A network engineer wants to optimize a published load balanced SSL virtual server for WAN
connection with long delay, high bandwidth with minimal packet drops. What would the
network engineer use to do this type of optimization for the SSL virtual server?

Scenario: The NetScaler is connected to two subnets. The NSIP is 10.2.9.12. The external
SNIP is 10.2.7.3. The MIP for internal access is 10.2.9.3. Web servers, authentication
servers and time servers are on the 10.2.10.0/24 network which is available through the
10.2.9.1 router. The external firewall has the 10.2.7.1 address. Traffic bound for Internet
clients should flow through the external firewall. Which command should be used to set the
default route?

Some SSL certificate files may be missing from a NetScaler appliance. Which directory
should an engineer check to determine which files are missing?

Scenario: An engineer has been hired to manage the content-switching configurations on
the NetScaler. The user account for this engineer must have the standard rules that apply to
the other administrators. What should the engineer do to allow for the extra privileges?

A network engineer needs to configure smart card-based authentication on NetScaler
Access Gateway. Which type of authentication policy could the engineer configure in order
to accomplish this task?

A company wants to implement a policy where all passwords should be encrypted while
transiting the network. Where in the GUI would the network engineer prevent access to
unsecured management protocols?

Scenario: The NetScaler is configured with a NSIP of 10.20.30.40. Management access is
NOT enabled on any other IP address. Which command should an engineer execute to

prevent access to the NetScaler using HTTP and only allow HTTPS access?

Company policy states that SNMP management should only be allowed from specific hosts.
What should the network engineer do to prevent unauthorized access to SNMP?

Scenario: The IT department in an organization manages servers and network devices from

an internal management subnet. A NetScaler device has recently been installed into the
DMZ network. The intranet firewall allows TCP 443 from the management subnet to the
NetScaler device. How could the engineer ensure that only workstations in the management
network are permitted to manage the NetScaler?

Scenario: An engineer has three subnets configured on a NetScaler appliance. The
engineer must only allow a certain group of users to access a virtual server on the
appliance. The IT Manager requires that all rules are flexible and can be easily modified for
ease of administration. How could the engineer allow certain groups to access the virtual
server while still being able to modify the setting in the future?