EMT Practice Test

1. Question Content...

---

Question1: A Citrix Administrator needs to utilize the client IP Address as the resource IP address for the NetScaler to server connections.
Which mode on the NetScaler will the administrator utilize to meet this requirement?

Question2: Scenario: A Citrix Administrator suspects an attack on a load-balancing virtual server. The administrator needs to restrict access to the load-balancing virtual server (192.168.100.25) for 10 minutes.
Which Access Control List (ACL) will help to accomplish this requirement?

Question3: Scenario: A Cirtix Administrator is configuring a new Authentication, Authorization and Auditing (AAA) virtual server, and the status is DOWN. The administrator has made the following configurations:
Add lbvserver lb_vsrv_www HTTP 10.107.149.229.80- persistenceType NONOE -cltTimeout 180- authn401 ON -authnVsName SAML_SP
Bind vserver lb_vsrv_www_ssl Red_srv
Bind lb vserver lb_vsrv_www_ssl Blue_srv
Add authentication vserver SAML_SP SSL 10.107.149.230.443- AuthenticationDomain citrix.lab How can the administrator finish the installation to change the status of the virtual server to UP?

Question4: Scenario: A NetScaler MPX appliance has become unresponsive while using the GUI. A Citrix Administrator needs to restart the appliance and force a core dump for analysis.
What can the administrator do to accomplish this?

Question5: Scenario: A Citrix Administrator is troubleshooting a NetScaler issue. The administrator goes to the command line and from the Shell, tails the ns.log to view the log in real time to find the issue. After a few minutes, the administrator noticed that the logs stopped scrolling and the issue was missed.
How can troubleshooting continue using the ns.log?

Question6: What does a Citrix Administrator need to do on NetScaler Gateway to ensure that users accept the terms and conditions before they can log on using NetScaler Gateway?

Question7: A Citrix Administrator would like to define granular policies to configure and enforce user environment attributes for XenApp and XenDesktop on NetScaler Gateway.
Which type of policy would enable this requirement?

Question8: Scenario: A Citrix Administrator has configured a NetScaler active-passive high availability (HA) pair.
When the HA pair fails over, customers are unable to access the hosted websites. After some troubleshooting, the administrator found that the upstream router was NOT updating its ARP table.
What can the administrator configure to resolve this issue?

Question9: Scenario: A Citrix Administrator needs to create local user accounts for other administrators with limited privileges. The other administrators will need only:
-Read-only access
-The ability to enable and disable services and servers
Which built-in Command Policy permission level can the administrator use?

Question10: Scenario: Users belong to three Authentication, Authorization and Auditing (AAA) groups: Corporate, Finance and Software.
Show aaa groups:
>show aaa group
1) GroupName: Corporate
2) GroupName: Finance
3) GroupName: Software
Done
>show aaa group Corporate
GroupName: Corporate
Weight: 0
Authorization Policy: pol_1, Type: Classic, Priority: 0
> add authorization policy pol_1 ns_true ALLOW
> bind aaa group Corporate -policy pol_1
The user is being denied resources while aaad.debug shows:
Group 'cporporate' being extracted for user User1
Why is the user being denied access?

Question11: Which option is needed to configure the NetScaler Gateway to provide users with multiple logon options after successful authentication, if the users are connected through clientless access?

Question12: Scenario: A NetScaler Appliance is having intermittent issues. A Citrix Administrator is unable to identify the root cause and fix them. The administrator opened a Support ticket and the engineer assigned to the case requested all the logs and configuration information from the NetScaler.
Which technical support tool can the administrator use to gather all the information on the NetScaler to send to the Support Engineer?

Question13: Scenario: A XenDesktop Administrator just updated a StoreFront server to the X1 Receiver portal theme.
The NetScaler Administrator would like to update the gateway to match StoreFront as closely as possible.
How can the NetScaler Administrator accomplish this with the least amount of administrative effort and without impacting connectivity through the gateway during the change?

Question14: How can a Citrix Administrator provide two-factor authentication with tokens in a XenDesktop with NetScaler Gateway environment?

Question15: Which two features can a Citrix Administrator use to allow secure access to a sensitive company web server that is load-balanced by the NetScaler? (Choose two.)

Question16: In which two ways can a Citrix Administrator configure SmartAccess? (Choose two.)

Question17: Which type of policy can be applied to a NetScaler Gateway virtual server to limit access to XenDesktop resources, if the user device does NOT comply with the company's security requirements?

Question18: A Citrix Administrator has deployed a new NetScaler MPX appliance in the demilitarized (DMZ) with one interface in the DMZ and the other on the internal network.
In which mode should the administrator deploy the NetScaler?

