I85PREP
⌘ K
Citrix CCE-N study materials
Citrix CCE-N study resources

Citrix CCE-N practice questions

One question at a time. Build your Citrix CCE-N understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Architecture and Design of Citrix ADC Deployments

A Citrix ADC deployment must present a single virtual server address to clients while distributing traffic across three backend web servers. Which ADC building block provides the virtual IP, port, and protocol that clients connect to?

  1. The service group
  2. The policy expression
  3. The virtual server Correct answer.
  4. The monitor

Explanation

A virtual server owns the client-facing IP address, port, and protocol and is the entity clients connect to. Services and service groups represent the backend servers bound to that virtual server, while monitors track their health.

Question 2Architecture and Design of Citrix ADC Deployments

Which Citrix ADC component stores the configuration database that is synchronized between nodes in a high-availability pair?

  1. The SNIP of the primary node
  2. The shared configuration file on the peer
  3. The VIP of the load-balancing virtual server
  4. The NSIP of each node Correct answer.

Explanation

Each node keeps its own configuration database, and the primary node propagates configuration changes to the secondary over the NSIP addresses. The NSIP is the management address used for that synchronization traffic.

Question 3Architecture and Design of Citrix ADC Deployments

An architect is sizing a Citrix ADC MPX appliance for a new data center. Which statement best describes the purpose of the throughput licensing tier on an MPX platform?

  1. It restricts the number of SSL certificates that can be bound.
  2. It defines the number of vCPUs available to packet engines.
  3. It limits the number of concurrent client connections allowed.
  4. It caps the maximum aggregate throughput the appliance will forward. Correct answer.

Explanation

MPX throughput licensing sets the maximum aggregate forwarding capacity of the appliance, and platform capacity above that tier is not usable until the license is upgraded. Connection limits and SSL certificate counts are governed by other platform limits or edition features.

Question 4Architecture and Design of Citrix ADC Deployments

A design requires that client traffic to a web application be terminated at the ADC and re-encrypted to the backend servers. Which deployment mode does this describe?

  1. SSL offloading Correct answer.
  2. Policy-based routing
  3. SSL bridge
  4. SSL passthrough with a TCP virtual server

Explanation

SSL offloading terminates TLS at the ADC so it can inspect and apply policies, then optionally re-encrypts traffic to the backend. SSL bridge forwards encrypted traffic without terminating it, so inspection is not possible.

Question 5Architecture and Design of Citrix ADC Deployments

In a Citrix ADC high-availability pair configured for active-active operation, how is traffic distributed between the two nodes?

  1. Traffic is split by client source MAC address across both nodes.
  2. Each node actively handles traffic for the virtual servers it owns. Correct answer.
  3. Both nodes forward every packet simultaneously for redundancy.
  4. Only the primary node forwards traffic; the secondary stays idle.

Explanation

In active-active HA, each node actively processes traffic for the virtual servers assigned to it, and the peer takes over those entities if a failover occurs. In active-passive, only the primary forwards traffic while the secondary remains standby.

Question 6Architecture and Design of Citrix ADC Deployments

A Citrix ADC is deployed in one-arm mode. Which statement correctly describes the network requirement for this topology?

  1. The ADC requires two dedicated interfaces, one for clients and one for servers, with no shared subnet.
  2. The ADC uses a single interface for both client and server traffic, and backend servers route through it. Correct answer.
  3. The ADC must use a direct server return configuration for all virtual servers.
  4. The ADC must be placed inline between the client and server VLANs with no routing changes.

Explanation

In one-arm mode the ADC reaches both clients and servers through the same interface or VLAN, so backend servers must route their return traffic back through the ADC. It is a common design when the ADC is not placed inline.

Question 7Architecture and Design of Citrix ADC Deployments

An architect needs client IP addresses to be visible to backend servers behind a Citrix ADC without changing the servers. Which ADC feature should be used?

  1. Enable MAC-based forwarding on the ADC.
  2. Bind a responder policy that rewrites the source address.
  3. Configure the virtual server in transparent mode.
  4. Use Proxy Protocol or the client IP insertion option on the service. Correct answer.

Explanation

When the ADC performs source NAT, backend servers see the ADC address. Proxy Protocol or client IP insertion options on the service preserve the original client address in the connection so servers can log it.

