Question 71
Scenario: A Citrix Architect is asked by management at the Workslab organization to review their existing configuration and make the necessary upgrades. The architect recommends small changes to the pre-existing NetScaler configuration. Currently, the NetScaler MPX devices are configured in a high availability pair, and the outbound traffic is load-balanced between two Internet service providers 9ISPs). However, the failover is NOT happening correctly.
The following requirements were discussed during the design requirements phase:
* The return traffic for a specific flow should be routed through the same path while using Link Load Balancing.
* The link should fail over if the ISP router is up and intermediary devices to an ISP router are down.
* Traffic going through one ISP router should fail over to the secondary ISP, and the traffic should NOT flow through both routers simultaneously.
What should the architect configure with Link Load balancing (LLB) to meet this requirement?
The following requirements were discussed during the design requirements phase:
* The return traffic for a specific flow should be routed through the same path while using Link Load Balancing.
* The link should fail over if the ISP router is up and intermediary devices to an ISP router are down.
* Traffic going through one ISP router should fail over to the secondary ISP, and the traffic should NOT flow through both routers simultaneously.
What should the architect configure with Link Load balancing (LLB) to meet this requirement?
Question 72
Scenario: A Citrix Architect needs to deploy Single Sign-on form-based authentication through Citrix ADC for Outlook Web Access (OWA) 2013 for the users of the domain workspacelab com The Single Sign-on (SSO) must be performed based on sAMAccountName.
Which SSO action can the architect use to meet this requirement?
Which SSO action can the architect use to meet this requirement?
Question 73
Scenario: A Citrix Architect has deployed two MPX devices. 12.0.53.13 nc and MPX 11500 models, in a high availability (HA) pair for the Workspace labs team. The deployment method is two-arm and the devices are installed behind a CISCO ASA 5585 Firewall. The architect enabled the following features on the Citrix ADC devices. Content Switching. SSL Offloading, Load Balancing, Citrix Gateway. Application Firewall in hybrid security and Appflow. All are enabled to send monitoring information to Citrix Application Delivery Management 12.0.53.13 nc build. The architect is preparing to configure load balancing for Microsoft Exchange 2016 server.
The following requirements were discussed during the implementation:
* All traffic needs to be segregated based on applications, and the fewest number of IP addresses should be utilized during the configuration.
* All traffic should be secured and any traffic coming Into FITTP should be redirected to HTTPS.
* Single Sign-on should be created for Microsoft Outlook web access (OWA).
* Citrix ADC should recognize Uniform Resource Identifier (URI) and close the session to Citrix ADC when users hit the Logoff button In Microsoft Outlook web access.
* Users should be able to authenticate using either user principal name (UPN) or sAMAccountName.
* The Layer 7 monitor should be configured to monitor the Microsoft Outlook web access servers and the monitor probes must be sent on SSL.
Which monitor will meet these requirements?
The following requirements were discussed during the implementation:
* All traffic needs to be segregated based on applications, and the fewest number of IP addresses should be utilized during the configuration.
* All traffic should be secured and any traffic coming Into FITTP should be redirected to HTTPS.
* Single Sign-on should be created for Microsoft Outlook web access (OWA).
* Citrix ADC should recognize Uniform Resource Identifier (URI) and close the session to Citrix ADC when users hit the Logoff button In Microsoft Outlook web access.
* Users should be able to authenticate using either user principal name (UPN) or sAMAccountName.
* The Layer 7 monitor should be configured to monitor the Microsoft Outlook web access servers and the monitor probes must be sent on SSL.
Which monitor will meet these requirements?
Question 74
Scenario: A Citrix Architect needs to design a hybrid XenApp and XenDesktop environment which will include Citrix Cloud as well as resource locations in an on-premises datacenter and Microsoft Azure.
Organizational details and requirements are as follows:
* Active XenApp and XenDesktop Service subscription
* No existing NetScaler deployment
* Global Server Load Balancing is used to direct connection requests to Location B, if the StoreFront server in Location B fails, connections should be directed to Location A.
Click the Exhibit button to view the conceptual environment architecture.

The architect should use _____ in Location A, and should use ________ in Location B. (Choose the correct option to complete the sentence.)
Organizational details and requirements are as follows:
* Active XenApp and XenDesktop Service subscription
* No existing NetScaler deployment
* Global Server Load Balancing is used to direct connection requests to Location B, if the StoreFront server in Location B fails, connections should be directed to Location A.
Click the Exhibit button to view the conceptual environment architecture.

The architect should use _____ in Location A, and should use ________ in Location B. (Choose the correct option to complete the sentence.)
Question 75
Scenario: Based on a discussion between a Citrix Architect and team of Workspacelab has been created across three (3) sites.
They captured the following requirements during the design discussion held for NetScaler design projects:
* All three (3) Workspacelab sites (DC, NDR, and DR) will have similar NetScaler configuration and design.
* Both external and internal NetScaler MPX appliances will have Global Server Load balancing (GSLB) configured and deployed in Active/Passive mode.
* GSLB should resolve both A and AAA DNS queries.
* In the GSLB deployment, the NDR site will act as backup for the DC site. whereas the DR site will act as backup for the NDR site.
* When the external NetScaler replies to DNS traffic coming in through Cisco Firepower IPS, the replies should be sent back through the same path.
* On the internal NetScaler, both front-end VIP and back-end SNIP will be part of the same subnet.
* USIP is configured on the DMZ NetScaler appliances.
* The external NetScaler will act default gateway for back-end servers.
* All three (3) sites (DC, NDR, and DR) will have two (2) links to the Internet from different service providers configured in Active/Standby mode.
Which design decision must the architect make to meet the design requirements above?
They captured the following requirements during the design discussion held for NetScaler design projects:
* All three (3) Workspacelab sites (DC, NDR, and DR) will have similar NetScaler configuration and design.
* Both external and internal NetScaler MPX appliances will have Global Server Load balancing (GSLB) configured and deployed in Active/Passive mode.
* GSLB should resolve both A and AAA DNS queries.
* In the GSLB deployment, the NDR site will act as backup for the DC site. whereas the DR site will act as backup for the NDR site.
* When the external NetScaler replies to DNS traffic coming in through Cisco Firepower IPS, the replies should be sent back through the same path.
* On the internal NetScaler, both front-end VIP and back-end SNIP will be part of the same subnet.
* USIP is configured on the DMZ NetScaler appliances.
* The external NetScaler will act default gateway for back-end servers.
* All three (3) sites (DC, NDR, and DR) will have two (2) links to the Internet from different service providers configured in Active/Standby mode.
Which design decision must the architect make to meet the design requirements above?