EMT Practice Test

1. Question Content...

---

Question1: Scenario: A Citrix Administrator needs to build policies that control the selection of XenApp applications to
which a user has access. The administrator would like for the policy decisions to be made by leveraging
the HDX settings.
Which type of policy would enable this requirement?

Question2: Which Citrix ADC hardware or software platform offers a Multi-Tenant solution?

Question3: Scenario: A Citrix Administrator needs to integrate LDAP for Citrix ADC system administration using the
current Active Directory groups. The administrator created the group on the Citrix ADC, exactly matching
the group name in LDAP.
What can the administrator add next to complete the configuration of the LDAP?

Question4: A Citrix Administrator needs to utilize the client IP Address as the resource IP address for the NetScaler to
server connections.
Which mode on the NetScaler will the administrator utilize to meet this requirement?

Question5: How does the NetScaler communicate that IP-to-MAC address bindings have changed to the switches and
routers on the network, when a NetScaler high availability (HA) pair failover occurs?

Question6: Scenario: A Citrix Administrator manages an environment that has an externally accessible website. The
administrator would like to provide end-to-end encryption and use features such as caching and
compression on the NetScaler.
Which setting in SSL offload should the administrator configure to meet this requirement?

Question7: Which two features can a Citrix Administrator use to allow secure access to a sensitive company web
server that is load-balanced by the Citrix ADC? (Choose two.)

Question8: Which two actions must be true for a client to connect to a SSL offload virtual server without any SSL
errors? (Choose two.)

Question9: Which three Unified Gateway elements can be configured by the Unified Gateway Wizard? (Choose
three.)

Question10: Scenario: A Citrix Administrator is running applications on thousands of load-balanced back-end servers
in a large infrastructure. It is difficult to track and troubleshoot problems due to the large volume of traffic
received.
Which feature of NetScaler Management and Analytics System (MAS) can the administrator configure to
monitor and troubleshoot in detail for an environment of this size?

Question11: Which NetScaler mode is commonly referred to as 'inline mode'?

Question12: Scenario: A Cirtix Administrator is configuring a new Authentication, Authorization and Auditing (AAA)
virtual server, and the status is DOWN. The administrator has made the following configurations:
Add lbvserver lb_vsrv_www HTTP 10.107.149.229.80- persistenceType NONOE -cltTimeout 180-
authn401 ON -authnVsName SAML_SP
Bind vserver lb_vsrv_www_ssl Red_srv
Bind lb vserver lb_vsrv_www_ssl Blue_srv
Add authentication vserver SAML_SP SSL 10.107.149.230.443- AuthenticationDomain citrix.lab
How can the administrator finish the installation to change the status of the virtual server to UP?

Question13: While troubleshooting an SSL issue on one of the SSL-based virtual servers, a Citrix Administrator noticed
that the data captured from the TCP dump was showing in plain text.
What could be the cause of this issue?

Question14: Scenario: A Citrix Administrator suspects an attack on a load-balancing virtual server. The administrator
needs to restrict access to the load-balancing virtual server (192.168.100.25) for 10 minutes.
Which Access Control List (ACL) will help to accomplish this requirement?

Question15: A Citrix Administrator needs to configure single sign-on to a StoreFront server using an external, secure
single URL.
Which type of virtual server can the administrator use to meet this requirement?

Question16: Which NetScaler feature can be utilized to reuse existing TCP connections?

Question17: Scenario: A Citrix Administrator needs to create local user accounts for other administrators with limited
privileges. The other administrators will need only:
-Read-only access
-The ability to enable and disable services and servers
Which built-in Command Policy permission level can the administrator use?

Question18: Scenario: A Citrix Administrator configured SNMP to send traps to an external SNMP system. When
reviewing the messages, the administrator noticed several entity UP and entity DOWN messages.
To what are these messages related?

Question19: Which three services can the StoreFront monitor probe to determine the state of the StoreFront server?
(Choose three.)

Question20: A Citrix Administrator needs to create a customized blacklist of IP addresses to supplement the Webroot
reputation check, and in order to have stricter access through NetScaler.
How can the administrator create this blacklist?

Question21: Scenario: A Citrix Administrator is performing a disaster recovery test and decided to fail over the Citrix
ADC high availability (HA) pair appliances. The administrator noticed that the failover is NOT working as
expected in item text, and the Secondary Citrix ADC is NOT taking over as Primary. The administrator
suspects that networking issues may be causing the failure.
What could be the cause of this issue with the Citrix ADCs?

Question22: A Citrix Administrator receives complaints from some users that authentication for the Citrix Gateway site
fails.
Which tool can the administrator use to find data regarding time of failure and a list of users facing this
issue?

Question23: A Citrix Administrator needs to customize the user experience for users connecting with the Citrix Gateway
plug-in.
Which three options can the administrator configure in this customization, using session and traffic
policies? (Choose three.)

Question24: Which two deployment methods does remote desktop protocol (RDP) proxy support? (Choose two.)

