Server Name Indication (SNI) is required when __________. (Choose the correct option to complete the sentence.)
A. TLS 1.1/1.2 is enabled exclusively
B. a SAN extension certificate is used
C. multiple certificates are used on multiple domains on the same VServer
D. configuring a content switching SSL VServer with a single domain certificate
Which two encryption algorithms are supported on the NetScaler to store the encrypted SSL private key with a password? (Choose two.)
A. AES
B. RC4
C. DES
D. DES3
Which option needs to be set on the service in order to maintain the original client-IP to the backend service?
A. -cka yes
B. -usip yes
C. -cip disabled
D. -useproxyport yes
When using static proximity load-balancing method for a Global Server Load Balancing (GSLB) virtual server, there must be a match between the IP addresses in the custom/static database to the IP address of the _________ so that it is associated with a given location. (Choose the correct option to complete the sentence.)
A. GSLB service
B. ADNS service
C. Load-balancing server
D. Client local DNS (LDNS)
Scenario: A NetScaler Engineer has created a local account for a user according to the below
configuration:
add system user NSUser userpassword -timeout 900
add system group "NetScaler users" -timeout 900
add system cmdPolicy netscaler-users ALLOW
"(^man.*)|(^show\\s+(?!system)(?!configstatus)(?!ns ns\\.conf)(?!ns savedconfig)(?!ns runningConfig)(?
!gslb runningConfig)(?!audit messages)(?!techsupport).*)|(^stat.*)"
bind system group "NetScaler users" -userName NSUser
bind system group "NetScaler users" -policyName netscaler-users 100
The user is able to log on but is NOT able to execute certain commands. The engineer goes back and
looks at the logs, and the following is displayed:
Oct 6 13:34:15
CMD_EXECUTED 4303 0 : User NSUser - Remote_ip 192.168.10.10 - Command "show ns
runningConfig" - Status "ERROR: Not authorized to execute this command"
Why is the command NOT working for the user?
A. cmdPolicy is NOT configured to allow the command
B. cmdPolicy should be set to DENY, instead of ALLOW
C. The user should be bound to the cmdPolicy netscaler-users
D. The priority of the cmdPolicy bound to the group "NetScaler users" should be higher
What is the purpose of the flash cache option in integrated caching?
A. To completely wipe a cache group when the targeted selector is hit in the cache
B. To use the flash memory for storage for a specific cache group to improve performance
C. To queue simultaneous requests of an object and answer all with the same response from the server
D. To answer the client request without checking if the object has expired, objects are checked periodically instead
A NetScaler engineer would like to present different web pages to a user based on the device and browser type from which they are connecting.
Which responder policy could assist with this requirement?
A. HTTP.RES.URL.PATH
B. HTTP.REQ.Host("Host")
C. HTTP.RES.BODY(1024)
D. HTTP.REQ.HEADER("User-Agent")
The network engineer is investigating issues and suspects that one of the administrators recently changed the NetScaler configuration.
Which command could the engineer run to check the logs that will contain such details?
A. nsconmsg -K newnslog -d stats
B. nsconmsg -K newnslog -d stats -d current
C. nsconmsg -K /var/nslog/newnslog -d event
D. nsconmsg -K /var/nslog/newnslog -d consmsg
A NetScaler engineer generates a techsupport archive to be sent to Technical Support.
Which three of the following pieces of information will be included in the archive file? (Choose three.)
A. Model Number
B. SSL Private Keys
C. Old Configuration Files
D. Hardware Boot sequence
E. Webpage Customizations F. Certificate Revocation List
A NetScaler implementation is experiencing intermittent network issues, specifically regarding traffic to a back-end service associated with IP address 10.10.1.86.
Which command should a network engineer execute to generate diagnostic information to investigate this issue?
A. traceroute 10.10.1.86
B. show run | grep 10.10.1.86
C. nstcpdump.sh host 10.10.1.86
D. show service 10.10.1.86 -summary
