EMT Practice Test

1. Question Content...

---

Question1: Scenario: A Citrix Administrator configured the “-denySSLReneg” Parameter using the below command on NetScaler to enhance security.
set ssl parameter –denySSLReneg <option>
Which two options can the administrator use to complete the command? (Choose two.)

Question2: Scenario: A user is attempting to access a web server which is load balanced by the NetScaler using HTTPS. The user received the following message:
SSL/TLS error: You have not chosen to trust "Certificate Authority the issuer of the server's security certificate.
What can a Citrix Administrator do to prevent users from viewing this message?

Question3: Scenario: A NetScaler receives packets that are destined for a MAC address owned by the NetScaler.
The destination IP address of the packets does NOT belong to the NetScaler. Layer 3 Mode is enabled by default on the NetScaler.
What will the NetScaler do with the packets in this scenario?

Question4: Scenario: A Citrix Administrator is configuring load balancing on a NetScaler appliance for the company web servers. The administrator needs to create a custom monitor that will look for a specific keyword response from the website and will be used to keep the services in an UP state.
Which type of monitor can the administrator create to accomplish this scenario?

Question5: Scenario: A Citrix Administrator has configured the rewrite action as follows:
add rewrite action sync_date replace http.res.date sys.time
What is the correct way to interpret this rewrite action?

Question6: Scenario: A Citrix Administrator configured the rewrite policies below.
bind Ib vserver VPN_http –policyName POL_1 priority 120 –gotoPriorityExpression END –type REQUEST bind Ib vserver VPN_http –policyName POL_2 priority 90 –gotoPriorityExpression NEXT –type REQUEST bind Ib vserver VPN_http –policyName POL_3 priority 100 –gotoPriorityExpression NEXT –type REQUEST bind Ib vserver VPN_http –policyName POL_4 priority 110 –gotoPriorityExpression NEXT –type REQUEST In which order will the policies be evaluated?

Question7: A Citrix Administrator needs to utilize the client IP address as the source IP address for the NetScaler to server connections.
Which mode on the NetScaler will the administrator utilize to meet this requirement?

Question8: Scenario: A Citrix Administrator manages an environment that has a NetScaler high availability (HA) pair running on two MPX appliances. The administrator notices that the state of the Secondary NetScaler is
‘Unknown’ and moves the Secondary NetScaler to a new switch as a result. Also, the administrator captured a packet trace on both NetScalers. Both sent traffic on secure port 3009 and were routing back and forth to each other.
What is causing the Secondary state to be ‘Unknown’?

Question9: Which two configurations can a Citrix Administrator use to block all the post requests that are larger than
10,000 bytes in order to protect the environment against HashDoS attacks? (Choose two.)

Question10: In a Global Server Load Balancing (GSLB) Active/Active environment, the connection proxy is used as the site persistence method.
What is used to source the traffic when connection is proxied?

Question11: Which two options should a Citrix Administrator configure to stop the First-Time wizard form automatically popping up? (Choose two.)

Question12: A Citrix Administrator executed the following command in the Global Server Load Balancing (GSLB) environment:
set gslb site SiteB –triggerMonitor MEPDOWN
What will be the effect of this command to the default service monitoring behavior on the remote site?

Question13: Which three authentication types can a Citrix Administrator use for NetScaler AAA dual-factor authentication? (Choose three.)

Question14: Scenario: A NetScaler appliance is having intermittent issues. A Citrix Administrator is unable to identify the root cause and fix them. The administrator opened a Support ticket and the Engineer assigned to the case requested all the logs and configuration information from the NetScaler.
Which technical support tool can the administrator use to gather all the information on the NetScaler to send to the Support Engineer?

Question15: Which step can a Citrix Administrator take in order to use the default compression policies?

Question16: Scenario: A Citrix Administrator of a Linux environment needs to load-balance the web servers in an environment. However, due to budget constraints, the administrator is NOT able to implement a full-scale solution.
What can the administrator do to load-balance the web servers in this scenario?

Question17: View the Exhibit.

A Citrix Administrator has implemented the HTTP Callout.
Click on the ‘Exhibit’ button to view the screenshot of the command-line interface.
Which part of the configuration is responsible for triggering the call to HTTP Callout server?

Question18: Scenario: A Citrix Administrator is configuring a NetScaler high availability (HA) pair with an existing Primary NetScaler with all resources configured. The administrator added the Secondary NetScaler in high availability and found that the configuration on the existing primary was removed. It is now the Secondary NetScaler in the HA pair.
Which two configurations could the administrator have made to prevent this from happening? (Choose two.)

