1Y0-253 PDF Download
Question: 1
Which two tasks must a Citrix Administrator complete to enable Client Certificate Authentication on the NetScaler Gateway? (Choose two.)
A. Create a pre-authentication policy.
B. Create an LDAP authentication policy.
C. Import the root certificate onto the NetScaler Gateway.
D. Import all client certificates onto the NetScaler Gateway.
E. Enable the Client Authentication option on the virtual server.
Answer: CE
Question: 2
Which two default key formats of SSL certificates could be installed by the NetScaler system? (Choose two.)
A. PFX
B. P7B
C. PEM
D. DER
Answer: CD
Question: 3
What is required to configure a NetScaler Gateway cluster?
A. Striped IP addresses
B. Strict option is enabled
C. Sticky option is enabled
D. Enterprise or Platinum license
Answer: C
Question: 4
Scenario: A Citrix Administrator is upgrading a high availability pair to
NetScaler 10.5. After upgrading the secondary appliance, the administrator
forces a failover to test the new firmware, but the show ha node command
shows the sync state and propagation as disabled.
Why are the settings showing as disabled?
A. The appliances did NOT properly failover.
B. The NSIPs are no longer able to communicate.
C. The settings are automatically disabled until the other appliance is upgraded.
D. The upgrade process failed to run to completion on the secondary appliance.
Answer: C
Question: 5
An administrator created a service for a Web Interface server that is encrypted by an SSL certificate.
Which command should the administrator run at the command-line interface to create a monitor that will check the Web Interface by logging on to it with a test user's credentials?
A. add lb monitor mon-WebInterface CITRIX-WI-EXTENDED -sitePath "/Citrix/XenApp" -userName user -domain DomainName -password P@ssw0rd -encrypted
B. add lb monitor mon-WebInterface CITRIX-WI-EXTENDED -sitePath "/Citrix/XenApp" -userName user -domain DomainName -password P@ssw0rd -secure YES
C. add lb monitor mon-WebInterface CITRIX-WI-EXTENDED -sitePath "/Citrix/XenApp" -userName user -domain DomainName -password P@ssw0rd -destPort 443
D. add lb monitor mon-WebInterface CITRIX-WI-EXTENDED -sitePath "/Citrix/XenApp" -userName user -domain DomainName -password P@ssw0rd -encrypted -secure YES
Answer: B
Question: 6
Scenario: An administrator configured a NetScaler Gateway session policy named spol_ICAP. The administrator needs to bind the policy to ensure that it is evaluated only when users of the ICAP security group log on to the NetScaler Gateway virtual server named vsrv_AGEE.
Which command should the administrator run at the command-line interface to meet the needs of the scenario?
A. bind vpnvservervsrv_AGEE ICAP
B. bind aaa group ICAP -policy spol_ICAP
C. bind aaa group ICAP -policy spol_ICAP -global OFF
D. bind vpnvservervsrv_AGEE -policy spol_ICAP -priority 1
Answer: B
Question: 7
An administrator plans to use only Citrix Receiver for XenDesktop remote access through a NetScaler Gateway device.
Which type of policy should the administrator configure to meet this requirement?
A. Session
B. Authentication
C. Clientless access
D. Pre-authentication
Answer: A
Question: 8
Which configuration option should an administrator select to pass users' credentials to a file share in a NetScaler Gateway environment?
A. Local LAN-Access
B. Single sign-on to a domain
C. Single sign-on with Windows
D. Single sign-on to Web applications
Answer: C
Question: 9
Scenario: An administrator has an existing SSL certificate that is installed and used on a Microsoft Windows IIS server. The administrator exported the certificate, including the private key, to a PFX file and now wants to use that certificate for SSL Offloading on NetScaler.
Which two methods could the administrator use to import the certificate on NetScaler? (Choose two.)
A. Import PKCS#12.
B. Change advanced SSL settings.
C. Use the Server Certificate Wizard.
D. Convert the certificate to PEM format.
Answer: A, D
Question: 10
An administrator needs to install a certificate from the NetScaler onto a Microsoft Windows IIS server.
Which action should the administrator complete before the certificate can be imported on the IIS server?
A. Select Export PKCS#12 and copy the file to Windows.
B. Copy the certificate file from /nsconfig/ssl to Windows.
C. Copy the certificate file and the key file from /nsconfig/ssl to Windows.
D. Manage Certificates / Keys / CSRs and download the certificate file to Windows.