Question19: Scenario: A Citrix Administrator is managing a NetScaler SDX running eight NetScaler instances. The administrator first needs to upgrade the firmware on the instances. However, the administrator is concerned that it needs to be done all at once.
What upgrading flexibility does SDX provide in this scenario?

Question20: Scenario: A Citrix Administrator found that whenever a NetScaler VPX high availability (HA) pair of appliances fails over, the load-balanced websites are NOT accessible. The administrator investigated the issue and found that the router and switches do NOT support gratuitous ARP (GARP). However, the administrator cannot immediately afford to upgrade the network infrastructure.
What can the administrator do immediately to resolve the issue and prevent a future outage?

Question21: What are three possible policy results in a Default (Advanced) policy configuration? (Choose three.)

Question22: Scenario: A Citrix Administrator has a NetScaler SDX appliance with several instances configured. The administrator needs one instance with two interfaces connected to forward packets that are NOT destined for its MAC address. Hence, the administrator has enabled Layer 2 mode. After enabling Layer 2 mode, the administrator found the interface status going up and down.
What can the administrator perform to resolve this issue?

Question23: A Citrix Administrator needs to ensure that a revoked certificate is NOT being used for client certificate authentication.
Which two entities can the administrator select on the NetScaler? (Choose two.)

Question24: Scenario: A Citrix Administrator is configuring balancing on a NetScaler appliance for the company web servers. The administrator needs to create a custom monitor that will look for a specific keyword response from the website and will be used to keep the services in an UP state.
Which type of monitor can the administrator create to accomplish this scenario?

Question25: A Citrix Administrator needs to create a customized blacklist of IP addresses to supplement the Webroot reputation check, and in order to have stricter access through NetScaler.
How can the administrator create this blacklist?

Question26: Scenario: A Citrix Administrator has given permissions to team members to access their own admin partition, so they can add resources for different departments and manage them without making changes to the default NetScaler partition and configuration.
One team member was trying to use the command-line interface to trouble an authentication issue and could NOT use aaad.debug. However, the team member has full permissions on the admin partition.
What can be the cause of this issue?

Question27: Scenario: A Citrix Administrator of a Linux environment needs to load-balance the web servers in an environment. However, due to budget constraints, the administrator is NOT able to implement a full-scale solution.
What can the administrator do to load-balance the web servers in this scenario?

Question28: Which three NetScaler features can a Citrix Administrator use for default syntax policies? (Choose three.)

Question29: A Citrix Administrator receives user complaints about latency while accessing an application that is being load-balanced on the NetScaler.
Which tool can the administrator use to gather information regarding Response time, Client latency and Server-side processing time?

Question30: A Citrix Administrator needs to configure single sign-on to a StoreFront server using an external, secure single URL.
Which type of virtual server can the administrator use to meet this requirement?

Question31: Scenario: A NetScaler Gateway provides ICA Proxy to an internal XenDesktop site in an environment. The security team wants the Citrix Administrator to configure the NetScaler to block client drives if the client device fails a security scan.
Which NetScaler feature allows the administrator to satisfy the security team's requirements without making changes to the XenDesktop configuration?

Question32: Scenario: A company recently acquired three smaller companies; this adds more than 1500 employees to the company. The current NetScaller appliance does NOT support adding that many users.
A Citrix Administrator needs to use a Multi-Tenancy solution, giving each newly acquired company its own NetScaler for VPN access, load balancing, and at least 20 GBPS of throughput.
How can the administrator meet the needs of this environment?

Question33: How can a Cirtix Administrator configure session policies for the Authentication, Authorization and Auditing Traffic Management (AAA-TM) sessions if the authentication virtual server is specified in a Unified Gateway setup?

Question34: Which scenario will cause automatic high availability (HA) synchronization to fail?

Question35: Which two deployment methods does remote desktop protocol (RDP) proxy support? (Choose two.)

Question36: Users are experiencing resets form the Intranet server website, which is load-balanced trough the NetScaler.
Which NetScaler tool can a Citrix Administrator use to troubleshoot the reset issue?

Question37: Scenario: A Citrix Administrator configured a new NetScaler Unified Gateway. The administrator would like to see what Endpoint Analysis and Single Sign-on failures have occurred since implementing the new Gateway.
Which tool can the administrator use to see this data?

Question38: Scenario: A Citrix Administrator needs to implement an Application Delivery Controller (ADC) solution. The administrator needs the appliance to be able to grow with the increasing demand for bandwidth and performance.
Which NetScaler platform with the administrator choose to accommodate the increasing demand for bandwidth and performance?