Question19: Scenario: The Director of network security in a financial organization wants to protect the enterprise network from any external malware threats. To do this, the director needs to gain visibility into otherwise- bypassed traffic and control access to malicious web sites. The director is required to do the following:
Intercept and examine all the traffic, including SSL/TLS (encrypted traffic), coming in, and going out of the enterprise network.
Block access to URLs identified as serving harmful or insecure content.
Identify users (employees) in the enterprise who are accessing malicious websites.
Which NetScaler deployment mode should a Citrix Administrator use to achieve this requirement?

Question20: Scenario: A Citrix Administrator has configured an Authentication, Authorization, and Auditing (AAA) action policy to allow users access through the NetScaler. The administrator bound the policy to a specific virtual server.
Which policy expression will allow all users access through the virtual server?

Question21: Scenario: A Citrix Administrator needs to add 10 new web servers to an existing server farm. The new servers are configured to serve the same applications and connections and are twice the capacity of the existing servers. The administrator wants to ensure that they are being fully utilized. Currently in the environment, the default load-balancing method is being used.
To ensure that only the 10 new servers are receiving twice the connections of the old servers without changing the load balancing to the rest of the environment, the administrator needs to add a weight of
______________ to the services attached to the ______________ servers. (Choose the correct option to complete the sentence.)

Question22: Which two actions must be true for a client to connect to an SSL offload virtual server without any SSL errors? (Choose two.)

Question23: A Citrix Administrator needs to block access to multiple URLs for security reasons.
Which configuration should the administrator use to accomplish this requirement?

Question24: Which NetScaler hardware or software platform offers a Multi-Tenant solution?

Question25: Which qualifier is used to configure the Content filter action to modify the HTTP header of an HTTP Request?

Question26: POLICY 1:
add rewrite action ACT_1 corrupt_http_header Accept-Encoding
add rewrite policy POL_1 HTTP.REQ.IS_VALID ACT_1
POLICY 2:
add rewrite action ACT_2 insert_http_header Accept-Encoding “\”identity\”” add rewrite policy POL_2 “HTTP.REQ.IS_VALID” ACT_2 How can a Citrix Administrator bind the rewrite policies to the LB vserver lb_vsrv such that POL_2 is evaluated after POL_1 is evaluated successfully?

Question27: Scenario: A NetScaler is configured with Interface 1/1 and bound to VLAN 40. A Citrix Administrator has executed the following command:
bind vlan 20 –ifnum 1/1
What is the result of executing the command on the NetScaler?

Question28: Which scenario will cause automatic high availability (HA) synchronization to fail?

Question29: In the Global Server Load Balancing (GSLB) configuration when dynamic proximity is implemented, the round trip time (RTT) between the _____________ and _____________ is measured to make the load decision. (Choose the correct option to complete the sentence.)

Question30: A Citrix Administrator needs to configure the Lights Out Management (LOM) port.
Which statement is applicable to LOM?

Question31: Which log records detailed information such as statistics, metrics and debug information on the NetScaler in a proprietary binary format?

Question32: Users are experiencing resets from the Intranet server website, which is load-balanced through the NetScaler.
Which NetScaler tool can a Citrix Administrator use to troubleshoot the reset issue?

Question33: A Citrix Administrator is configuring a NetScaler high availability (HA) pair and needs to ensure that one Net Scaler is UP and primary at all times to ensure the business websites are always available.
What does the administrator need to do to ensure that the NetScalers still handle web traffic in the event that both nodes become unavailable or fail a health check?

Question34: Scenario: A Citrix Administrator has received user complaints about issues connecting to the domain through the NetScaler using AAA. The administrator investigated the issue and found that the domain session cookie that was used during authentication is failing due to resolution issues.
What can the administrator do to fix the issue?

Question35: Which NetScaler mode is commonly referred to as ‘inline mode’?

Question36: View the Exhibit.

A Citrix Administrator has executed the commands in the screenshot on the NetScaler using the command-line interface.
Click on the ‘Exhibit’ button to view the screenshot of the command-line interface.
Which two replacements will be the outcome of executing these commands? (Choose two.)

Question37: Scenario: A Citrix Administrator is executing the following commands on the NetScaler:
add policy dataset Admin_group ipv4
bind policy dataset Admin_group 192.168.149.10 –index 11
bind policy dataset Admin_group 192.168.149.39 –index 12
bind policy dataset Admin_group 192.168.149.49 –index 13
add responder policy POL_1 “!(CLIENT.IP.SRC.TYPECAST_TEXT_T.CONTAINS_ANY(\”Admin_group
\”))” RESET
bind lb vserver ln_vsrv_www –policyName POL_1 –priority 100 –gotoPriorityExpression END –type REQUEST What will be the effect of these commands?

