PassLeader just published the NEWEST Citrix 1Y0-351 exam dumps! You can get both 1Y0-351 VCE dumps and 1Y0-351 PDF dumps from PassLeader, both VCE and PDF dumps contain the NEWEST 1Y0-351 exam questions, which will ensure your 1Y0-351 exam 100% passing! Welcome to download the valid PassLeader 1Y0-351 dumps VCE and PDF from PassLeader — https://www.passleader.com/1y0-351.html (293 Q&As Dumps)
And, you can preview the PassLeader 1Y0-351 dumps online — https://drive.google.com/open?id=0B-ob6L_QjGLpNDR0TEdkaG9XWGc
QUESTION 1
Scenario:
A network engineer created an IPv6 virtual server on the NetScaler. The virtual server is using a service group with two IPv4 servers bound to it. When testing access to the virtual server from a client configured with an IPv6 address, he is unable to connect. What could be the reason for this issue?
A. The NetScaler is disabled for NAT.
B. IPv6 protocol translation is disabled.
C. An IPv6 address on the NetScaler is not bound to the correct VLAN.
D. The NetScaler does not have an INAT rule to convert IPv4 to IPv6 from the back-end servers.
Answer: B
QUESTION 2
Scenario:
An engineer executes the following commands:
add vlan 2
bind vlan 2 -ifnum 1/2
add ns ip 10.110.4.200 255.255.255.0
bind vlan 2 -IPAddress 10.110.4.200 255.255.255.0
What type of IP address has been added to the NetScaler?
A. VIP address
B. NSIP address
C. SNIP address
D. GSLB Site IP address
Answer: C
QUESTION 3
A network engineer needs to configure smart card-based authentication on NetScaler Access Gateway. Which type of authentication policy could the engineer configure in order to accomplish this task?
A. Local
B. RADIUS
C. Certificate
D. Secure LDAP
Answer: C
QUESTION 4
Scenario:
Example.com runs a dating service site that provides a service with videos of candidates. They want to use RTSP load balancing to stream the videos more effectively. Which load balancing method should the engineer select?
A. Least packet
B. Round Robin
C. Least bandwidth
D. Least connection
Answer: C
QUESTION 5
Scenario:
An organization has recently been penetration-tested by a security company. The findings have indicated that the NetScaler device is responding to requests revealing web server information within the HTTP response headers. Which NetScaler feature can a network engineer use to prevent this information from being leaked to a potential malicious user?
A. Rewrite
B. Responder
C. Web Logging
D. URL Transformation
Answer: A
QUESTION 6
Scenario:
Company Inc. wants to tag incoming requests with a header that indicates which browser is being used on the connection. This helps the server keep track of the browsers after the NetScaler has delivered the connections to the back end. The engineer should create ____ actions to ____. (Choose the correct set of options to complete the sentence.)
A. rewrite; insert tags on the client header
B. responder; separate the client requests
C. rewrite; insert tags on the server response
D. responder; filter the browser type on the client header
Answer: A
QUESTION 7
Which step could a network engineer take to prevent brute force logon attacks?
A. Enable the Rate Limiting feature.
B. Enable the AAA Application feature.
C. Configure the Access Gateway policies.
D. Configure the Cache redirection policies.
Answer: A
QUESTION 8
A network engineer should enable the Rate Limiting feature of a NetScaler system to mitigate the threat of ____ attack. (Choose the correct option to complete the sentence.)
A. reverse proxying
B. Java decompilation
C. source code disclosure
D. brute force logon attacks
Answer: D
QUESTION 9
Which NetScaler feature could be used to stall policy processing to retrieve information from an external server?
A. Responder
B. HTTP callout
C. AppExpert template
D. EdgeSight monitoring
Answer: B
QUESTION 10
Scenario:
A network engineer needs to generate a certificate on the NetScaler appliance. The environment requires a private key with 4096-bit encryption. To generate a new SSL certificate from a NetScaler Appliance, the engineer must first create ____. (Choose the correct option to complete the sentence.)
A. CSR
B. DSA key
C. RSA key
D. Diffie-Hellman key
Answer: C
QUESTION 11
A network engineer has noted that the primary node in an HA pair has been alternating as many as three times a day due to intermittent issues. What should the engineer configure to ensure that HA failures are alerted?
A. LACP
B. SNMP
C. Route monitors
D. Failover Interface Set
Answer: B
QUESTION 12
The disk is full on a NetScaler appliance but NO alerts were generated by the SNMP traps. What is the likely cause of this failed alert?
A. Auditing is not enabled.
B. EdgeSight monitoring is not configured.
C. The threshold was not set for the alarm.
D. Health monitoring has not been enabled.
Answer: C
QUESTION 13
Scenario:
When the NetScaler was set up, compression was enabled. The network engineer would like to disable compression ONLY for a particular virtual server. How could the engineer accomplish this?
A. Uncheck Compression in the system basic features.
B. Create a policy with a NOCOMPRESS action, bound to the global request point.
C. Disable compression on the services or service groups bound to the virtual server.
D. Create a policy with a NOCOMPRESS action, bound the virtual server Compression (request) point.
Answer: C
QUESTION 14
Scenario:
A network engineer monitoring an HTTP service-related issue needs to view only the relevant data pertaining to the service being monitored. The IP address of the back-end service being monitored is 10.10.1.99. The NSIP address is 10.10.1.230. Which command should the engineer execute to monitor data relevant to this issue only in realtime?