Question25: Scenario: A Citrix Administrator manages an environment that has multiple websites running through a
NetScaler MPX 5550. The NetScaler meets the needs of the environment throughout the year, except in
December, when the capacity doubles. The administrator needs to handle this increased web traffic with a
temporary, cost-effective solution.
Which action should the administrator recommend in order to handle the increased web traffic?

Question26: Scenario: A user is attempting to access a web server, which is load-balanced by the NetScaler using
HTTPS. The user received the following message:
SSL/TLS error: You have not chosen to trust "Certificate Authority" the issuer of the server's security
certificate.
What can a Citrix Administrator do to prevent users from viewing this message?

Question27: Which Citrix ADC hardware or software platform offers a Multi-Tenant solution?

Question28: Scenario: A Citrix Administrator is deploying a Citrix ADC device and would like to add the NTP server to
this appliance. Currently, the NTP service is configured at 192.168.55.54.
Which command-line interface command can the administrator use to complete this task?

Question29: Scenario: A Citrix Administrator has a Citrix ADC SDX with four VPX instances configured. The SDX has
a 10GB bandwidth license that has been configured with dedicated bandwidth of 2 GB for each instance.
However, the administrator found that three instances do NOT ever reach the bandwidth limit, while one
instance reaches the limit and needs 1 GB more bandwidth to accommodate increased traffic requests.
What can the administrator change on the instance that requires more bandwidth, to meet traffic
requirements?

Question30: A Citrix Administrator needs to generate AppFlow data for internal ICA connections.
Which two connection methods could the administrator use to route internal ICA connections through
NetScaler without modifying the existing network routing? (Choose two.)

Question31: Where should a Citrix Administrator configure SmartControl restrictions?

Question32: A Citrix Administrator needs to configure a policy where users will be downgraded to 'ICA Proxy Only' from
'Full VPN' in the event a user fails to meet Endpoint Analysis requirements.
Which configuration is required to satisfy this requirement?

Question33: Scenario: A Citrix Administrator created a rewrite policy to add a custom footer for a NetScaler Gateway
login page. However, the administrator is NOT able to see the changes on the login page.
Which step can the administrator perform next to see the changes on the login page?

Question34: Scenario: A Citrix Administrator currently manages a NetScaler environment in a retail company that is
growing quickly and may soon double its volume of business. Currently, a NetScaler MPX 5550, which
handles web and SSL transactions, is in place, but is closed to full capacity. Due to the forecasted growth
increase, the administrator needs to find a cost-effective solution.
What can the administrator recommend to management in order to cost effectively handle the growth?

Question35: What does a Citrix Administrator need to do on Citrix Gateway to ensure that users accept the terms and
conditions before they can log on using Citrix Gateway?

Question36: Scenario: A XenDesktop Administrator just updated a StoreFront server to the X1 Receiver portal theme.
The NetScaler Administrator would like to update the gateway to match StoreFront as closely as possible.
How can the NetScaler Administrator accomplish this with the least amount of administrative effort and
without impacting connectivity through the gateway during the change?

Question37: A Citrix Administrator receives user complaints about latency while accessing an application that is being
load-balanced on the NetScaler.
Which tool can the administrator use to gather information regarding Response time, Client latency and
Server-side processing time?

Question38: Scenario: A Citrix Administrator configured a new Citrix NetScaler Unified Gateway. The administrator
would like to see what Endpoint Analysis and Single Sign-on failures have occurred since implementing
the new Gateway.
Which tool can the administrator use to see this data?

Question39: A Citrix Administrator configured an external syslog server but is NOT seeing detailed TCP information.
What can be causing this issue?

Question40: How can a Citrix Administrator provide two-factor authentication with tokens in a XenDesktop with
NetScaler Gateway environment?

Question41: Scenario: A Citrix Administrator was notified that all contractor user IDs will start with the prefix "con."
Currently SmartControl is used to restrict access to peripherals.
Which expression can the administrator use to accomplish this requirement?

Question42: A Citrix Administrator needs to configure a setup with a single URL so that users can log on once and
achieve seamless single sign-on to the NetScaler Gateway virtual server and web application being load-
balanced on the NetScaler.
Which type of virtual server can the administrator configure to fulfill this requirement?

Question43: Which NetScaler Access Control List (ACL) command can a Citrix Administrator use to bridge traffic
originating from 192.168.10.200?

Question44: Scenario: A Citrix Administrator deployed a Citrix ADC in one-arm mode. Currently, the VLANs 20, 30 and
40 are tagged on the interface with the option of 'tagall' on the interface.
What is true regarding the VLANs, when 'tagall' is enabled on the interface?

Question45: To which three bind points can a Citrix Administrator bind a session policy, to enable Clientless access?
(Choose three.)

Question46: A Citrix Administrator is configuring a Citrix ADC high availability (HA) pair and needs to ensure that one
Citrix ADC is UP and primary at all times to ensure the business websites are always available.
What does the administrator need to do ensure that the Citrix ADCs still handle web traffic in the event that
both nodes become unavailable or fail a health check?

