PassLeader just published the NEWEST Citrix 1Y0-351 exam dumps! You can get both 1Y0-351 VCE dumps and 1Y0-351 PDF dumps from PassLeader, both VCE and PDF dumps contain the NEWEST 1Y0-351 exam questions, which will ensure your 1Y0-351 exam 100% passing! Welcome to download the valid PassLeader 1Y0-351 dumps VCE and PDF from PassLeader — https://www.passleader.com/1y0-351.html (293 Q&As Dumps)
And, you can preview the PassLeader 1Y0-351 dumps online — https://drive.google.com/open?id=0B-ob6L_QjGLpNDR0TEdkaG9XWGc
QUESTION 226
Which NetScaler caching type requires proxy configuration on all client devices?
A. SOCKS
B. REVERSE
C. FORWARD
D. TRANSPARENT
Answer: C
QUESTION 227
Scenario:
A client connecting to an SSL virtual server receives the following error:
“Invalid Server Certificate The server certificate is invalid. Do you wish to accept this certificate and connect to the server anyway?”
What is a possible cause of this error message?
A. The private key is NOT password-protected.
B. The certificate key pair is password-protected.
C. The intermediate CA certificate is NOT linked to the server certificate.
D. Certificate Revocation Lists (CRLs) have NOT been defined on the NetScaler.
Answer: C
QUESTION 228
Which two NetScaler command-line interface commands could an engineer execute to change TCP Window Scaling settings on the NetScaler? (Choose two.)
A. set netProfile
B. add ns tcpProfile
C. unset ns tcpParam
D. set ns tcpbufParam
E. add autoscale profile
Answer: BC
QUESTION 229
On which two objects could a NetScaler Engineer bind cipher groups? (Choose two.)
A. Server
B. Service
C. SSL policy
D. SSL profile
E. Virtual server
Answer: BE
QUESTION 230
Which protocol can be monitored by Insight Center?
A. FTP
B. HTTP
C. RTSP
D. RADIUS
Answer: B
QUESTION 231
Scenario:
A NetScaler Engineer is configuring a new system with connected interfaces 10/1 – 10/4 and runs the following commands:
add ip 10.10.10.1 255.255.255.0 -type snip
add vlan 10
bind vlan 10 -ifnum 10/1
On which interface(s) will subnet 10.10.10.1 respond to requests?
A. Only interface 10/1
B. Interfaces on VLAN 10
C. Only interfaces on VLAN 1
D. Interfaces 10/1 through 10/4
Answer: D
QUESTION 232
Which connection state is included in the Current Server Connections parameter, but not affected by Max Clients?
A. Open
B. Listen
C. Closing
D. Open Established
Answer: C
QUESTION 233
Which command must a NetScaler Engineer run at the command-line interface to enable a Link Aggregation Control Protocol (LACP) channel?
A. Use “set lacp” with sysPriority parameter.
B. Use “set lacp” with ownerNode parameter.
C. Use “set interface” with lacpKey parameter.
D. Use “set interface” with lacpPriority parameter.
Answer: C
QUESTION 234
A NetScaler Engineer created an SSL virtual server but the status is showing as state DOWN. What could be causing the virtual server to show as state DOWN?
A. The virtual server is configured for port 444.
B. HTTP services are used instead of HTTPS services.
C. The SSL certificate is NOT bound to the virtual server.
D. The certificate bound to the virtual server has a private key of 512-bits.
Answer: C
QUESTION 235
Which client header indicates support for the type of compression the NetScaler may use?
A. Accept
B. User-Agent
C. Content-Type
D. Accept-Encoding
Answer: D
QUESTION 236
Scenario:
A NetScaler Engineer has discovered that the object home.php is NOT found in the cache on the system. Below is the relevant configuration:
add cache contentGroup cache_content_group_1 -relExpiry 0
add cache policy cache_pol_1 -rule “http.REQ.URL.CONTAINS(\”home.php\”)” -action MAY_CACHE -storeInGroup cache_content_group_1
add cache policy cache_pol_2 -rule “http.REQ.METHOD.EQ(\”GET\”)” -action NOCACHE
add cache policy cache_pol_3 -rule “HTTP.RES.HEADER(\”Set-Cookie\”).EXISTS” -action CACHE
bind cache global cache_pol_1 -priority 90 -gotoPriorityExpression END -type REQ_OVERRIDE
bind cache global cache_pol_2 -priority 100 -gotoPriorityExpression END -type REQ_OVERRIDE
bind cache global cache_pol_3 -priority 100 -gotoPriorityExpression END -type RES_OVERRIDE
The data from the client and the server are as following:
GET /home.php HTTP/1.1
Host: www.website.com
User-Agent: Mozilla Firefox/3.0.3
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Date: Thu, 09 Oct 2014 18:25:00 GMT
Cookie: sessionid=100xyz
HTTP/1.1 200 OK
Date: Thu, 09 Oct 2014 18:25:00 GMT
Server: Apache/2.2.3 (Fedora)
Last-Modified: Wed, 09 Jul 2014 21:55:36 GMT
ETag: “27db3c-12ce-5e52a600”
Accept-Ranges: bytes
Cache-Control: private, max-age=0
Set-Cookie: sessionid=100xyz; expires=Thu, 09-Oct-2014 18:30:00 GMT; path=/
Content-Length: 119
Connection: close
Content-Type: text/html; charset=UTF-8
Why does the object NOT persist in the cache?
A. The request is a GET request.
B. The response has Set-Cookie.
C. The content group is missing a cache selector.
D. The content group has been configured with relExpiry 0.
Answer: D
QUESTION 237
Which IP address type should be bound to a VLAN in order to isolate traffic to backend services?
