Updated Citrix 1Y0-350 PDF & VCE Free Download Now

Citrix NetScaler 10 Essentials and Networking: 1Y0-350 Exam
1Y0-350 Questions & Answers
Exam Code: 1Y0-350
Exam Name: Citrix NetScaler 10 Essentials and Networking
Q & A: 140 Q&As

Scenario: For security reasons, the NSIP needs to be configured to only be accessible on
interface 0/1, which is VLAN 300.
The NSIP address is and the subnet mask is
How would the network engineer achieve this configuration?
A. set ns config -nsvlan 300 -ifnum 0/1
B. set ns ip -gui ENABLED -vrID 300
C. add vlan 300
set ns ip -mgmtAccess ENABLED
D. set ns config -IPAddress -netmask
Answer: A

Why would an engineer want to specify a TCP Profile for a specific service group?
A. To enable use of features like SSL over TCP for that specific service group.
B. To adjust the TCP settings for traffic to and from that specific service group.
C. To use a specific SNIP for traffic to the back-end servers in that service group.
D. To enable features like use source IP, TCP keep alive and TCP buffering for a specific service group.
Answer: B

A network engineer wants to optimize a published load balanced SSL virtual server for WAN
connection with long delay, high bandwidth with minimal packet drops.
What would the network engineer use to do this type of optimization for the SSL virtual server?
A. SSL policy
B. TCP profile
C. Compression policy
D. Priority queuing policy
Answer: B

Scenario: The NetScaler is connected to two subnets. The NSIP is The external SNIP
is The MIP for internal access is Web servers, authentication servers and time
servers are on the network which is available through the router. The
external firewall has the address. Traffic bound for Internet clients should flow through
the external firewall.
Which command should be used to set the default route?
A. add route
B. add route
C. add route
D. add route
Answer: A

Some SSL certificate files may be missing from a NetScaler appliance.
Which directory should an engineer check to determine which files are missing?
A. /nsconfig/ssl
B. /nsconfig/ssh
C. flash/nsconfig/
D. /var/netscaler/ssl/
Answer: A

Scenario: An engineer has been hired to manage the content-switching configurations on the
NetScaler. The user account for this engineer must have the standard rules that apply to the
other administrators.
What should the engineer do to allow for the extra privileges?
A. Modify the current Command Policy and then save the changes.
B. Unbind the current Command Policy of the user account and then save the changes.
C. Remove the custom Command Policy and then create one with the new requirements.
D. Create a custom Command Policy and bind it to the user account with the highest priority.
Answer: D

A network engineer needs to configure smart card-based authentication on NetScaler Access
Which type of authentication policy could the engineer configure in order to accomplish this task?
A. Local
C. Certificate
D. Secure LDAP
Answer: C

Scenario: The network engineer has created a monitor and bound it to a service group containing
four web servers to verify that the web application responds. During routine maintenance one of
the web servers is shut down; however, the server state remains UP and user requests are still
attempting to communicate with the server.What could be causing this problem?
A. The server has been disabled.
B. The monitor is not bound at the correct bind point.
C. Health monitoring is disabled for the service group.
D. The NetScaler configuration has not been saved since before the monitor was bound.
Answer: C

Scenario: An engineer is configuring services to allow load balancing of backend web servers on
the internal network. The engineer bound multiple monitors to the first service, but notices that the
service is reporting as DOWN. The monitor threshold default has NOT been changed.
What could be causing this issue?
A. The service type is HTTP.
B. One of the monitors’ tests is failing.
C. Some of the monitors have a higher weight.
D. The monitors are both reporting an UP status.
Answer: B

What should a network engineer configure to set high availability for a load balanced virtual
A. Session persistence
B. A backup virtual server
C. Load balancing policies
D. Load balancing services
Answer: B

Scenario: A NetScaler engineer is adding a new SSL certificate to a NetScaler device. During the
process the engineer receives an error message:
"Certificate with key size greater than RSA512 or DSA512 bits not
The same process has been followed previously on the same model of NetScaler successfully.
What is the likely cause of this error?
A. The certificate hostname is invalid.
B. RSA authentication has been added to the VIP.
C. The NetScaler has not been licensed correctly.
D. The CSR has not been submitted to the certificate authority.
Answer: C

Scenario: A network engineer needs to generate a certificate on the NetScaler appliance. The
environment requires a private key with 4096-bit encryption.
To generate a new SSL certificate from a NetScaler Appliance, the engineer must first create
__________. (Choose the correct option to complete the sentence.)
B. DSA key
C. RSA key
D. Diffie-Hellman key
Answer: C

Scenario: An engineer has configured an SSL virtual server and has bound a service group of
type HTTP containing several servers. The service group is UP but the virtual server is in a
DOWN state. The engineer has verified that the SSL feature is enabled.
What should the engineer do to ensure that the virtual server shows as UP?
A. Add a monitor that checks for HTTP.
B. Change the service group to type SSL.
C. Bind an SSL certificate to the virtual server.
D. Configure the service group to use port 443.
E. Change the monitor for a larger time out period.
Answer: C

Users have reported that they are receiving a confusing error message related to SSL sessions
when connecting from older browsers.
How could the network engineer present this error to users in a customized format?
A. Enable the SSL v2 protocol.
B. Set a URL on the backup virtual server.
C. Add a redirect URL to the virtual server.
D. Configure SSL v2 Redirection for the virtual server.
Answer: D

…go to http://www.lead2pass.com/1y0-350.html to download the full version Q&As.