A Citrix Architect has deployed NetScaler Management and Analytics System (NMAS) to monitor a high availability pair of NetScaler VPX devices.

The architect needs to deploy automated configuration backup to meet the following requirements:

1.

The configuration backup file must be protected using a password.

2.

The configuration backup must be performed each day at 8:00 AM GMT.

3.

The configuration backup must also be performed if any changes are made in the ns.conf file.

4.

Once the transfer is successful, auto-delete the configuration file from the NMAS.

Which SNMP trap will trigger the configuration file backup?

A. netScalerConfigSave

B. sysTotSaveConfigs

C. netScalerConfigChange

D. sysconfigSave

Scenario: A Citrix Architect holds a design discussion with a team of Workspacelab members, and they capture the following requirements for the NetScaler design project.

1.

A pair of NetScaler MPX appliances will be deployed in the DMZ network and another pair in the internal network.

2.

High availability will be accessible between the pair of NetScaler MPX appliances in the DMZ network.

3.

Multi-factor authentication must be configured for the NetScaler Gateway virtual server.

4.

The NetScaler Gateway virtual server is integrated with the StoreFront server.

5.

Load balancing must be deployed for users from the workspacelab.com domain.

6.

The workspacelab users should be authenticated using Cert Policy and LDAP.

7.

All the client certificates must be SHA 256-signed, 2048 bits, and have UserPrincipalName as the subject.

8.

Single Sign-on must be performed between StoreFront and NetScaler Gateway.

After deployment, the architect observes that LDAP authentication is failing.

Click the Exhibit button to review the output of aaad debug and the configuration of the authentication policy.

Exhibit 1

Exhibit 2

What is causing this issue?

A. UserNamefield is set as subjection

B. Password used is incorrect

C. User does NOT exist in database

D. IdapLoginName is set as sAMAccountName

Scenario: A Citrix Architect needs to assess a NetScaler Gateway deployment that was recently completed by a customer and is currently in pre-production testing. The NetScaler Gateway needs to use ICA proxy to provide access to a XenApp and XenDesktop environment. During the assessment, the customer informs the architect that users are NOT able to launch published resources using the Gateway virtual server.

Click the Exhibit button to view the troubleshooting details collected by the customer.

What is the cause of this issue?

A. The required ports have NOT been opened on the firewall between the NetScaler gateway and the Virtual Delivery Agent (VDA) machines.

B. The StoreFront URL configured in the NetScaler gateway session profile is incorrect.

C. The Citrix License Server is NOT reachable.

D. The Secure Ticket Authority (STA) servers are load balanced on the NetScaler.

Scenario: A Citrix Architect needs to design a hybrid XenApp and XenApp and XenDesktop environment which will include Citrix Cloud as well as resource locations in on-premises datacenter and Microsoft Azure.

Organizational details and requirements are as follows:

1.

Active XenApp and XenDesktop Service subscription

2.

No existing NetScaler deployment

3.

About 3,000 remote users are expected to regularly access the environment

4.

Multi-factor authentication should be used for all external connections

5.

Solution must provide load balancing for backend application servers

6.

Load-balancing services must be in Location B

Click the Exhibit button to view the conceptual environment architecture.

The architect should use ________ in Location A, and should use _________ in Location B. (Choose the correct option to complete the sentence.)

A. NetScaler Gateway as a Service, no NetScaler products

B. No NetScaler products, NetScaler ADC (BYO)

C. NetScaler Gateway as a Service, NetScaler ADC (BYO)

D. No NetScaler products, NetScaler ICA Proxy (cloud-licensed)

E. NetScaler Gateway as a Service, NetScaler ICA Proxy (cloud-licensed)

F. No NetScaler products; NetScaler Gateway appliance

Scenario: A Citrix Architect has deployed an authentication setup with a ShareFile load-balancing virtual

server. The NetScaler is configured as the Service Provider and Portalguard server is utilized as the SAML

Identity Provider. While performing the functional testing, the architect finds that after the users enter their

credentials on the logon page provided by Portalguard, they get redirected back to the Netscaler Gateway

page at uri /cgi/samlauth/ and receive the following error.

"SAML Assertion verification failed; Please contact your administrator."

The events in the /var/log/ns.log at the time of this issue are as follows:

Feb 23 20:35:21 10.148.138.5 23/02/2018:20:35:21 GMT vorsb1 0-PPE-0 : default AAATM

Message 3225369 0 : "SAML : ParseAssertion:

parsed attribute NameID, value is nameid"

Feb 23 20:35:21 10.148.138.5 23/02/2018:20:35:21 GMT vorsb1 0-PPE-0 : default AAATM

Message 3225370 0 : "SAML verify digest:

algorithms differ, expected SHA1 found SHA256"

Feb 23 20:35:44 10.148.138.5 23/02/2018:20:35:44 GMT vorsb1 0-PPE-0 : default AAATM

Message 3225373 0 : "SAML : ParseAssertion:

parsed attribute NameID, value is named

Feb 23 20:35:44 10.148.138.5 23/02/2018:20:35:44 GMT vorsb1 0-PPE-0 : default AAATM

Message 3225374 0 : "SAML verify digest:

algorithms differ, expected SHA1 found SHA256"

Feb 23 20:37:55 10.148.138.5 23/02/2018:20:37:55 GMT vorsb1 0-PPE-0 : default AAATM

Message 3225378 0 : "SAML : ParseAssertion:

parsed attribute NameID, value is nameid"

Feb 23 20:37:55 10.148.138.5 23/02/2018:20:37:55 GMT vorsb1 0-PPE-0 : default AAATM

Message 3225379 0 : "SAML verify digest:

algorithms differ, expected SHA1 found SHA256"

What should the architect change in the SAML action to resolve this issue?

A. Signature Algorithm to SHA 256

B. The Digest Method to SHA 256

C. The Digest Method to SHA 1

D. Signature Algorithm to SHA 1