Question No : 1
A Citrix Administrator deploys a new Citrix ADC MPX appliance in the demilitarized zone (DMZ), with one interface in the DMZ and the other on the internal network.
In which mode should the administrator deploy the Citrix ADC?

• A.One-arm
• B.Two-arm
• C.Transparent
• D.Forward proxy

Show Answers

Answer:

Question No : 2
A Citrix Administrator is creating a new SSL vServer and notices the ns_default_ssl_profile frontend SSL profile is automatically bound to the SSL vServer.
Which two actions can the administrator perform to change or remove the ns_default_ssl_profile_frontend SSL profile once it is enabled? (Choose two.)

• A.Globally unbind the ns_default_ssl_profile_frontend SS
• B.Unbind the default SSL profile and bind the newly created SSL profile.
• C.Create a separate SSL profile.
• D.Unbind the ns_default_ssl_profile_frontend SSL profile from the SSL vServer without binding a replacement SSL profile.
• E.Globally disable the ns_default_ssl_profile_frontend SSL profile.

Show Answers

Answer:
Explanation:
"Once default SSL Profiles are enabled, you cannot disable the default SSL Profiles."

Question No : 3
If VLAN 20 is bound to the interface as tagged in an environment where Citrix ADC is configured with the default settings, which VLANs will be bound to an interface?

• A.VLAN 1 tagged and VLAN 20 tagged
• B.VLAN 20 tagged only
• C.VLAN 1 untagged and VLAN 20 tagged
• D.VLAN 20 untagged only

Show Answers

Answer:

Question No : 4
A Citrix Administrator needs to confirm that all client certificates presented to the authentication vServer are valid until the year 2023.
Which expression can the administrator use to meet this requirement?

• A.CLIEN
• B.SS
• C.CLIENT_CER
• D.VALID_NOT_AFTE
• E.EQ(GMT2023)
• F.CLIEN
• G.SS
• H.CLIENT_CER
• I.VALID_NOT_BEFOR
• J.EQ(GMT2023)
• K.CLIEN
• L.SS
• M.ORIGIN_SERVER_CER
• N.VALID_NOT_AFTE
• O.EQ(GMT2023)
• P.CLIEN
• Q.SS
• R.CLIENT_CER
• S.DAYS_TO_EXPIR
• T.EQ(2023)

Show Answers

Answer:
Explanation:
https://docs.citrix.com/en-us/citrix-adc/current-release/appexpert/policies-and-expressions/adv-policy-exp-working-with-dates-times-and-numbers/exp-for-ssl-certificate-date.html
Reference: https://docs.citrix.com/en-us/citrix-adc/current-release/ssl/ssl-actions-and-policies/config-built-in-sslactions.html

Question No : 5
Scenario: A Citrix ADC is configured with Interface 1/1 and bound to VLAN 40. A Citrix Administrator executed the below command:
> bind vlan 10 Cifnum 1/1
What is the result of executing this command on the Citrix ADC?

• A.Interface 1/1 is bound to VLAN 20, and native VLAN is 20.
• B.Interface 1/1 is bound to VLAN 20, and native VLAN is NOT changed.
• C.Interface 1/1 is bound to VLAN 20, and native VLAN is 40.
• D.Interface 1/1 is bound to VLAN 20, and native VLAN is 1.

Show Answers

Answer:
Explanation:
https://www.citrix.com/blogs/2014/12/29/netscaler-vlans-demystified/ https://support.citrix.com/article/CTX115575

Question No : 6
Scenario:
POLICY 1:
add rewrite action ACT_1 corrupt_http_header Accept-Encoding
add rewrite policy POL_1 HTTPS.REQ.IS_VALID ACT_1
POLICY 2:
add rewrite action ACT_2 insert_http_header Accept-Encoding “\”identity\””
add rewrite policy POL_2 “HTTP.REQ.IS_VALID “ ACT_2
How can a Citrix Administrator successfully bind the above rewrite policies to the load-
balancing vServer
lb_vsrv so that POL_2 is evaluated after POL_2 is evaluated?

