EMT Practice Test

1. Question Content...

---

Question1: A network engineer might choose to use SSL_Bridge instead of a SSL virtual server in order to
__________. (Choose the correct option to complete the sentence.)

Question2: Scenario: A user browses to a page and is presented with a warning that he is trying to enter a web site with an untrusted certificate. The network engineer had added the correct certificate to the SSL virtual server. What could be the cause of this issue?

Question3: Scenario: Primary Citrix ADC (NS1) is licensed for 10000 Maximum ICA users and 305 Access Gateway users. Secondary Citrix ADC (NS2) is licensed for 10000 Maximum ICA users and five Access Gateway users. From where and which command should a network engineer run to display diagnostics on the licenses?

Question4: What should a network engineer configure to set high availability for a load balanced virtual server?

Question5: A network engineer has started at a new company and has been instructed to restrict access to an external facing VIP to selected third party clients, based on their source IP address range.
What could the engineer do to accomplish this task?

Question6: Company policy states that all passwords should travel the network in encrypted packets except SNMP. Which command should the network engineer execute to comply with this policy?

Question7: Which log records detailed information such as statistics, metrics and debug information on the Citrix ADC in a proprietary binary format?

Question8: Scenario: A virtual server named New_Server has been disabled to perform an emergency upgrade; however requests from clients are NOT being redirected to the maintenance page.
The redirected URL configuration is:
>set cs vserver Website_main -lbvserver New_Server -backupVserver Backup_Server - redirectURL http://www.mydomain.com/maintenance -soMethod Connection -soThreshold
1000 -soPersistence enabled
Why are requests from clients NOT being redirected to the maintenance page?

Question9: A Citrix Administrator needs to match the host name 'www.example.com' in all HTTP requests.
Which expression, when used, meets this requirement?

Question10: Scenario: A Citrix Administrator has configured the following Access Control List (ACL) to block traffic from the IP address 10.102.29.5.
add simpleacl rule1 DENY -srclP 10.102.29.5
A week later, the administrator found that the ACL is no longer present on the Citrix ADC.
What could be the reason for this?

Question11: Scenario: A network engineer needs to re-configure the Citrix ADC to utilize two new VLANs - VLAN2 and VLAN3. VLAN2 is an untagged VLAN and VLAN3 will require a .1q compliant tag.
Interface 1/1 is the only interface that will be used on the Citrix ADC. How could the engineer configure the Citrix ADC so that it can communicate with both networks?

Question12: Scenario: Example.com runs a dating service site that provides a service with videos of candidates. They want to use RTSP load balancing to stream the videos more effectively. Which load balancing method should the engineer select?

Question13: Scenario: A network engineer configured a new Citrix ADC MPX appliance without any VLANs and with a single interface connected to the network. The engineer has not completed any other configurations. The interface is then accidentally disabled and contact is lost with the appliance.
Which two actions can the network engineer take to restore communications to the appliance?
(Choose two.)

Question14: Scenario: A Citrix Administrator configured the "-denySSLReneg" Parameter using the below command on Citrix ADC to enhance security.
set ssl parameter -denySSLReneg <option>
Which two options can the administrator use to complete the command? (Choose two.)

Question15: A network engineer notes that a high availability pair (HA) is NOT synchronizing correctly and decides to open a ticket with Citrix Support. When opening the new ticket with Citrix Support, the engineer should run show __________ and __________. (Choose the correct set of options to complete the sentence.)

Question16: Which two compression actions could a Citrix ADC engineer use? (Choose two.)

Question17: A network engineer has configured two Citrix ADC MPX appliances as a high availability (HA) pair. What can the engineer configure to prevent failover if only a single interface fails?

Question18: Which step could a network engineer take to prevent brute force logon attacks?

Question19: Scenario: An engineer configures two Citrix ADC appliances in a high availability (HA) pair. As part of a monthly health check, the engineer attempts to log on to the second node of the HA pair and is unable to access the management IP Address. The engineer logs on to the first Citrix ADC node and verifies that HA is working and operational. What does the engineer need to do to resolve this problem?

Question20: A Citrix ADC engineer would like to present different web pages to a user based on the device and browser type from which they are connecting. Which responder policy could assist with this requirement?

Question21: Which type of Citrix ADC monitor can a Citrix Administrator use to check the authentication service of the Active Directory Domain Controller?

Question22: Scenario: A Citrix Administrator is managing a Citrix ADC SDX running eight Citrix ADC instances. The administrator first needs to upgrade the firmware on the instances. However, the administrator is concerned that it needs to be done all at once.
What upgrading flexibility does SDX provide in this scenario?

Question23: A Citrix Administrator has implemented the HTTP Callout.
View the screenshot (Exhibit).

Which part of the configuration is responsible for triggering the call to HTTP Callout server?

Question24: Which step can a Citrix Administrator take in order to use the default compression policies?

Question25: A network engineer runs the following command:
nsconmsg -K /var/nslog/newnslog -s nsdebug_pe=1 -d oldconmsg
What is the engineer trying to check in the log?

