Scenario: An administrator configured an LDAP authentication policy and bound it globally. The only system group configured on the Netscaler is NS Admins. After reviewing the security logs, the administrator notices that users in the External Contractors LDAP group are able to log on to NetScaler using SSH; however, members of the External Contractors group are NOT authorized to run any commands. Which action could the administrator take to prevent the members of the External Contractors LDAP Group from logging on to NetScaler using SSH without affecting other users?

A. Configure an authorization policy that allows logon only by members of the IExternal ContractorsI LDAP Group. Bind the new policy globally.

B. Specify (memberOf=ICN=External Contractors, CN=Groups, CN=example, CN=comI) as a filter in the properties of the configured LDAP server.

C. Specify(!(memberOf=ICN=External Contractors, CN=Groups, CN=example, CN=comI)) asa filterinthe properties of the configured LDAP server.

D. Create a new command policy with a DENY action. Create a System Group named IExternal ContractorsI and assign the new command policy to the External Contractors group.

Scenario: An administrator plans to implement NetScaler to load balance Web Interface traffic. The Web Interface servers are using standard non-secure ports. Company policy states that all external traffic must be secure. The administrator has added the servers for the Web Interface under Load Balancing. In order to load balance the Web Interface traffic and comply with company policy, the administrator should add services for and create an . (Choose the correct set of options to complete the sentence.)

A. SSL; SSL virtual server

B. SSL; HTTP virtual server

C. HTTP; SSL virtual server

D. HTTP; HTTP virtual server

Scenario: An administrator configured a AAA virtual server. The AAA virtual server is NOT yet bound to a

traffic management virtual server.

Which two virtual servers could the administrator configure as traffic management virtual servers? (Choose

two.)

A. GSLB

B. Load balancing

C. Content switching

D. NetScaler Gateway

A Citrix Administrator is configuring the NetScaler Gateway to allow access to XenApp and XenDesktop

sessions.

Which two ports should the administrator open on the firewall for ICA traffic to flow from the NetScaler

Gateway to all Citrix XenApp or XenDesktop sessions? (Choose two.)

A. 389

B. 636

C. 1494

D. 1812

E. 2598

Scenario: A Citrix Administrator configured the following preauthentication policies for NetScaler Gateway. Priority 20 Policy2 bound to virtual server Priority 10 Policy1 bound to AAA Global Priority 10 Policy3 bound to virtual server Priority 20 Policy4 bound to AAA Global

In which order are the policies applied?

A. Policy2, Policy3, Policy1, Policy4

B. Policy1, Policy2, Policy3, Policy4

C. Policy4, Policy2, Policy1, Policy3

D. Policy3, Policy1, Policy4, Policy2