NO.71 Scenario: A Citrix Architect has deployed an authentication setup for the load balancing virtual server for the SAP application. The authentication is being performed using RADIUS and LDAP. RADIUS is the first factor, and LDAP is the second factor in the authentication. The Single Sign-on with SAP application should be performed using LDAP credentials. Which session profile should be used to perform the Single Sign-on?

NO.72 A Citrix Architect needs to configure advanced features of Citrix ADC by using StyleBooks as a resource in the Heat service.
What is the correct sequence of tasks to be completed for configuring Citrix ADC using the Heat stack?

NO.73 Scenario: A Citrix Architect and a team of Workspacelab members met to discuss a Citrix ADC design project. They captured the following requirements from this design discussion:
* All three (3) Workspacelab sites (DC, NOR, and DR) will have similar Citrix ADC configurations and design.
* The external Citrix ADC MPX1 appliances will have Global Server Load Balancing (GSLB) configured and deployed in Active/Active mode.
* ADNS service should be configured on the Citrix ADC to make it authoritative for domain nsg.workspacelab.com * In GSLB deployment, the DNS resolution should be performed to connect the user to the site with least network latency.
* On the internal Citrix ADC, load balancing for StoreFront services, Citrix XML services, and Citrix Director services must be configured.
* On the external Citrix ADC, the Gateway virtual server must be configured in ICA proxy mode.
Click the Exhibit button to view the logical representation of the network.

On which firewall should the architect configure the access policy to permit the MEP communication between the sites?

NO.74 Scenario: A Citrix Architect has configured two MPX devices in high availability mode with version
12.0.53.13 nc. After a discussion with the security team, the architect enabled the Application Firewall feature for additional protection.
In the initial deployment phase, the following security features were enabled:
* IP address reputation
* HTML SQL injection check
* Start URL
* HTML Cross-site scripting
* Form-field consistency
After deployment in pre-production, the team identifies the following additional security features and changes as further requirements:
* Application Firewall should retain the response of form field in its memory When a client submits the form in the next request. Application Firewall should check for inconsistency in the request before sending it to the web server
* All the requests dropped by Application Firewall should receive a pre-configured HTML error page with appropriate information.
* The Application Firewall profile should be able to handle the data from the RSS feed and an ATOM-based site.
Click the Exhibit button to view an excerpt of the existing configuration.

What should the architect do to meet these requirements?

NO.75 Which three tasks can a Citrix Architect select and schedule using the Citrix ADC maintenance tasks?
(Choose three.)

NO.76 A Citrix Architect needs to make sure that maximum concurrent AAA user sessions are limited to 4000 as a security restriction.
Which authentication setting can the architect utilize to view the current configuration?

NO.77 A Citrix Architect has deployed Citrix Application Delivery Management to monitor a high availability pair of Citrix ADC VPX devices.
The architect needs to deploy automated configuration backup to meet the following requirements:
* The configuration backup file must be protected using a password.
* The configuration backup must be performed each day at 8:00 AM GMT.
* The configuration backup must also be performed if any changes are made in the ns.conf file.
* Once the transfer is successful, auto-delete the configuration file from the NMAS.
Which SNMP trap will trigger the configuration file backup?

NO.78 Scenario: A Citrix Architect needs to assess an existing on-premises NetScaler deployment which includes Advanced Endpoint Analysis scans. During a previous security audit, the team discovered that certain endpoint devices were able to perform unauthorized actions despite NOT meeting pre-established criteria.
The issue was isolated to several endpoint analysis (EPA) scan settings.
Click the Exhibit button to view the endpoint security requirements and configured EPA policy settings.

Which setting is preventing the security requirements of the organization from being met?

NO.79 Scenario: A Citrix Architect has deployed Authentication for the SharePoint server through NetScaler. In order to ensure that users are able to edit or upload documents, the architect has configured persistent cookies on the NetScaler profile.
Which action should the architect take to ensure that cookies are shared between the browser and non- browser applications?

NO.80 A Citrix Architect needs to configure advanced features of NetScaler by using StyleBooks as a resource in the Heat service.
What is the correct sequence of tasks to be completed for configuring NetScaler using the Heat stack?

NO.81 Scenario: A Citrix Architect needs to configure a Content Switching virtual server to provide access to www.workspacelab.com. However, the architect observes that whenever the user tries to access www.worksapcelab.com/CITRIX/WEB, the user receives a “503 – Service Unavailable” response. The configuration snippet is as follows:

What should the architect modify to resolve this issue?

NO.82 Which two parameters must a Citrix Architect specify in the configuration job to replicate a specific configuration snippet from one Crtnx ADC instance to multiple instances? (Choose two.)

NO.83 Scenario: Based on a discussion between a Citrix Architect and team of Workspacelab has been created across three (3) sites.
They captured the following requirements during the design discussion held for NetScaler design projects:
* All three (3) Workspacelab sites (DC, NDR, and DR) will have similar NetScaler configuration and design.
* Both external and internal NetScaler MPX appliances will have Global Server Load balancing (GSLB) configured and deployed in Active/Passive mode.
* GSLB should resolve both A and AAA DNS queries.
* In the GSLB deployment, the NDR site will act as backup for the DC site. whereas the DR site will act as backup for the NDR site.
* When the external NetScaler replies to DNS traffic coming in through Cisco Firepower IPS, the replies
* should be sent back through the same path.
* On the internal NetScaler, both front-end VIP and back-end SNIP will be part of the same subnet.
* USIP is configured on the DMZ NetScaler appliances.
* The external NetScaler will act default gateway for back-end servers.
* All three (3) sites (DC, NDR, and DR) will have two (2) links to the Internet from different service providers configured in Active/Standby mode.
Which design decision must the architect make to meet the design requirements above?

NO.84 Scenario: A Citrix Architect needs to design a NetScaler deployment in Microsoft Azure. An Active-Passive NetScaler VPX pair will provide load balancing for three distinct web applications. The architect has identified the following requirements:
* Minimize deployment costs where possible.
* Provide dedicated bandwidth for each web application.
* Provide a different public IP address for each web application.
For this deployment, the architect should configure each NetScaler VPX machine to have ______ network interface(s) and configure IP address by using ________. (Choose the correct option to complete the sentence).

NO.85 Scenario: A Citrix Architect needs to assess an existing on-premises NetScaler deployment which includes Advanced Endpoint Analysis scans. During a previous security audit, the team discovered that certain endpoint devices were able to perform unauthorized actions despite NOT meeting pre-established criteria.
The issue was isolated to several endpoint analysis (EPA) scan settings.
Click the Exhibit button to view the endpoint security requirements and configured EPA policy settings.

Which setting is preventing the security requirements of the organization from being met?

NO.86 Scenario: A Citrix Architect and a team of Workspacelab members met to discuss a NetScaler design project.
They captured the following requirements from this design discussion:
* A pair of NetScaler MPX appliances will be deployed in the DMZ network.
* High Availability will be accessible in the NetScaler MPX in the DMZ Network.
* Load balancing should be performed for the internal network services like Microsoft Exchange Client Access Services and Microsoft App-V.
* The load balancing should be performed for StoreFront.
* The NetScaler Gateway virtual server will be utilizing the StoreFront load-balancing virtual server.
* The NetScaler Gateway virtual server and StoreFront.
* The NetScaler Gateway virtual service and StoreFront and load-balancing services are publicly accessible.
* The traffic for internal and external services must be isolated.
Click the Exhibit button to review the logical network diagram.

Which two design decisions are incorrect based on these requirements? (Choose two.)