Question26: Scenario: A network engineer is going to roll out an upgrade from a 9.x version on a standalone Citrix ADC appliance using the command-line interface. Which two items does the engineer need to download before proceeding with the upgrade? (Choose two.)

Question27: An environment network has:
High bandwidth
Low packet loss
High Round-Trip Time (RTT)
Which TCP profile should an engineer configure for the environment described?

Question28: Scenario: The network engineer is setting up a new Citrix ADC using a direct connection. Three networks are connected to the Citrix ADC. After initial configuration and restart, the engineer would like to confirm the routing table entries. From which location and which command should the engineer run to display the routing table?

Question29: Scenario: A network engineer has installed a Citrix ADC system into their corporate DMZ and would like to provide access to a web server on the internal LAN. The web server will be accessed by external users through the Citrix ADC. The firewall administrator has opened the relevant ports required on the external and the internal firewall. The engineer notices that the virtual server and services representing the web server are down and the internal web server does NOT appear accessible from the Citrix ADC. What could be the cause of this?

Question30: A network engineer is trying to read a nstrace from the Citrix ADC but can only see encrypted traffic. Which file(s) are required to decrypt the network trace?

Question31: Scenario: An engineer executes the following commands:
add vlan 2
bind vlan 2 -ifnum 1/2
add ns ip 10.110.4.200 255.255.255.0
bind vlan 2 -IPAddress 10.110.4.200 255.255.255.0
What type of IP address has been added to the Citrix ADC?

Question32: Scenario: An organization has recently been penetration-tested by a security company. The findings have indicated that the Citrix ADC device is responding to requests revealing web server information within the HTTP response headers. Which Citrix ADC feature can a network engineer use to prevent this information from being leaked to a potential malicious user?

Question33: Scenario: An engineer implementing a Citrix ADC is tasked with creating a new VLAN, named VLAN 2, and added to the current interfaces. A new IP address of 10.102.29.54 with a network mask of 255.255.255.0 must be configured for VLAN 2. Which commands could the engineer use to achieve this configuration in the command-line interface prior to binding VLAN 2?

Question34: Scenario: A Citrix Administrator created an SSL virtual server using only the following commands:
add lb vserver sslvserver SSL 10.102.29.133 444
add service sslsvc1 192.168.0.14 SSL 443
add service sslsvc2 192.168.0.15 SSL 443
bind lb vserver sslvserver sslsvc1
bind lb vserver sslvserver sslsvc2
set ssl vserver sslvserver -ssl3 disabled
The SSL virtual server is currently in a DOWN state.
What could be the reason the SSL virtual server is in a down state?

Question35: When configuring Citrix ADC authentication to access a web site, which two things should a network engineer verify in the environment? (Choose two.)

Question36: Scenario: A Citrix ADC engineer configured a service and server for RADIUS authentication. To ensure that the RADIUS service is available and responding to authentication requests, the engineer has added the Citrix ADC built-in monitor to the service. On inspecting the RADIUS service the engineer notices it is marked as DOWN. What could be causing this issue?

Question37: Scenario: A Citrix Administrator needs to configure persistence on a Global Server Load Balancing (GSLB) virtual server to which a service is bound, so that the service continues to serve requests from the client even after it is disabled manually, accepting new requests or connections only to honor persistence. After a configured period of time, no new requests or connections are directed to the service and all of the existing connections are closed.
Which parameter can the administrator configure while disabling the service to achieve this requirement?

Question38: Scenario: A network engineer has configured a load balancing virtual server for an HTTP application. Due to the application architecture, it is imperative that a user's session remains on a single server during the session. The session has an idle timeout of 60 minutes. Some devices are getting inconsistent application access while most are working fine. The problematic devices all have tighter security controls in place. Which step should the engineer take to resolve this issue?

Question39: Scenario; A Citrix Administrator would like to grant access to a Junior Administrator on the Citrix ADC. The administrator would like to grant full access to everything except the following:
* Shell Access
* User Configuration access
* Partition Configuration access
Which pre-existing command policy would meet the needs of the scenario?

Question40: A network engineer wants to configure a Citrix ADC for load balancing Voice over IP traffic (VoIP).
Which hash method is the best fit for VoIP traffic?

Question41: Scenario: A user is attempting to access a web server which is load balanced by the Citrix ADC using HTTPS. The user received the following message:
SSL/TLS error: You have not chosen to trust "Certificate Authority" the issuer of the server's security certificate.
What can a Citrix Administrator do to prevent users from viewing this message?

Question42: Some SSL certificate files may be missing from a Citrix ADC appliance. Which directory should an engineer check to determine which files are missing?

Question43: An engineer should use the filter (content filtering) feature to prevent __________ and
__________. (Choose the two correct options to complete the sentence.)

Question44: Scenario: The network engineer has created a monitor and bound it to a service group containing four web servers to verify that the web application responds. During routine maintenance one of the web servers is shut down; however, the server state remains UP and user requests are still attempting to communicate with the server. What could be causing this problem?