Question39: Scenario: A NetScaler is configured with the following modes:
-MAC-based Forwarding
-USIP
-USNIP
-Layer 3 mode
A Citrix Administrator configured a new router and now requires some of the incoming and outgoing traffic to take different paths through the new router. However, the administrator notices that this is failing and takes a network trace. After a short monitoring period, the administrator notices that the packets are still NOT getting to the new router from the NetScaler.
Which mode should the administrator disable on the NetScaler to facilitate the addition of the new router and successfully route the packets?

Question40: Scenario: A Citrix Administrator is concerned about the amount of health checks the NetScaler is sending the back-end resources. The administrator would like to find a way to remove health checks from specific bound services.
How can the administrator accomplish this?

Question41: Which type of entity can a Citrix Administrator configure to support the use of an SSL rewrite policy?

Question42: Scenario: A Citrix Administrator was notified that all contractor user IDs will start with the prefix "con." Currently SmartControl is used to restrict access to peripherals.
Which expression can the administrator use to accomplish this requirement?

Question43: Scenario: A Citrix Administrator configured SNMP to send traps to an external SNMP system. When reviewing the messages, the administrator noticed several entity UP and entity DOWN messages.
To what are these messages related?

Question44: A Citrix Administrator is configuring a NetScaler high availability (HA) pair and needs to ensure that one NetScaler is UP and primary at all times to ensure the business websites are always available.
What does the administrator need to do ensure that the NetScalers still handle web traffic in the event that both nodes become unavailable or fail a health check?

Question45: After creating and correctly configuring a custom user monitor, from where do the monitor probes originate by default?

Question46: Scenario: A NetScaler has two interfaces as 1/1 and 1/2 with MAC-based Forwarding enabled. Below are the specifications:
-Interface 1/1 and IP 192.168.10.10 is bound to VLAN 10.
-On Interface 1/2 VLAN 20 and VLAN 30 are tagged.
-VLAN 20 is bound to IP 192.168.20.10 and VLAN 30 is bound to 192.168.30.10 The NetScaler receives a packet for VIP 192.168.30.30 on interface 1/1.
Which interface of NetScaler will send a reply back in this environment?

Question47: Which NetScaler feature can a Citrix Administrator use to create a customer footer for a NetScaler Gateway login page?

Question48: Scenario: A Citrix Administrator configured the "-denySSLReneg" Parameter using the below command on NetScaler to enhance security.
set ssl parameter -denySSLReneg <option>
Which two options can the administrator use to complete the command (Choose two.)

Question49: A Citrix Administrator needs to generate AppFlow data for internal ICA connections.
Which two connection methods could the administrator use to route internal ICA connections through NetScaler without modifying the existing network routing? (Choose two.)

Question50: Which two options should a Citrix Administrator consider when adding a secondary device in a high availability (HA) pair? (Choose two.)

Question51: Scenario: A user is attempting to access a web server, which is load-balanced by the NetScaler using HTTPS. The user received the following message:
SSL/TLS error: You have not chosen to trust "Certificate Authority" the issuer of the server's security certificate.
What can a Citrix Administrator do to prevent users from viewing this message?

Question52: Which three services can the StoreFront monitor probe to determine the state of the StoreFront server?
(Choose three.)

Question53: Which mode does a Citrix Administrator need to configure in order to allow the NetScaler to forward any packets that are NOT destined for an IP address which is NOT configured on NerScaler?

Question54: Scenario: A Citrix Administrator needs to add 10 new servers to an existing server farm. The new servers are configured to serve the same applications and connections and are twice the capacity of the existing servers. The administrator wants to ensure that they are being fully utilized. Currently in the environment, the default load-balancing method is being used.
To ensure that only the 10 new servers are receiving twice the connections of the old servers without changing the load balancing to the rest of the environment, the administrator needs to add a weight of
_________ to the services attached to the ________ servers. (Choose the correct option to complete the sentence.)

Question55: Scenario: A Citrix Administrator entered the command-line interface commands below to prevent IP address 10.10.100 from accessing the NetScaler on port 80.
add simpleacl rule1 DENY- srcIP 10.10.10.100 -TTL 600
add simpleacl rule2 DENY- srcIP 10.10.10.100 -destPort 80
add ns acl rule1 DENY- srcIP 10.10.10.100-priority 10
add ns acl rule2 DENY- srcIP 10.10.10.100-priority 100
apply ns acls
Which Access Control List (ACL) will the NetScaler use to deny the IP address?

Question56: To which three bind points can a Citrix Administrator bind a session policy, to enable Clientless access?
(Choose three.)

Question57: Scenario: A Citrix Administrator is deploying a NetScaler device and would like to add the NTP server to this appliance. Currently, the NTP service is configured at 192.168.55.54.
Which command-line interface command can the administrator use to complete this task?

Question58: Which two components need to be configured for SmartAccess? (Choose two.)