Question47: A Citrix Administrator needs to ensure that a revoked certificate is NOT being used for client certificate
authentication.
Which two entities can the administrator select on the Citrix ADC? (Choose two.)

Question48: Scenario: A Citrix Administrator is evaluating the following policies in an environment.

Which policy will take effect in the event of a policy conflict?

Question49: Scenario: A Citrix Administrator notices user sessions are disconnecting and reconnecting more often this
week than last week, signaling a problem.
The administrator troubleshoots this issue and prepares to resolve it using persistence. However, the
following considerations apply in the environment:
-It is a multi-proxy environment behind the NetScaler.
-USIP mode is enabled and applied to the services.
-The session timeout is very short.
-All users connect from the same location.
The Administrator can use persistence based on the _____________setting to resolve this issue. (Choose
the correct option to complete the sentence.)

Question50: Which two items can a Citrix Administrator change when configuring a default portal theme? (Choose two.)

Question51: How can a Cirtix Administrator configure session policies for the Authentication, Authorization and Auditing
Traffic Management (AAA-TM) sessions if the authentication virtual server is specified in a Unified
Gateway setup?

Question52: A NetScaler with Unified Gateway combines _________ and ________ to provide access to websites and
applications through a single URL. (Choose the correct option to complete the sentence.)

Question53: Which type of entity can a Citrix Administrator configure to support the use of an SSL rewrite policy?

Question54: Scenario: A Citrix ADC MPX appliance has become unresponsive while using the GUI. A Citrix
Administrator needs to restart the appliance and force a core dump for analysis.
What can the administrator do to accomplish this?

Question55: Scenario: A company has three departments with proprietary applications that need to be load-balanced
on the NetScaler. The three department managers would like to use the same IP address to access their
individual application, which would mean configuring three load-balanced virtual servers all using the same
IP address.
How can a Citrix Administrator configure this on the NetScaler?

Question56: Scenario: A Citrix ADC Appliance is having intermittent issues. A Citrix Administrator is unable to identify
the root cause and fix them. The administrator opened a Support ticket and the engineer assigned to the
case requested all the logs and configuration information from the Citrix ADC.
Which technical support tool can the administrator use to gather all the information on the Citrix ADC to
send to the Support Engineer?

Question57: Scenario: A Citrix Administrator found that whenever a NetScaler VPX high availability (HA) pair of
appliances fails over, the load-balanced websites are NOT accessible. The administrator investigated the
issue and found that the router and switches do NOT support gratuitous ARP (GARP). However, the
administrator cannot immediately afford to upgrade the network infrastructure.
What can the administrator do immediately to resolve the issue and prevent a future outage?

Question58: Which mode on the NetScaler can a Citrix Administrator utilize to avoid asymmetrical packet flows and
multiple route/ARP lookups?

Question59: Scenario: A Citrix Administrator needs to add 10 new servers to an existing server farm. The new servers
are configured to serve the same applications and connections and are twice the capacity of the existing
servers. The administrator wants to ensure that they are being fully utilized. Currently in the environment,
the default load-balancing method is being used.
To ensure that only the 10 new servers are receiving twice the connections of the old servers without
changing the load balancing to the rest of the environment, the administrator needs to add a weight of
_________ to the services attached to the ________ servers. (Choose the correct option to complete the
sentence.)

Question60: Which two components need to be configured for SmartAccess? (Choose two.)

Question61: Which Citrix ADC feature can a Citrix Administrator use to create a customer footer for a NetScaler
Gateway login page?

Question62: Scenario: A Citrix Administrator has given permissions to team members to access their own admin
partition, so they can add resources for different departments and manage them without making changes
to the default NetScaler partition and configuration.
One team member was trying to use the command-line interface to trouble an authentication issue and
could NOT use aaad.debug. However, the team member has full permissions on the admin partition.
What can be the cause of this issue?

Question63: Scenario: A Citrix Administrator is managing a Citrix ADC SDX running eight Citrix ADC instances. The
administrator first needs to upgrade the firmware on the instances. However, the administrator is
concerned that it needs to be done all at once.
What upgrading flexibility does SDX provide in this scenario?

Question64: Scenario: A NetScaler has two interfaces as 1/1 and 1/2 with MAC-based Forwarding enabled. Below are
the specifications:
-Interface 1/1 and IP 192.168.10.10 is bound to VLAN 10.
-On Interface 1/2 VLAN 20 and VLAN 30 are tagged.
-VLAN 20 is bound to IP 192.168.20.10 and VLAN 30 is bound to 192.168.30.10
The NetScaler receives a packet for VIP 192.168.30.30 on interface 1/1.
Which interface of NetScaler will send a reply back in this environment?

Question65: Scenario: User authentication is failing through the NetScaler. A Citrix Administrator checked the
Authentication, Authorization and Auditing (AAA) policy, action and virtual server and verified that the
correct configuration was in place. The administrator bypassed the NetScaler and the authentication
worked.
Which NetScaler utility can the administrator use to troubleshoot the access issue?