1Y0-351 Online Practice Questions and Answers

In order to create a three-node NetScaler cluster, all nodes must __________ and __________. (Choose the two correct options to complete the sentence.)

A. be physical appliances

B. have Platinum licensing

C. be using the same build

D. be the same platform model

Which setting would a NetScaler Engineer disable in order to stop the NetScaler from acting as a router for non-NetScaler owned IP addresses or entities?

A. Layer 2 mode

B. Layer 3 mode

C. MAC-based forwarding

D. Use Subnet IP (USNIP)

Scenario: Users complain that they are NOT able to connect to a web site using the IP address. The

relevant portion of the configuration is shown below: add ssl profile srv-web -sessReuse ENABLED -sessTimeout 120 -tls11 DISABLED -tls12 DISABLED strictCAChecks YES

add service svc-web 192.168.1.3 HTTP 80 add lb vserver srv-web SSL 192.168.1.22 443 -persistenceType NONE -cltTimeout 180 bind lb vserver srv-web svc-web set ssl vserver srv-web -eRSA DISABLED -clientAuth ENABLED -clientCert Optional -tls11 DISABLED

tls12 DISABLED -SNIEnable ENABLED add ssl policy svc-web -rule true -action NOOP bind ssl vserver srv-web -certkeyName WebCert -SNICert bind ssl vserver srv-web -policyName svc-web -priority 100 What is the likely cause of the connectivity issue?

A. SSL policy is incorrect.

B. Client Authentication is enabled.

C. Server Name Indication is enabled.

D. Load Balancing persistence is set to NONE.

A NetScaler Engineer has been given the task of protecting an internal web site by requiring users to enter their credentials.

Which feature should the engineer configure?

A. AAA

B. SSL Offloading

C. Content Filtering

D. Application Firewall

Which connection state is included in the Current Server Connections parameter, but not affected by Max Clients?

A. Open

B. Listen

C. Closing

D. Open Established

Scenario: A NetScaler Engineer is addressing an issue discovered during a vulnerability scan. The security team is requiring that the engineer disable specific SSL ciphers on the SSL VServer. Which two methods could the engineer use to meet this requirement? (Choose two.)

A. Modify the list of ciphers in the Default cipher group.

B. Change the list of bound ciphers on the VServer directly.

C. Enable Cipher Redirect on the VServer and configure OCSP.

D. Disable SSLv2 Redirect on the VServer and update the CRLs.

E. Un-assign the default group, create a custom cipher group and assign it to the VServer.

Which command will allow a NetScaler Engineer to change the NetScaler IP (NSIP) from the command-line interface?

A. add ns ip 10.100.10.100 255.255.255.0 -type SNIP

B. add ns ip 10.100.10.100 255.255.255.0 -type NSIP

C. set ns config -ipaddress 10.100.10.100 -netmask 255.255.255.0

D. set ns ip 10.100.10.100 -netmask 255.255.255.0 -mgmtaccess enabled

Which expression must an engineer use to prevent compression of Cascading Style Sheets?

A. HTTP.RES.BODY(0).CONTAINS("text/css")

B. HTTP.REQ.BODY(0).CONTAINS("text/css")

C. HTTP.RES.HEADER("Content-Type").CONTAINS("text/css")

D. HTTP.REQ.HEADER("Content-Type").CONTAINS("text/css")

Scenario: A user browses to a page and is presented with a warning that he is trying to enter a web site with an untrusted certificate. The network engineer had added the correct certificate to the SSL virtual server.

What could be the cause of this issue?

A. TLS is disabled on the virtual server.

B. The certificate is not linked to the intermediate CA.

C. The certificate has expired and needs to be renewed.

D. The CA certificate has not been added to the SSL virtual server.

A network engineer is troubleshooting a situation where ARP requests for IPs in other subnets (for

example 10.192.12.80) are appearing in the 10.192.8.0/24 subnet.

Which command could the engineer run on the NetScaler to verify IP to VLAN bindings?

A. show ip

B. netstat -r

C. show arp

D. show vlan

A network engineer has been tasked with identifying the cause of intermittent network connectivity issues.

Which command should the engineer use to generate the necessary network information required to diagnose the connectivity issues?

A. nslog

B. nstrace

C. nsumon

D. nsconmsg

Scenario: A network engineer needs to implement high availability (HA) for a pair of NetScaler appliances. The existing appliance was recently restarted and the new appliance has been rack mounted and turned on for several weeks waiting to be configured. The engineer needs to create an HA pair, but is concerned that his original appliance will get erased when the HA pair is created.

Which two tasks could the engineer do before the creation of the HA pair to ensure that the exiting unit stays the main appliance? (Choose two.)

A. Set StayPrimary on the existing node.

B. Configure StaySecondary on the new node.

C. Enable HA Sync before adding the second node.

D. Create a Route Monitor to ensure proper synchronization.

E. Ensure that INC mode is enabled during creation of HA Pair.

Scenario: A network engineer plans to configure an Active Directory Server as the default authentication for a NetScaler deployment and provide users with the option to change their password if it is expired.

Which two actions should the engineer take to configure this authentication requirement on the NetScaler system? (Choose two.)

A. Configure a pre-authentication policy.

B. Select security type as SSL on Authentication policy.

C. Configure Authentication server with SSO name attribute.

D. Configure Authentication server with allow password change option.

An engineer is checking that ports are configured correctly between the NetScaler system and a

back-end web server. Which command should the engineer use to test that the web server is responding on port 80?

A. telnet webA.example.com 80

B. telnet webA.example.com:80

C. telnet webA.example.com port=80 D. telnet webA.example.com -port 80

Scenario: An engineer executes the following commands:

add vlan 2 bind vlan 2 -ifnum 1/2

add ns ip 10.110.4.200 255.255.255.0

bind vlan 2 -IPAddress 10.110.4.200 255.255.255.0 What type of IP address has been added to the NetScaler?

A. VIP address

B. NSIP address

C. SNIP address

D. GSLB Site IP address