1Y0-A21 Online Practice Questions and Answers

Scenario: A financial company needs to maintain end-to-end security in network traffic. The company also requires that an administrator reduce the CPU levels for back-end servers in their environment because it requires end-to-end security.

Which setting on the SSL virtual server reduces CPU utilization on the back-end?

A. SSLv3

B. SSL Redirect

C. SSL Session Reuse

D. SSL Client Certificates

An administrator needs to configure a NetScaler system to dynamically advertise virtual IP addresses, directly connected routes and static routes to the upstream routers.

What must the administrator ensure is configured on the NetScaler system for this environment?

A. RNAT

B. L3 mode

C. Static Routes

D. Health Check monitor

E. Route Health Injection (RHI)

Scenario: An administrator is working within a network environment as depicted in the attached exhibit. The NetScaler systems in this HA pair need to exchange heartbeat packets over L3 through routers R3 and R4.

How can the administrator achieve this HA functionality?

A. Enable the dynamic routing feature.

B. Configure Route Health Injection (RHI).

C. Bind a route monitor to each NetScaler device.

D. Enable Independent Network Configuration (INC).

Scenario: An administrator needs to configure SSL offloading on a NetScaler system. The administrator has already enabled SSL on the NetScaler, added the necessary service and added an SSL-based virtual server.

Which three additional steps must the administrator take to complete the SSL offloading configuration? (Choose three.)

A. Create load balancing virtual servers.

B. Bind the created service to the virtual server.

C. Add a wildcard certificate to the virtual server.

D. Add an SSL certificate key pair to the NetScaler.

E. Bind the SSL certificate key pair to the virtual server.

F. Obtain an SSL certificate from an authorized certificate authority (CA).

A network administrator has been instructed to block access to the company web site by clients originating from the CIDR 222.222.0.0/10.

Which three steps must an administrator take to block access from specified IP addresses and notify the clients when using the NetScaler command line? (Choose three.)

A. bind responder global pol_un 10

B. bind responder global pol_redirect 10

C. add responder action act_redirect redirect "http://www.testing.com/404.html"

D. add responder policy pol_un "CLIENT.IP.SRC.IN_SUBNET(222.222.0.0/10)" act_un

E. add responder policy pol_redirect "CLIENT.IP.SRC.IN_SUBNET (222.222.0.0/10)" act_redirect

F. add responder action act_un respondwith "HTTP/1.1 200 OK\r\n\r\n" + "Client:" + CLIENT.IP.SRC +" is not authorized to access URL:" + HTTP.REQ.URL.HTTP_URL_SAFE"

Which three components does an administrator have to configure in order to establish a basic content switching setup? (Choose three.)

A. GSLB sites

B. SSL Offload

C. ADNS services

D. Rule or URL-based policies

E. Load balancing virtual server

F. Content switching virtual server

An administrator wants to configure the virtual server and services so that existing connections stay open when a service is marked down but NOT when a virtual server is marked down.

How must the administrator configure the service and virtual server to reflect this dependency?

A. set lb vserver lbv1 -downStateFlush ENABLED set service svc1 -downStateFlush ENABLED

B. set lb vserver lbv1 -downStateFlush DISABLED set service svc1 -downStateFlush ENABLED

C. set lb vserver lbv1 -downStateFlush ENABLED set service svc 1 -downStateFlush DISABLED

D. set lb vserver lbv1 -downStateFlush DISABLED set service svc1 -downStateFlush DISABLED

An administrator needs to configure a monitor to track the health of an IMAP service configured on a

NetScaler system.

Which type of monitor must the administrator configure to track the health of this entity?

A. Load

B. User

C. Inline

D. Server Application State Protocol (SASP)

Scenario: An administrator needs to configure load balancing for a web farm so that traffic will NOT be dropped when the virtual server is marked down. Route Health Injection (RHI) and GSLB are NOT configured in this environment.

The administrator can configure ___________ or ____________ so that it will receive traffic when the virtual server is marked down. (Choose the two options that correctly complete the sentence.)

A. a redirect URL string

B. another NetScaler system

C. the name of a backup virtual server

D. the node ID of the secondary in the HA pair

Scenario: An administrator introduced two new servers into a server farm; the servers can handle more traffic than the older servers. The current load balancing method set for the virtual server managing the traffic for this group of servers is least connections. The administrator wants to maintain that load balancing method but also wants to use the new servers to improve performance by sending more traffic to them than to the older servers.

Which advanced option must the administrator configure to achieve this?

A. Max Client

B. Service Weights

C. Backup virtual server

D. Global Setting Override

E. Connection-based Spillover

Scenario: An administrator needs to satisfy the following conditions:

-The traffic should be encrypted end-to-end

-

There is no certificate configured on the virtual server

Which type of virtual server should the administrator configure on the NetScaler?

A.

SSL

B.

TCP

C.

HTTP

D.

SSL_TCP

E.

SSL_BRIDGE

When leveraging the Dashboard, which information would indicate to an administrator that server performance has been improved after enabling caching in a network environment?

A. Client connection count increases

B. Server-side request rate increases

C. Client connection count decreases

D. Server-side request rate decreases

Which type of SNMP trap would allow for an administrator to specify a minimum level of severity of events?

A. Public

B. Private

C. Generic

D. Specific

An administrator set up a NetScaler pair in HA but noticed that the secondary node status is showing as DOWN.

Which two configurations should be made on the secondary node to bring the node status to UP in HA, according to best practices? (Choose two.)

A. Disable unused interfaces.

B. Disable HAMON on disabled interfaces.

C. Configure nsroot password to be identical for both nodes.

D. Configure RPC node password to be identical for both nodes.

Scenario: A network administrator working with two NetScaler systems has encountered an issue with HA. The administrator notices that HA synchronization is failing. The administrator has already run the command on both nodes but needs more information.

Which two additional steps should the administrator take to collect the appropriate data in order to troubleshoot this issue? (Choose two.)

A. Collect the files in /var/core.

B. Collect the files in /var/log/auth.log.

C. Run show techsupport from both NetScalers.

D. Run /netscaler/nstrace.sh -sz 0 to gather an nstrace.