Question38: Which two options should a Citrix Administrator consider when adding a secondary device in a high availability (HA) pair? (Choose two.)

Question39: Which mode does a Citrix Administrator need to configure in order to allow the NetScaler to forward any packets that are NOT destined for an IP address that is NOT configured on NetScaler?

Question40: After being audited, a Citrix Administrator was notified that additional enhancements should be made of the virtual servers.
Which two options can the administrator take to make the additional enhancements? (Choose two.)

Question41: Scenario: A Citrix Administrator configured the HTTP_Callout feature on the NetScaler using the command-line interface.
After configuring the commands, the device is facing the HTTP callout recursion issue.
Click on the ‘Exhibit’ button to view the screenshot of the command-line interface.

How will the administrator rectify the issue?

Question42: Scenario: A Citrix Administrator notices user sessions are disconnecting and reconnecting more often this week than last week, signaling a problem.
The administrator troubleshoots this issue and prepares to resolve it using persistence. However, the following consideration apply in the environment:
It is a multi-proxy environment behind the NetScaler.

Use Source IP (USIP) mode is enabled and applied to the services.

The session timeout is very short.

All users connect from the same location.

The administrator can use persistence based on the ______________ setting to resolve this issue.
(Choose the correct option to complete the sentence.)

Question43: Scenario: A Citrix Administrator is running applications on thousands of load-balanced backend servers in a large infrastructure. It is difficult to track and troubleshoot problems due to the large volume of traffic received.
Which feature of NetScaler Management and Analytics System (NetScaler MAS) can the administrator configure to monitor and troubleshoot in detail for an environment of this size?

Question44: Scenario: A Citrix Administrator has configured a Responder policy as follows:
add responder action Redirect_Act respond with "DIAMETER.NEW_REDIRECT(\'aaa://host.example.com
\''
add responder policy Redirect_Pol "iameter.req.avp(264).value.eq(\'ost1.example.net\''Redirect_Act bind lb vserver vs1 - ame Redirect_Pol - ority 10 - e REQUEST What will be the effect of this configuration?

Question45: Scenario: External users are currently experiencing delays while accessing XenApp and XenDesktop through the NetScaler. A Citrix Administrator needs to monitor the ICA connections to gather the performance information from the NetScaler Management and Analytics System (MAS).
Which two tools can the administrator use to gather information about WAN Latency, DC Latency and Host Delay? (Choose two.)

Question46: Which feature can a Citrix Administrator use to create a consistent set of front-end SSL parameters across multiple SSL virtual servers?

Question47: Scenario: A Citrix Administrator suspects an attack on a load balancing virtual server.
The administrator needs to restrict the access to the load balancing virtual server (192.168.100.25) for 10 minutes.
Which Access Control List (ACL) will help to accomplish this requirement?

Question48: Which policy will allow a Citrix Administrator to modify all the URLs in the response body from "ttp://'to
"ttps://'in an SSL offload deployment?

Question49: Scenario: A Citrix Administrator needs to ensure that a user request is redirected to the next available data center in order to ensure the best user experience based upon location.
Below are the Global Server Load Balancing (GSLB) virtual server settings.
sh gslb vserver gslb.outscale.cloud
gslb.outscale.cloud – SSlState: UP
DNS Record Type: A
Last state change was at Tue May 16 23:47:54 2017
Time since last state change: 16 days, 16:13:23:390
Configured Method: RTT
BackupMethod: LEASTCONNECTION
No. of Bound Services : 2 (Total)1 (Active)
Persistence: NONE
Disable Primary Vserver on Down: DISABLED
Site Persistence: ConnectionProxy
To which setting should the administrator change the configured method?

Question50: Scenario: A Citrix Administrator manages an environment that has three SSL websites, all serving the same content.
www.company.com
www.company.net
www.company.org
The administrator would like to consolidate the website into a single, load-balanced SSL virtual server.
Which action can the administrator take to use a single SSL virtual server?

Question51: Scenario: A Citrix Administrator has configured the following Access Control List (ACL) to block traffic from the IP address 10.102.29.5.
add simpleacl rule1 DENY –srcIP 10.102.29.5
A week later, the administrator found that the ACL is no longer present on the NetScaler.
What could be the reason for this?

Question52: Scenario: A Citrix Administrator configured the Responder policy to redirect the request for root page to the home page.
However, after executing the command, the webpage access entered a loop, as shown in the second screenshot.
Click on the ‘Exhibit’ button to view the screenshots.

How will the administrator rectify this issue?

Question53: Scenario: A Citrix Administrator has configured an HTTP load-balancing virtual server with Least Response Time as the load-balancing algorithm.
The administrator notice that requests to the virtual server appear to be using the Round Robin load- balancing algorithm.
What could be causing the virtual server to use Round Robin load-balancing algorithm?