A. Virtual IP (VIP)
B. Cluster IP (CLIP)
C. Subnet IP (SNIP)
D. NetScaler IP (NSIP)
Answer: C
QUESTION 238
Scenario:
NetScaler features are NOT licensed. A NetScaler Engineer has checked that the proper platform license file has been uploaded. Why are the NetScaler features NOT licensed?
A. The features are NOT enabled.
B. The NetScaler needs to be restarted.
C. The NetScaler initial setup is NOT completed.
D. There is no universal license on the NetScaler.
Answer: B
QUESTION 239
Which SSL parameter should an engineer configure to bind multiple certificate key pairs to a virtual server?
A. SNI enable
B. Session reuse
C. Send close-notify
D. Client authentication
Answer: A
QUESTION 240
What is the key benefit to enabling Session Reuse on an SSL offload VServer?
A. The number of HTTP requests to the backend services are decreased.
B. Resumed SSL sessions are more secure than sessions that require renegotiation.
C. Reusing existing sessions decreases the number of TCP connections made to backend services.
D. A partial SSL handshake is sent over the existing SSL connection, reducing CPU and bandwidth usage.
Answer: D
QUESTION 241
Which two are HTTP response codes from a successful cache hit by default? (Choose two.)
A. 304
B. 500
C. 200
D. 401
Answer: AC
QUESTION 242
Which persistence method is only applicable to load-balancing SIP?
A. CALLID
B. RTSPID
C. SOURCEIP
D. COOKIEINSERT
Answer: A
QUESTION 243
Scenario:
A NetScaler Engineer wants to make it easier for the help desk group to access the active node in a high-availability pair. Members of the help desk group must be able to access the NetScaler in a secure way without being notified of warnings in their web browsers. Which two of the listed steps must the engineer take to meet the requirements of the scenario? (Choose two.)
A. Enable management access to the VIP.
B. Enable management access to the SNIP.
C. Bind a trusted certificate to the internal service.
D. Bind the ns-server-certificate to the SNIP to the internal service.
E. Create a self-signed certificate on the NetScaler and assign it to the internal service.
Answer: BC
QUESTION 244
What would a NetScaler Engineer configure to allow internal IPv4 servers on a private subnet access to the external Internet through the NetScaler?
A. Link Load Balancing (LLB)
B. Network Address Translation 64 (NAT64)
C. Inbound Network Address Translation (INAT)
D. Reverse network address translation (RNAT)
Answer: D
QUESTION 245
A recent security audit has identified that NetScaler management is available on all Subnet IP (SNIP) adresses. Which step could an engineer take to ensure that these services are only available through the NetScaler IP (NSIP)?
A. Unbind all SNIPs from the NSVLAN.
B. Disable the ‘GUI’ option on all SNIPs.
C. Enable the ‘Restrict Access’ option on all SNIPs.
D. Disable the ‘Management Access’ option on all SNIPs.
Answer: D
QUESTION 246
How could a NetScaler Engineer ensure that a content-switching virtual server is marked as DOWN if all target load-balancing servers show as DOWN?
A. Specify a monitor
B. Enable State Update
C. Specify a route monitor
D. Configure a backup virtual server
Answer: B
QUESTION 247
Scenario:
A NetScaler Engineer needs to enable access to a load-balancing virtual server from two customers that belong to different VLANs, VLAN500 and VLAN600. Each customer must access the services and servers specific to their VLAN and should never be able to reach another customer service or servers. Traffic Domain (TD) 1 has been created for VLAN500 and Traffic Domain (TD) 2 for VLAN600. Load-balancing services have also been created for each server on TD1 and TD2. The TD for the virtual server is TD 3 and IP address 172.10.0.30. In order to complete this setup, the engineer should create a load-balancing virtual server with IP 172.10.0.30 on TD 3 and use ____. (Choose the correct option to complete the sentence.)
A. TD2 services as a backup virtual server
B. TD1 and TD2 services on one virtual server
C. TD1 and TD2 services on two virtual servers
D. TD1 on one virtual server and TD2 on second
Answer: D
QUESTION 248
Which item needs to be configured to enable content prefetch in Integrated Caching on the NetScaler appliance?
A. Cache Policy
B. Cache Object
C. Cache Selector
D. Cache Content Group
Answer: D
QUESTION 249
A NetScaler Engineer would like to direct identical requests for the same service to specific cache servers. Which load-balancing method should the engineer use?
A. URL Hash
B. Domain Hash
C. Source IP Hash
D. Source IP Destination IP Hash
Answer: A
QUESTION 250
Scenario:
A Network Engineer needs to provide a solution for mobile users who use devices that do NOT support basic access authentication. Which three steps should be included as part of the engineer’s plan to implement this requirement using NetScaler? (Choose three.)
A. Configure an OCSP responder.
B. Create an authentication VServer.
C. Configure a Pre-Authentication policy.
D. Create an LDAP authentication policy and bind it to the authentication server.
E. Enable and configure the authentication option on a VServer to use 401-based authentication.
F. Enable and configure the Authentication option on a load balancing VServer to use form-based authentication.
Answer: BDF
Now, try the PassLeader 1Y0-351 dumps for 100% passing your 1Y0-351 exam — https://www.passleader.com/1y0-351.html (293 Q&As VCE Dumps and PDF Dumps)
And, preview the PassLeader 1Y0-351 dumps online — https://drive.google.com/open?id=0B-ob6L_QjGLpNDR0TEdkaG9XWGc
Good Luck!