Scenario: A Citrix Architect holds a design discussion with a team of Workspacelab members, and they capture the following requirements for the Citrix ADC design project:
* A pair of Citrlx ADC MPX appliances will be deployed in the DMZ network and another pair in the internal network.
* High availability will be accessible between the pair of Citrix ADC MPX appliances in the DMZ network.
* Multi-factor authentication must be configured for the Citrix Gateway virtual server.
* The Citrix Gateway virtual server is integrated with the StoreFront server.
* Load balancing must be configured for the StoreFront server. *Authentication must be deployed for users from the workspacelab.com domain.
* The Workspacelab users should be authenticated using Cert Policy and LDAP.
* All the client certificates must be SHA 256-signed, 2048 bits, and have UserPrincipalName as the subject.
* Single Sign-on must be performed between StoreFront and Citrix Gateway. After deployment the architect observes that LDAP authentication is failing.
Click the Exhibit button to review the output of aaad.debug and the configuration of the authentication policy.


What is causing this issue?

Which two settings should a Citrix Architect use on Citrix Application Delivery Management for configuring CPX using a pre-existing CPX device? (Choose two.)

Scenario: A Citrix Architect has met with a team of Workspacelab members for a design discussion. They have captured the following requirements for NetScaler design project:
* The authentication must be deployed for the users from the workspacelab.com and vendorlab.com domains.
* The workspacelab users connecting from the internal (workspacelab) network should be authenticated using LDAP.
* The workspacelab users connecting from the external network should be authenticated using LDAP and RADIUS.
* The vendorlab users should be authenticated using Active Directory Federation Service.
* The user credentials must NOT be shared between workspacelab and vendorlab.
* Single Sign-on must be performed between StoreFront and NetScaler Gateway.
* A domain drop down list must be provided if the used connects to the NetScaler gateway virtual server externally.
Which method must the architect utilize for user management between the two domains?

Scenario: A Citrix Architect has configured two MPX devices in high availability mode with version
12.0.53.13 nc. After a discussion with the security team, the architect enabled the Application Firewall feature for additional protection.
In the initial deployment phase, the following security features were enabled:
* IP address reputation
* HTML SQL injection check
* Start URL
* HTML Cross-site scripting
* Form-field consistency
* After deployment in pre-production, the team identifies the following additional security features and changes as further requirements:
* Application Firewall should retain the response of form field in its memory. When a client submits the form in the request, Application Firewall should check for inconsistencies in the request before sending it to the web server.
* All the requests dropped by Application Firewall should get a pre-configured HTML error page with appropriate information.
* The Application Firewall profile should be able to handle the data from the RSS feed and an ATOM-based site. Click the Exhibit button to view an excerpt of the existing configuration.

What should the architect do to meet these requirements?

Under which two circumstances will a service be taken out of the slow start phase with automated slow start?
(Choose two.)