A. telnet
B. traceroute
C. nsconmsg
D. nstcpdump
Answer: D
QUESTION 15
Scenario:
A NetScaler environment uses two-factor authentication and the second authentication method is AD. A user logs in to the environment but does NOT receive access to the resources that the user should have access to. How can an engineer determine the AD authentication issue on the NetScaler?
A. Check NSlogs.
B. Use nsconmsg.
C. Use the cat aaad.debug command.
D. Check the authorization configuration.
Answer: C
QUESTION 16
A NetScaler is configured with two-factor authentication. A user reported that authentication failed. How can an engineer determine which factor of the authentication method failed?
A. Check NSlog.
B. Use nsconmsg.
C. Check the dashboard.
D. Use cat aaad.debug command.
Answer: D
QUESTION 17
Scenario:
A NetScaler high availability (HA) pair has the following interfaces connected:
1/1 – Test network
1/2 – Production network
The network engineer needs to re-cable the test network and wants to ensure that, when the cable is removed, HA fail over does NOT occur unless the production network also goes down. Which step should the engineer take to meet these requirements?
A. Configure LACP for interface 1/1.
B. Disable HA monitoring on interface 1/1.
C. Set the throughput to 0 for interface 1/1.
D. Bind interfaces 1/1 and 1/2 into a channel, then disable HA monitoring.
Answer: B
QUESTION 18
Scenario:
A NetScaler engineer is on the phone with Technical Support to troubleshoot an issue. The NetScaler engineer generated a support archive and needs to send the file to the Technical Support Specialist to help resolve the problem with the appliance. In which directory could the engineer retrieve the information?
A. /nsconfig
B. /var/crash
C. /var/nstrace
D. /var/tmp/support
Answer: D
QUESTION 19
Scenario:
A network engineer has bound a service group containing four web servers to a virtual server. The virtual server is UP but users report that they are unable to access the virtual server. In order to troubleshoot this issue, the engineer should use telnet from ____. (Choose the correct option to complete the sentence.)
A. a PC to the virtual IP address
B. a PC to the subnet IP address
C. a PC to the mapped IP address
D. the NetScaler shell to one of the web servers
Answer: A
QUESTION 20
How could a network engineer gather detailed network information?
A. System node -> Diagnostics -> Call home
B. System node -> Diagnostics -> Start new trace
C. System node -> Diagnostics -> Show techsupport
D. System node -> Diagnostics -> Show running vs saved config
Answer: B
QUESTION 21
Scenario:
A security test has shown that the NetScaler is forwarding IP packets. Company standard operating procedure is that the routers should be the only devices forwarding packets. Which step should the network engineer take to prevent forwarding packets?
A. Enable Layer 2 mode.
B. Disable Layer 3 mode.
C. Disable Path MTU Discovery.
D. Enable MAC based forwarding.
Answer: B
QUESTION 22
An engineer has bound a policy to a test virtual server. How could the engineer verify that the policy is being applied?
A. Monitor the number of hits for the policy.
B. Monitor the number of hits for the virtual server.
C. Enable the AppFlow logging option for the virtual server.
D. Ensure the policy has a greater priority value than other policies bound to the test virtual server.
Answer: A
QUESTION 23
Scenario:
An engineer implementing a NetScaler is tasked with creating a new VLAN, named VLAN 2, and adding it to the current interfaces. A new IP address of 10.102.29.54 with a network mask of 255.255.255.0 must be configured for VLAN 2. Which commands could the engineer use to achieve this configuration in the command-line interface prior to binding VLAN 2?
A. add ns ip 10.102.29.54 255.255.255.0
add vlan 2
B. set vlan 2 -aliasName VLAN2
add ns ip 10.102.29.54 255.255.255.0
C. add ns ip 10.102.29.54 255.255.255.0 -vrID 2
D. add ns ip 10.102.29.54 255.255.255.0 -type SNIP
set ns ip 10.102.29.54 255.255.255.0 -vrID 2
Answer: A
QUESTION 24
Scenario:
A network engineer has configured GSLB for a multisite environment. All GSLB services show as UP with an UP MEP status. The engineer has observed that DNS queries are directed to the SNIP of the NetScaler; however, no DNS response is being received. How can the engineer resolve this issue?
A. Add an ADNS service on the SNIP.
B. Change the DNS delegation to the NSIP.
C. Create a load balancing virtual server for DNS.
D. Select the “Send all “active” service IPs’ in response (MIR)” option.
Answer: A
QUESTION 25
Scenario:
GSLB has been configured for use within a multisite environment. The MEP status is reported as down on all GSLB appliances. The appliances have been configured for unsecured MEP exchange. Which port must the network engineer ensure is open between the NetScaler appliances?
A. TCP 3011
B. UDP 3011
C. TCP 3012
D. UDP 3012
Answer: A
Now, try the PassLeader 1Y0-351 dumps for 100% passing your 1Y0-351 exam — https://www.passleader.com/1y0-351.html (293 Q&As VCE Dumps and PDF Dumps)
And, preview the PassLeader 1Y0-351 dumps online — https://drive.google.com/open?id=0B-ob6L_QjGLpNDR0TEdkaG9XWGc
Good Luck!