• A.bind lb vServer lb_vsrv CpolicyName POL_1 Cpriority 110 CgotoPriorityExpression NEXT Ctype REQUEST bind lb vServer lb_vsrv CpolicyName POL_2 Cpriority 100 CgotoPriorityExpression END Ctype REQUEST
• B.bind lb vServer lb_vsrv CpolicyName POL_1 Cpriority 90 CgotoPriorityExpression NEXT Ctype REQUEST bind lb vServer lb_vsrv CpolicyName POL_2 Cpriority 100 CgotoPriorityExpression END Ctype REQUEST
• C.bind lb vServer lb_vsrv CpolicyName POL_1 Cpriority 90 CgotoPriorityExpression END Ctype REQUEST bind lb vServer lb_vsrv CpolicyName POL_2 Cpriority 80 CgotoPriorityExpression NEXT Ctype REQUEST
• D.bind lb vServer lb_vsrv CpolicyName POL_1 Cpriority 90 Ctype REQUEST bind lb vServer lb_vsrv CpolicyName POL_2 Cpriority 100 Ctype REQUEST

Show Answers

Answer:
Explanation:
- Pol1 has a prio of 90 so it's evaluated first
-gotoPrioExpression NEXT means that it will evaluate next item in the policy list - Pol2 has a prio of 100, so it"s avaluated after Pol1

Question No : 7
When a Citrix ADC high availability (HA) pair failover occurs, by what method does the Citrix ADC communicate to the network switches and routers that IP-to-MAC address bindings have changed?

• A.Reverse ARP (RARP) to update the network devices
• B.MAC-based forwarding (MBF) to update the routers
• C.Proxy ARP to update the network devices
• D.Gratuitous ARPs (GARPs) to update the network devices

Show Answers

Answer:
Explanation:
Reference: https://www.citrix.com/blogs/2015/01/05/netscaler-best-practice-with-vmac-in-a-high-availabilityconfiguration/

Question No : 8
Scenario: A Citrix Administrator is managing a Citrix ADC SDX running eight Citrix ADC instances. The administrator needs to upgrade the firmware on the instances. However, the administrator is concerned that it needs to be done simultaneously.
What upgrading flexibility does SDX provide in this scenario?

• A.The Citrix ADC instances must be upgraded simultaneously.
• B.The Citrix ADC instances can be upgraded from the lights out management (LOM) port and Citrix Cloud services to different firmware versions.
• C.The Citrix ADC instances can be upgraded on an individual basis, allowing all instances to run independent firmware versions.
• D.The Citrix ADC instances can be upgraded at the SDX management level, allowing all instances to be upgraded simultaneously.

Show Answers

Answer:

Question No : 9
Scenario: After deploying a Citrix ADC in production, a Citrix Administrator notices that client requests are NOT being evenly distributed among backend resources. The administrator wants to change from the default loadbalancing method to one that will help distribute the load more evenly.
Which load-balancing method would ensure that the server with the least amount of network utilization is receiving new connections?

• A.Least connection
• B.Least bandwidth
• C.Least response time
• D.Least packets

Show Answers

Answer:
Explanation:
https://docs.citrix.com/en-us/citrix-adc/current-release/load-balancing/load-balancing-customizing-algorithms/leastbandwidth-method.html

Question No : 10
Scenario: A Citrix Administrator currently manages a Citrix ADC environment for a growing retail company that may soon double its business volume. A Citrix ADC MPX 5901 is currently handling web and SSL transactions, but is close to full capacity. Due to the forecasted growth, the administrator needs to find a cost-effective solution.
What cost-effective recommendation can the administrator provide to management to handle the growth?

• A.The addition of another MPX 5901 appliance
• B.A hardware upgrade to a Citrix ADC MPX 8905
• C.A license upgrade to a Citrix ADC MPX 5905
• D.A hardware upgrade to a Citrix ADC SDX 15020

Show Answers

Answer: