Question 76
Scenario: While attempting to access web server that is load balanced by a Citrix ADC using HTTPS, a user receives the message below.
SSL/TLS error: You have not chosen to trust "Certificate Authority" the issuer of the server's security certificate.
What can a Citrix Administrator do to prevent users from viewing this message?
SSL/TLS error: You have not chosen to trust "Certificate Authority" the issuer of the server's security certificate.
What can a Citrix Administrator do to prevent users from viewing this message?
Question 77
Scenario: A Citrix Administrator created an SSL virtual server using only the commands below:
> add lb vServer sslvserver SSL 10.102.29.133 444
> add service sslsvcl 192.168.0.14 SSL 443
> add service sslsvc2 192.168.0.15 SSL 443
> bind lb vServer sslvserver sslsvcl
> bind lb vServer sslvserver sslsvc2
> set ssl vServer sslvserver -ssl3 disabled
The SSL virtual server is currently in a DOWN state.
What could be the reason the SSL virtual server is in a DOWN state?
> add lb vServer sslvserver SSL 10.102.29.133 444
> add service sslsvcl 192.168.0.14 SSL 443
> add service sslsvc2 192.168.0.15 SSL 443
> bind lb vServer sslvserver sslsvcl
> bind lb vServer sslvserver sslsvc2
> set ssl vServer sslvserver -ssl3 disabled
The SSL virtual server is currently in a DOWN state.
What could be the reason the SSL virtual server is in a DOWN state?
Question 78
Scenario: A Citrix Administrator manages a Citrix SDX appliance with several instances configured. The administrator needs to enable Layer 2 mode on two instances.
When using a shared network interface, what must the administrator do to ensure that traffic flows correctly?
When using a shared network interface, what must the administrator do to ensure that traffic flows correctly?
Question 79
Scenario: The primary content switching vServer has gone down. To troubleshoot, a Citrix Administrator has issued the following command:
> show csvserver CSV
CSV (10.1.100.100:443) - HTTPS Type: CONTENT
State: UP
Last state change was at Mon Jun 29 15:20:43 2020
Time since last state change: 1 day, 06:47:58 610
Client Idle Timeout: 180 sec
Down state flush: ENABLED
Disable Primary vServer On Down: DISABLED
Appflow logging: ENABLED
Port Rewrite: DISABLED
State Update: DISABLED
Default: Content Precedence: URL
vServer IP and Port insertion: OFF
Persistence:
NONE redirect: http://www.site1.com/mysite1/maintenance
Backup: vServer-LB-2
Listen Policy: NONE
IcmpResponse: PASSIVE
RHIstate: PASSIVE
Traffic Domain: 0
Based on this output, where will the subsequent request be redirected?
> show csvserver CSV
CSV (10.1.100.100:443) - HTTPS Type: CONTENT
State: UP
Last state change was at Mon Jun 29 15:20:43 2020
Time since last state change: 1 day, 06:47:58 610
Client Idle Timeout: 180 sec
Down state flush: ENABLED
Disable Primary vServer On Down: DISABLED
Appflow logging: ENABLED
Port Rewrite: DISABLED
State Update: DISABLED
Default: Content Precedence: URL
vServer IP and Port insertion: OFF
Persistence:
NONE redirect: http://www.site1.com/mysite1/maintenance
Backup: vServer-LB-2
Listen Policy: NONE
IcmpResponse: PASSIVE
RHIstate: PASSIVE
Traffic Domain: 0
Based on this output, where will the subsequent request be redirected?
Question 80
Scenario: A Citrix Administrator observes that when the client gets redirected to www.citrix.com/owa/search?q=username, an HTTP 503 response is received from the content switching vServer.
The relevant configuration is as follows:
> add cs action CS_Act_1 -targetLBVserver SERVER_1
> add cs action CS_Act_2 -targetLBVserver SERVER_2
> add cs action CS_Act_3 -targetLBVserver SERVER_3
> add cs action CS_Act_4 -targetLBVserver SERVER_4
> add cs policy CS_Pol_1 -rule "http.REQ.URL path_and_queryCONTAINS(\"connect\")" -action CS_Act_1
> add cs policy CS_Pol_2 -rule "http.REQ.URL path_and_query EQ(\"owa\")" -action CS_Act_2
> add cs policy CS_Pol_3 -rule "http REQ.URL path_and_query CONTAINS(\"owa\")" -action CS_Act_3
> add cs policy CS_Pol_4 -rule "http.REQ.IS_VALID" -action CS_Act_4
> bind cs vServer CS_vserver1 -policyName CS_Pol_1 -priority 110
> bind cs vServer CS_vserver1 -policyName CS_Pol_4 -priority 120
How can the administrator correct the issue?
The relevant configuration is as follows:
> add cs action CS_Act_1 -targetLBVserver SERVER_1
> add cs action CS_Act_2 -targetLBVserver SERVER_2
> add cs action CS_Act_3 -targetLBVserver SERVER_3
> add cs action CS_Act_4 -targetLBVserver SERVER_4
> add cs policy CS_Pol_1 -rule "http.REQ.URL path_and_queryCONTAINS(\"connect\")" -action CS_Act_1
> add cs policy CS_Pol_2 -rule "http.REQ.URL path_and_query EQ(\"owa\")" -action CS_Act_2
> add cs policy CS_Pol_3 -rule "http REQ.URL path_and_query CONTAINS(\"owa\")" -action CS_Act_3
> add cs policy CS_Pol_4 -rule "http.REQ.IS_VALID" -action CS_Act_4
> bind cs vServer CS_vserver1 -policyName CS_Pol_1 -priority 110
> bind cs vServer CS_vserver1 -policyName CS_Pol_4 -priority 120
How can the administrator correct the issue?
