areas would the engineer enable logging so that the ACL hits could be stored in the
/var/log/ns.log? (Choose two.)
A. The ACL
B. The syslogAction
C. The nslog parameters
D. The syslog parameters
Answer: A,D
Explanation:
A NetScaler Engineer needs an SNMP alert to be sent when CPU utilization is 90% or higher on a
NetScaler instance.
Which two steps must the engineer take to configure the SNMP alert? (Choose two.)
Answer: B,D
Explanation:
Which command will allow an engineer to change the NetScaler IP (NSIP) from the command-line
interface?
Answer: C
Explanation:
A NetScaler Engineer has created a new monitor using the following command:
add lb monitor mon_inline HTTP-INLINE -respCode 200 302 401 -httpRequest "HEAD /" -interval
10 -reverse YES -secure YES
This monitor adds an HTTP-INLINE monitor __________. (Choose the correct phrase to complete
the sentence.)
Answer: B
Explanation:
Scenario: An organization has a fair usage policy that limits each customer to a maximum of five
active connections in any given second. A NetScaler Engineer is given the task of implementing
the requirements to enforce a policy using the Rate Limiting feature on NetScaler.
Which commands should the network engineer execute to create a proper selector and limit
Answer: A
Explanation:
The Lazy Load action of Front End Optimization (FEO) improves the end-user experience by
allowing images to __________. (Choose the correct phrase to complete the sentence.)
Answer: C
Explanation:
Scenario: A NetScaler Engineer is addressing an issue discovered during a vulnerability scan. The
security team is requiring that the engineer disable specific SSL ciphers on the SSL VServer.
Which two methods could the engineer use to meet this requirement? (Choose two.)
Answer: B,E
Explanation:
VLAN 100 is bound to interface 10/3 and VLAN 200 is bound to interface 10/4.
Which VLAN is shown with a "show interface" command for interface 10/3?
A. 1
B. 100
C. 200
D. 500
Answer: D
Explanation:
Scenario: An engineer is upgrading the NetScaler firmware from version 10.1 to 10.5 and has a
high-availability (HA) setup of two NetScaler MPX appliances.
A. Upgrade the primary unit, test on the new build, and then upgrade the secondary unit.
B. Disable the secondary unit, upgrade the primary, test the new build and then upgrade the other
unit.
C. Upgrade the secondary unit, do the failover, test on the new build, and then upgrade the
primary unit.
Answer: C
Explanation:
Which two options could a NetScaler Engineer configure to ensure that a revoked client certificate
CANNOT be used for a client certificate authentication? (Choose two.)
Answer: B,D
Explanation:
Scenario: A NetScaler Engineer is configuring a NetScaler that has three interfaces. The first
interface is connected to the internal network, the second interface is connected to the DMZ1-
network, and the third interface is connected to the DMZ2-network.
DMZ1 and DMZ2 networks are behind different firewalls, and both firewalls are sending traffic
through network address translation (NAT) to the DMZ networks.
Internet traffic reaches the virtual servers located in DMZ1 but NOT the virtual servers located in
DMZ2.
Answer: C
Explanation:
Scenario: An engineer has been given the task of selecting the TCP profile for a NetScaler
appliance. The appliance has a 1.5Mbit WAN interface that has considerable and intermittent
packet loss.
Which TCP profile should the engineer choose to optimize traffic for the WAN interface?
A. nstcp_default_profile
B. nstcp_default_tcp_lfp
C. nstcp_default_tcp_lnp
D. nstcp_default_tcp_lan
Answer: C
Explanation: