Citrix NetScaler 12 Essentials and Traffic Management 1Y0-240 Exam Questions with VCE and PDF for Free Download from PassLeader (Question 46 – Question 60)

1Y0-240 Dumps 1Y0-240 Exam Questions 1Y0-240 PDF Dumps 1Y0-240 VCE Dumps Citrix Networking Certification

PassLeader just published the NEWEST Citrix 1Y0-240 exam dumps! You can get both 1Y0-240 VCE dumps and 1Y0-240 PDF dumps from PassLeader, both VCE and PDF dumps contain the NEWEST 1Y0-240 exam questions, which will ensure your 1Y0-240 exam 100% passing! Welcome to download the valid PassLeader 1Y0-240 dumps VCE and PDF from PassLeader (160 Q&As Dumps –> 194 Q&As Dumps –> 248 Q&As Dumps)

And, you can preview the PassLeader 1Y0-240 dumps online

A network engineer might choose to use SSL_Bridge instead of a SSL virtual server in order to ____. (Choose the correct option to complete the sentence.)

A.    be able to decrypt the SSL traffic
B.    enable use of OCSP for revoked certificates
C.    pass user certificates to the back-end servers
D.    enable SSL server certificates on the service group

Answer: C

A network engineer has bound four policies to an HTTP virtual server as follows:
– PolicyA is bound with a priority of 10 and has the following expression: REQ.IP.SOURCEIP ==
– PolicyB is bound with a priority of 15 and has the following expression: REQ.IP.SOURCEIP !=
– PolicyC is bound with a priority of 20 and has the following expression: REQ.IP.SOURCEIP ==
– PolicyD is bound with a priority of 25 and has the following expression: REQ.IP.SOURCEIP !=
When a connection is made from a PC with an IP address of, which policy will be applied?

A.    PolicyA
B.    PolicyB
C.    PolicyC
D.    PolicyD

Answer: B

A network engineer has bound four policies to a virtual server as follows:
– PolicyA has a priority of 10
– PolicyB has a priority of 20
– PolicyC has a priority of 30
– PolicyD has a priority of 0
Which policy will be evaluated first?

A.    PolicyA
B.    PolicyB
C.    PolicyC
D.    PolicyD

Answer: D

An engineer has a NetScaler system with NSIP with subnet mask The company changed the IP network to use subnet mask Which two commands could the engineer run to modify the subnet mask of the NSIP? (Choose two.)

A.    ifconfig
B.    configns
C.    set ns ip
D.    add ns ip

Answer: BC

A network engineer is going to roll out an upgrade from a 9.x version on a standalone NetScaler appliance using the command-line interface. Which two items does the engineer need to download before proceeding with the upgrade? (Choose two.)

A.    SSL Certificates Files
B.    NetScaler Firmware File
C.    NetScaler Configuration File
D.    NetScaler Documentation File

Answer: BD

A network engineer needs to implement high availability (HA) for a pair of NetScaler appliances. The existing appliance was recently restarted and the new appliance has been rack mounted and turned on for several weeks waiting to be configured. The engineer needs to create an HA pair, but is concerned that his original appliance will get erased when the HA pair is created. Which two tasks could the engineer do before the creation of the HA pair to ensure that the exiting unit stays the main appliance? (Choose two.)

A.    Set StayPrimary on the existing node.
B.    Configure StaySecondary on the new node.
C.    Enable HA Sync before adding the second node.
D.    Create a Route Monitor to ensure proper synchronization.
E.    Ensure that INC mode is enabled during creation of HA Pair.

Answer: AB

A network engineer configured a new NetScaler MPX appliance without any VLANs and with a single interface connected to the network. The engineer has not completed any other configurations. The interface is then accidentally disabled and contact is lost with the appliance. Which two actions can the network engineer take to restore communications to the appliance? (Choose two.)

A.    Connect to the SNIP instead of the NSIP.
B.    Connect another of the unused interfaces.
C.    Use the serial port to connect and then bring the disabled interface online.
D.    Connect a crossover cable to port that has been disabled and connect to the NSIP.

Answer: BC

A pair of NetScaler devices have recently been installed into the corporate DMZ. The Netscalers have been installed in two-arm mode, with two interfaces in a Internet-facing VLAN and two interfaces in the internal VLAN. A private management subnet also exists. The NetScaler engineer would like to secure and restrict communication between the management subnet and the SNIP address on that subnet. Which two actions could the engineer take to help with these goals? (Choose two.)

A.    Apply an ACL on the specified SNIP.
B.    Remove the ACL list to the internal VLAN.
C.    Remove the NSIP address from the Netscaler.
D.    Configure the SNIP with the -gui SECUREONLY option.

Answer: AD

Which two of the following settings could be configured using a TCP profile that is bound to a service? (Choose two.)

A.    TCP buffer size
B.    Window scaling
C.    TCP Server time-out values
D.    Source IP for specific subnet
E.    Allowed bandwidth throughput
F.    Number of max concurrent TCP connections

Answer: AB

The NetScaler has been connected to two external networks provided by different Internet service providers(ISPs). Dynamic routing is not enabled. Traffic is expected to use the first ISP (through the router) if possible and the second, slower ISP (through the router) only if the Primary ISP fails. Which two commands could the network engineer execute to configure the routes? (Choose two.)

A.    add route -cost 10 -monitor arp
B.    add route -cost 5 -monitor PING
C.    add route -cost 15 -msr ENABLED
D.    add route -cost 3 -monitor PING-DEFAULT

Answer: AB

When binding a certificate to a virtual server, which two certificate formats are supported by NetScaler? (Choose two.)

A.    P7B
B.    PFX
C.    PEM
D.    DER

Answer: CD

A network engineer plans to configure an Active Directory Server as the default authentication for a NetScaler deployment and provide users with the option to change their password if it is expired. Which two actions should the engineer take to configure this authentication requirement on the NetScaler system? (Choose two.)

A.    Configure a pre-authentication policy.
B.    Select security type as SSL on Authentication policy.
C.    Configure Authentication server with SSO name attribute.
D.    Configure Authentication server with allow Password change option.

Answer: BD

When configuring NetScaler authentication to access a web site, which two things should a network engineer verify in the environment? (Choose two.)

A.    AAA is enabled.
B.    One DNS server exists.
C.    A Keytab file is available.
D.    An authentication virtual server exists.
E.    A traffic management virtual server exists.

Answer: AD

During a recent security penetration test, several ports on the management address were identified as providing unsecured services. Which two methods could the network engineer use to restrict these services? (Choose two.)

A.    Configure Auditing policies.
B.    Create Content Filtering policies.
C.    Create Access Control Lists (ACLs).
D.    Configure options on the Management IP addresses.

Answer: CD

A NetScaler engineer has received an SSL certificate and bound it to the vServer. However, users are unable to browse to the website using HTTPS. When the NetScaler engineer browses to the site using HTTPS, the engineer notices that the certificate chain is incomplete. Which two steps should the administrator take to fix the virtual server? (Choose two.)

A.    Generate a new CSR.
B.    Install a new Certificate Authority (CA).
C.    Install the Intermediate Certificate from the CA.
D.    Link the Intermediate Certificate to the virtual server.
E.    Link the SSL Certificate to the Intermediate Certificate.

Answer: CE

Now, try the PassLeader 1Y0-240 dumps for 100% passing your 1Y0-240 exam (160 Q&As VCE Dumps and PDF Dumps –> 194 Q&As VCE Dumps and PDF Dumps –> 248 Q&As VCE Dumps and PDF Dumps)

And, preview the PassLeader 1Y0-240 dumps online

Good Luck!