What is the effect of the “set cs vServer-CS-1 –redirectURL http://www.newdomain.com/mysite/” command?

1. A. If the vServer-CS-1 encounters a high connection rate, then users will be redirected to http://www.newdomain.com/mysite/.
2. B. If the status of vServer-CS-1 is DOWN, then users will be redirected to http://www.newdomain .com/mysite/.
3. C. All the requests to vServer-CS-1 will be redirected to http://www.newdomain.com/mysite/.
4. D. All the requests without URL path/mysite/ will be redirected to http://www.newdomain.com/mysite/.

Correct Answer: B

A Citrix Administrator needs to confirm that all client certificates presented to the authentication vServer are valid until the year 2023. Which expression can the administrator use to meet this requirement?

1. A. CLIENT.SSL.CLIENT_CERT.VALID_NOT_AFTER.EQ(GMT2023)
2. B. CLIENT.SSL.CLIENT_CERT.VALID_NOT_BEFORE.EQ(GMT2023)
3. C. CLIENT.SSL.ORIGIN_SERVER_CERT.VALID_NOT_AFTER.EQ(GMT2023)
4. D. CLIENT.SSL.CLIENT_CERT.DAYS_TO_EXPIRE.EQ(2023)

Correct Answer: A
Reference: https://docs.citrix.com/en-us/citrix-adc/current-release/ssl/ssl-actions-and-policies/config-built-in-ssl-actions.html

Scenario: A Citrix Administrator executed the command below in an active-active, global server load balancing (GSLB) setup. set gslb parameter –ldnsprobeOrder DNS PING TCP
The order to calculate the ______ for dynamic proximity will be the DNS UDP query followed by the ping and then TCP. (Choose the correct option to complete the sentence.)

1. A. Time to live (TTL)
2. B. Empty Domain Service (EDS)
3. C. Multiple IP responses (MIR)
4. D. Round-trip time (RTT)

Correct Answer: D
Reference: https://docs.citrix.com/en-us/citrix-adc/current-release/global-server-load-balancing/methods/dynamic-round-trip-time-method.html

Scenario: A Citrix Administrator suspects an attack on a load-balancing vServer (IP address 192.168.100.25). The administrator needs to restrict access to this vServer for 10 minutes. Which Access Control List (ACL) will accomplish this?

1. A. add simpleacl rule1 DENY –srcIP 192.168.100.25 –TTL 600000
2. B. add simpleacl rule1 DENY –srcIP 192.168.100.25 –TTL 600
3. C. add ns acl rule1 DENY –destIP 192.168.100.25 –TTL 600000
4. D. add ns acl rule1 DENY –destIP 192.168.100.25 –TTL 600

Correct Answer: D

Scenario: While attempting to access web server that is load balanced by a Citrix ADC using HTTPS, a user receives the message below. SSL/TLS error: You have not chosen to trust “Certificate Authority” the issuer of the server’s security certificate.
What can a Citrix Administrator do to prevent users from viewing this message?

1. A. Ensure that users have the certificate’s private key.
2. B. Ensure that users have the certificate’s public key.
3. C. Ensure that the server certificate is linked to its respective intermediate and root certificates.
4. D. Ensure that users have the server certificate installed.

Correct Answer: B
Reference: https://docs.citrix.com/en-us/citrix-gateway/12-1/citrix-gateway-12.1.pdf (80)