Scenario: A network engineer has bound four policies to an HTTP virtual server as follows:
PolicyA is bound with a priority of 10 and has the following expression: REQ.IP.SOURCEIP == 10.10.10.0
PolicyB is bound with a priority of 15 and has the following expression: REQ.IP.SOURCEIP != 10.10.11.0
PolicyC is bound with a priority of 20 and has the following expression: REQ.IP.SOURCEIP == 10.10.12.0
PolicyD is bound with a priority of 25 and has the following expression: REQ.IP.SOURCEIP != 10.10.13.0
When a connection is made from a PC with an IP address of 10.10.12.15, which policy will be applied?

Scenario: A network engineer is going to roll out an upgrade from a 9.x version on a standalone NetScaler
appliance using the command-line interface.
Which two items does the engineer need to download before proceeding with the upgrade? (Choose two.)

Scenario: A pair of NetScaler devices have recently been installed into the corporate DMZ. The Netscalers have
been installed in two-arm mode, with two interfaces in a Internet-facing VLAN and two interfaces in the
internal VLAN. A private management subnet also exists.
The NetScaler engineer would like to secure and restrict communication between the management subnet and
the SNIP address on that subnet.
Which two actions could the engineer take to help with these goals? (Choose two.)

Which two of the following settings could be configured using a TCP profile that is bound to a service? (Choose
two.)

A network engineer is investigating a recent failure of NetScaler high availability and confirms that some
recent changes were made to the configuration.
What is a likely cause of the failure?

A network engineer has started at a new company and has been instructed to restrict access to an external
facing VIP to selected third party clients, based on their source IP address range.
What could the engineer do to accomplish this task?

Scenario: An engineer has been asked to implement load balancing of an existing unsecured web application.
The engineer needs to ensure that users will access the web application using HTTPS, but no changes can be
made to the web servers hosting the web application.
In order to fulfill the requirements, the engineer must create an __________ service group and add members
with port __________; and bind the service group to an __________ virtual server. (Choose the correct set of
options to complete the sentence.)

A network engineer notes that a high availability pair (HA) is NOT synchronizing correctly and decides to open
a ticket with Citrix Support.
When opening the new ticket with Citrix Support, the engineer should run show __________ and __________.
(Choose the correct set of options to complete the sentence.)

A network engineer needs to upgrade both appliances of a High Availability (HA) pair.
In which order should the network engineer upgrade the appliances?

Scenario: A network engineer is managing a NetScaler environment that has two NetScaler devices running as
a high availability pair. The engineer must upgrade the current version from NetScaler 9 to NetScaler 10.5.
Which action must the engineer take?