Question45: Scenario: A Citrix Administrator configured the HTTP_Callout feature on the Citrix ADC using the command-line interface.
After configuring the commands, the device is facing the HTTP callout recursion issue.
Click on the `Exhibit' button to view the screenshot of the command-line interface.

How will the administrator rectify the issue?

Question46: A network engineer needs to upgrade both appliances of a High Availability (HA) pair. In which order should the network engineer upgrade the appliances?

Question47: Scenario: A Citrix Administrator currently manages a Citrix ADC environment in a retail company that is growing quickly and may soon double its volume of business. Currently, a Citrix ADC MPX
5550, which handles web and SSL transactions, is in place, but is close to full capacity. Due to the forecasted growth increase, the administrator needs to find a cost-effective solution.
What can the administrator recommend to management in order to cost effectively handle the growth?

Question48: A Citrix Administrator is configuring a Citrix ADC high availability (HA) pair and needs to ensure that one Net Scaler is UP and primary at all times to ensure the business websites are always available.
What does the administrator need to do to ensure that the Citrix ADCs still handle web traffic in the event that both nodes become unavailable or fail a health check?

Question49: Scenario: A Citrix ADC MPX is using one of four 10G ports available in an environment. A Citrix Administrator found a traffic bottleneck at the Citrix ADC.
What can the administrator do to increase bandwidth on the Citrix ADC?

Question50: Which policy expression must an engineer use to enable compression for javascript files?

Question51: Scenario: A Citrix Administrator is configuring SNMP management on the Citrix ADC to receive alerts when something fails. The administrator was confident that the Manager, Alarms and SNMP Traps were configured correctly. The following week, there was a Citrix ADC-related outage and the administrator did NOT get any alerts.
What could be the reason for the SNMP alert failure?

Question52: Scenario: A Citrix Administrator is running applications on thousands of load-balanced backend servers in a large infrastructure. It is difficult to track and troubleshoot problems due to the large volume of traffic received.
Which feature of Citrix ADC Management and Analytics System (Citrix ADC MAS) can the administrator configure to monitor and troubleshoot in detail for an environment of this size?

Question53: A Citrix Administrator executed the following command in the Global Server Load Balancing (GSLB) environment:
set gslb site SiteB -triggerMonitor MEPDOWN
What will be the effect of this command to the default service monitoring behavior on the remote site?

Question54: Scenario: A Citrix ADC is configured with Interface 1/1 and bound to VLAN 40. A Citrix Administrator has executed the following command:
bind vlan 20 *ifnum 1/1
What is the result of executing the command on the Citrix ADC?

Question55: Scenario: GSLB has been configured for use within a multisite environment. The MEP status is reported as down on all GSLB appliances. The appliances have been configured for unsecured MEP exchange. Which port must the network engineer ensure is open between the Citrix ADC appliances?

Question56: What type of protocol does AppFlow use for reporting?

Question57: Scenario: External users are currently experiencing delays while accessing XenApp and XenDesktop through the Citrix ADC. A Citrix Administrator needs to monitor the ICA connections to gather the performance information from the Citrix ADC Management and Analytics System (MAS).
Which two tools can the administrator use to gather information about WAN Latency, DC Latency and Host Delay? (Choose two.)

Question58: A network engineer has enabled USIP and USNIP and set a unique IP address as the source IP using the proxyIP parameter on an INAT policy. Which is the correct order of precedence for the IP addresses?

Question59: Which policy will allow a Citrix Administrator to modify all the URLs in the response body from
"http://" to "https://" in an SSL offload deployment?

Question60: What is the first thing a Citrix Administrator should create when creating a Server Certificate for Citrix ADC to secure traffic?

Question61: A network engineer should use a HTTP-ECV monitor type to control the status of a load balanced web server resource when __________. (Choose the correct option to complete the sentence.)

Question62: A Citrix Administrator notices that the Citrix ADC is sending the IP addresses of all the active services in the DNS response.
The administrator can use the set gslb vserver<name>__________parameter to avoid this behavior. (Choose the correct option to complete the sentence.)

Question63: Scenario: A Citrix ADC environment uses two-factor authentication and the second authentication method is AD. A user logs in to the environment but does NOT receive access to the resources that the user should have access to. How can an engineer determine the AD authentication issue on the Citrix ADC?

Question64: Citrix Administrator would like to configure the network in a way that will allow the traffic requests coming from the client to pass through the Citrix ADC, but the responses from the back-end resources will be sent directly to the client bypassing the Citrix ADC.
Which feature can the administrator use for this configuration?

Question65: Scenario: A network engineer needs to configure Citrix Citrix ADC to provide Access Gateway services to VLAN 2 using interface 1/1 only, while also using interface 1/2 to provide load balancing services to VLAN 3. How could this result be achieved?

Question66: Scenario: A Citrix ADC appliance is having intermittent issues. A Citrix Administrator is unable to identify the root cause and fix them. The administrator opened a Support ticket and the Engineer assigned to the case requested all the logs and configuration information from the Citrix ADC.
Which technical support tool can the administrator use to gather all the information on the Citrix ADC to send to the Support Engineer?