Question54: Which NetScaler-owned IP address will send traffic from the NetScaler to NTP servers by default?

Question55: View the Exhibit.

A Citrix Administrator has noticed that the users trying to access https://mycitrix.training.lab/exchange2016/ owa are redirected to CAS_vserver_www instead of CAS_vserver_owa.
Click on the ‘Exhibit’ button to view the screenshot of the command-line interface.
What should the administrator change to resolve this issue?

Question56: How can a Citrix Administrator configure a rewrite policy to change the version of HTTP from HTTP 1.1 to HTTP 1.0 in every request?

Question57: Scenario: A Citrix Administrator manages an environment that has multiple websites running through a NetScaler MPX 5550. The NetScaler meets the needs of the environment throughout the year, except in December, when the capacity doubles. The administrator needs to handle this increased web traffic with a temporary, cost-effective solution.
Which action should the administrator recommend in order to handle the increased web traffic?

Question58: What two options are limitations of a typical Global Server Load Balancing (GSLB) setup? (Choose two.)

Question59: View the Exhibit.

A Citrix Administrator has configured the commands using the command-line interface.
Click on the ‘Exhibit’ button to view the screenshots of the command-line interface.
What will be the effect of the rewrite policy, based on the exhibit?

Question60: Scenario: A Citrix Administrator has a NetScaler SDX with four VPX instances configured. The SDX has a
10GB bandwidth license that has been configured with dedicated bandwidth of 2GB for each instance.
However, the administrator found that three instances do NOT ever reach the bandwidth limit, while one instance reaches the limit and needs 1 GB more bandwidth to accommodate increased traffic requests.
What can the administrator change on the instance that requires more bandwidth, to meet traffic requirements?

Question61: Scenario: A Load Balancing virtual server (lb_vsrv_www) is configured to load balance service_1 and service_2. A Citrix Administrator needs to bind a content filter policy to the virtual server, such that if the user tries to access http://xenapp.citrix.com, then the request should go to service_1.
Which policy can the administrator use in this scenario?

Question62: A Citrix Administrator complains that between the two rewrite policies bound to the vserver, only one policy, whichever has lower priority, works. The other policy is never used.
Click the “Exhibit” button to view the screenshot of the relevant policy binding.

What is the cause of the issue?

Question63: Scenario: A Citrix Administrator manages a NetScaler Gateway with a Standard Platform License, with remote employees in the environment. The administrator wants to increase employee access by 300 users through the NetScaler Gateway, using VPN access.
Which license should the administrator recommend purchasing for this environment?

Question64: Scenario: A Citrix Administrator is performing a disaster recovery test and decided to fail over the NetScaler high availability (HA) pair appliances. The administrator noticed that the failover is NOT working as expected in item text, and the Secondary NetScaler is NOT taking over as Primary. The administrator suspects that networking issues may be causing the failure.
What could be the cause of this issue with the NetScalers?

Question65: Scenario: A Citrix Administrator is configuring SNMP management on the NetScaler to receive alerts when something fails. The administrator was confident that the Manager, Alarms and SNMP Traps were configured correctly. The following week, there was a NetScaler-related outage and the administrator did NOT get any alerts.
What could be the reason for the SNMP alert failure?

Question66: A user needs to resolve the domain training.citrix.com, and the information is NOT available in resolver cache and Local Domain Name Server (DNS).
Where will the request be forwarded next?

Question67: Click the ‘Exhibit’ button to view the screenshots.

Which Front-End Optimization (FEO) action can a Citrix Administrator use to achieve the results shown in the screenshots?

Question68: Which mode on the NetScaler can a Citrix Administrator utilize to avoid asymmetrical packet flows and multiple route/ARP lookups?

Question69: Scenario: Client connections to certain virtual servers are abnormally high. A Citrix Administrator needs to be alerted whenever the connections pass a certain threshold.
How can the administrator use NetScaler Management and Analytics System (MAS) to accomplish this requirement?

Question70: Scenario: A Citrix Administrator is concerned about the amount of health checks the NetScaler is sending to the backend resources. The administrator would like to find a way to remove health checks from specific bound services.
How can the administrator accomplish this?

Question71: Which command should a Citrix Administrator use to configure a Content Switching virtual server for implementing the Secure Web Gateway in the transparent proxy mode?

Question72: Which utility can a Citrix Administrator use to resolve the Domain Name System (DNS) request being looked up frequently?

Question73: Which command should a Citrix Administrator use to configure a Content Switching virtual server for implementing the Secure Web Gateway in the transparent proxy mode?