Scenario: A Citrix Architect needs to configure a full VPN session profile to meet the following
Users should be able to send the traffic only for the allowed networks through the VPN tunnel.
Only the DNS requests ending with the configured DNS suffix workspacelab.com must be sent to
If the DNS query does NOT contain a domain name, then DNS requests must be sent to NetScaler
Which settings will meet these requirements?
A Citrix Architect needs to define the architect and operational processes required to implement and
maintain the production environment.
In which phase of the Citrix Methodology will the architect define this?
Scenario: A Citrix Architect needs to assess an existing NetScaler configuration. The customer
recently found that members of certain administrator groups were receiving permissions on the
production NetScaler appliances that do NOT align with the designed security requirements.
Click the Exhibit button to view the configured command policies for the production NetScaler
To align the command policy configuration with the security requirements of the organization, the
_______ for ______should change. (Choose the correct option to complete the sentence.)
Which four load-balancing methods support NetScaler Virtual Server-Level Slow Start? (Choose four.)
Scenario: A Citrix Architect needs to deploy a NetScaler appliance for Workspacelab, which will
provide application load balancing services to Partnerlab and Vendorlab.
The setup requirements are as follows:
A pair of NetScaler MPX appliances will be deployed in the DMZ network.
High availability will be accessible on the NetScaler MPX in the DMZ Network.
Load balancing should be performed for the mail servers for Partnerlab and Vendorlab.
The traffic for both of the organizations must be isolated.
Separate Management accounts must be available for each client.
The load-balancing IP addresses must be identical.
A separate VLAN must be utilized for communication for each client.
Which solution can the architect utilize to meet the requirements?
Scenario: A Citrix Architect is asked by management at the Workslab organization to review their
existing configuration and make the necessary upgrades. The architect recommends small changes to
the pre-existing NetScaler configuration. Currently, the NetScaler MPX devices are configured in a
high availability pair, and the outbound traffic is load-balanced between two Internet service
providers 9ISPs). However, the failover is NOT happening correctly.
The following requirements were discussed during the design requirements phase:
The return traffic for a specific flow should be routed through the same path while using Link Load
The link should fail over if the ISP router is up and intermediary devices to an ISP router are down.
Traffic going through one ISP router should fail over to the secondary ISP, and the traffic should NOT
flow through both routers simultaneously.
What should the architect configure with Link Load balancing (LLB) to meet this requirement?
Scenario: A Citrix Architect needs to design a new NetScaler Gateway deployment to provide secure
RDP access to backend Windows machines.
Click the Exhibit button to view additional requirements collected by the architect during the design
To meet the customer requirements, the architect should deploy the RDP proxy through _______,
using a _________ solution. (Choose the correct option to complete the sentence.)
Which two NetScaler cookies indicate the validity of the Authentication, Authorization and
Accounting (AAA) session for users? (Choose two.)
Scenario: A Citrix Architect needs to design a new NetScaler Gateway deployment for a customer.
During the design discussions, the architect learns that the customer would like to allow external
RDP connections to internal Windows machines but does NOT want client drive redirection enabled
on these connections.
Where should the architect enable the options to allow the customer to complete their
Which NetScaler Management and Analytics System (NMAS) utility can a Citrix Architect utilize to
verify the configuration template created by the NMAS StyleBook, before actually executing it on the
Scenario: A Citrix Architect has deployed two MPX devices, 220.127.116.11 nc and MPX 11500 models, in
high availability (HA) pair for the Workspace labs team. The deployment method is two-arm and the
devices are installed behind a CISCO ASA 5585 Firewall. The architect enabled the following features
on the NetScaler devices. Content Switching, SSL Offloading, Load Balancing, NetScaler Gateway,
Application Firewall in hybrid security and Appflow. All are enabled to send monitoring information
to NMAS 18.104.22.168 nc build. The architect is preparing to configure load balancing for Microsoft
Exchange 2016 server.
The following requirements were discussed during the implementation:
All traffic needs to be segregated based on applications, and the fewest number of IP addresses
should be utilized during the configuration
All traffic should be secured and any traffic coming into HTTP should be redirected to HTTPS.
Single Sign-on should be created for Microsoft Outlook web access (OWA).
NetScaler should recognize Uniform Resource Identifier (URl) and close the session to NetScaler
when users hit the Logoff button in Microsoft Outlook web access.
Users should be able to authenticate using either user principal name (UPN) or sAMAccountName.
The Layer 7 monitor should be configured to monitor the Microsoft Outlook web access servers and
the monitor probes must be sent on SSL
Which monitor will meet these requirements?
Which session parameter does the default authorization setting control when authentication,
authorization, and auditing profiles are configured?
Which two features are supported on LbaaSV1? (Choose two.)
Scenario: A Citrix Architect needs to design a hybrid XenApp and XenDesktop environment which will
include as well as resource locations in an on-premises datacenter and Microsoft Azure.
Organizational details and requirements are as follows:
Active XenApp and XenDesktop Service subscription
No existing NetScaler deployment
Minimization of additional costs
All users should correct directly to the resource locations containing the servers which will host HDX
Click the Exhibit button to view the conceptual environment architecture.
The architect should use___________ in Location A, and should use _______________ in Location B.
(Choose the correct option to complete the sentence.)
Scenario: More than 10,000 users will access a customers environment. The current networking
infrastructure is capable of supporting the entire workforce of users. However, the number of
support staff is limited, and management needs to ensure that they are capable of supporting the
full user base.
Which business driver is prioritized, based on the customers requirements?