Citrix 1Y0-351 問題集

質問 1：
Scenario: An engineer has been hired to manage the content-switching configurations on the NetScaler. The user account for this engineer must have the standard rules that apply to the other administrators.
What should the engineer do to allow for the extra privileges?
A. Unbind the current Command Policy of the user account and then save the changes.
B. Modify the current Command Policy and then save the changes.
C. Create a custom Command Policy and bind it to the user account with the highest priority.
D. Remove the custom Command Policy and then create one with the new requirements.
正解：C

質問 2：
Scenario: An engineer has three subnets configured on a NetScaler appliance. The engineer must only allow a certain group of users to access a virtual server on the appliance. The IT Manager requires that all rules are flexible and can be easily modified for ease of administration.
How could the engineer allow certain groups to access the virtual server while still being able to modify the setting in the future?
A. Add a Host Route to the virtual server.
B. Create an Extended ACL.
C. Add a Simple ACL.
D. Disable USNIP Mode.
正解：B

質問 3：
A network engineer wants to hide the IP address of the outgoing packets by changing it to the IP of the VIP.
Which feature should the administrator use?
A. PBR
B. Rewrite
C. RNAT
D. ACL
正解：C

質問 4：
Scenario: A website that provides hotel bookings lists each hotel through their membership number on the site URL. For example, the Martello Tower member ID is 6754 and its web presence is at http://www.hoteltestwebsite.com/hotels/6754/index.html.
There are 20,000 hotels in the database of the website. The website business owner no longer wants to display the hotel sites for hotel numbers 1-10000, inclusive. A NetScaler Engineer must configure an appropriate responder page to indicate that these sites are unavailable.
Which expression will meet the requirements of the business owner?
A. HTTP.REQ.URL.BEFORE_STR("index.html").TYPECAST_NUM_T(DECIMAL).BETWEEN
(0, 10000)
B. HTTP.REQ.URL.PATH.GET(1).TYPECAST_NUM_T(DECIMAL).GT(0) &&
HTTP.REQ.URL.PATH.GET(1).TYPECAST_NUM_T(DECIMAL).LT(10000)
C. HTTP.REQ.URL.AFTER_STR("hotels").TYPECAST_NUM_T(DECIMAL).BETWEEN(0,
10000)
D. HTTP.REQ.URL.PATH.GET(2).TYPECAST_NUM_T(DECIMAL).BETWEEN(0, 10000)
正解：D

質問 5：
The security department just conducted a penetration test on the published virtual servers and all of the SSL virtual servers returned the result "Allowed changing to weak certificate standard" in the report.
The reason for this result could be that the network engineer who configured the virtual servers forgot to __________. (Choose the correct option to complete the sentence.)
A. configure the DEFAULT Cipher group only
B. block TLSv1
C. configure the HIGH Cipher group only
D. apply the SSL policy
正解：C

質問 6：
A NetScaler Engineer created an SSL virtual server but the status is showing as state DOWN.
What could be causing the virtual server to show as state DOWN?
A. The SSL certificate is NOT bound to the virtual server.
B. The virtual server is configured for port 444.
C. The certificate bound to the virtual server has a private key of 512-bits.
D. HTTP services are used instead of HTTPS services.
正解：A