Question 8Architecture and Design of Citrix ADC Deployments

A Citrix ADC design uses a GSLB deployment across two data centers. Which GSLB method returns an answer based on the measured network proximity between the client resolver and the sites?

  1. Round trip time
  2. Static proximity Correct answer.
  3. Connection proxy
  4. Source IP hash

Explanation

Static proximity uses a configured location database to estimate the network distance between the client resolver and each GSLB site and selects the closest. Round trip time instead measures live latency to the sites.

Question 9Architecture and Design of Citrix ADC Deployments

Which Citrix ADC feature is designed to distribute traffic across multiple ADC appliances that together act as a single load-balancing system?

  1. Policy-based routing
  2. GSLB
  3. High availability pair
  4. Cluster Correct answer.

Explanation

A Citrix ADC cluster combines multiple appliances into one system that shares configuration and distributes traffic across nodes. HA pairs provide redundancy between two nodes, and GSLB distributes across sites rather than forming one local system.

Question 10Architecture and Design of Citrix ADC Deployments

An architect must ensure that a Citrix ADC virtual server only accepts requests for a specific host header. Which configuration object is the most appropriate?

  1. A load-balancing method change
  2. A persistence group
  3. A responder policy bound to the virtual server Correct answer.
  4. A service monitor bound to the service group

Explanation

A responder policy can inspect the HTTP host header and take an action such as dropping or redirecting requests that do not match. Monitors, load-balancing methods, and persistence affect backend health and distribution, not request admission by header.

Question 11Architecture and Design of Citrix ADC Deployments

A design must provide session persistence based on an HTTP cookie inserted by the ADC. Which persistence type should be selected?

  1. SOURCEIP
  2. SSL session ID
  3. RULE
  4. COOKIEINSERT Correct answer.

Explanation

COOKIEINSERT persistence has the ADC insert a cookie identifying the selected backend server so subsequent requests return to it. SOURCEIP persists on client address, and SSL session ID persists on the TLS session.

Question 12Architecture and Design of Citrix ADC Deployments

Which load-balancing method on Citrix ADC selects the service with the fewest active connections relative to its configured weight?

  1. Round robin
  2. Custom load
  3. Least connection Correct answer.
  4. Least response time

Explanation

Least connection selects the service with the fewest active connections, adjusted by weight, to balance load more evenly than simple rotation. Round robin rotates requests without regard to current connection counts.

Question 13Architecture and Design of Citrix ADC Deployments

A Citrix ADC design requires that a specific virtual server be reachable from the internet while management access remains restricted to an internal subnet. Which design approach best satisfies this requirement?

  1. Place the NSIP on the public interface and rely on strong passwords.
  2. Bind the NSIP and VIP to the same public interface and disable the firewall.
  3. Use the SNIP for management and expose it to the internet.
  4. Bind the VIP to a public-facing interface and restrict NSIP access with access control lists. Correct answer.

Explanation

The VIP should be exposed on the untrusted interface while the NSIP, which is used for management, remains reachable only from trusted networks and is protected with ACLs. Separating data-plane and management addresses is a core security design principle.

Question 14Architecture and Design of Citrix ADC Deployments

Which Citrix ADC feature allows an architect to define a reusable set of servers and monitors that can be referenced by multiple virtual servers?

  1. Content switching policy
  2. Responder action
  3. SSL profile
  4. Service group Correct answer.

Explanation

A service group is a reusable container of services and their monitors that multiple virtual servers can bind to, simplifying management. Content switching policies route requests, responder actions modify responses, and SSL profiles define TLS parameters.

Question 15Architecture and Design of Citrix ADC Deployments

An architect is choosing between a two-arm and a one-arm Citrix ADC deployment. Which consideration favors the two-arm design?

  1. It eliminates the need for a default gateway on backend servers.
  2. It removes the need for a subnet IP address.
  3. It places the ADC inline so both client and server traffic pass through it without relying on backend routing changes. Correct answer.
  4. It requires fewer IP addresses than one-arm mode.

Explanation

In a two-arm design the ADC is inline between client and server networks, so traffic naturally flows through it and backend servers do not need routing changes to return traffic. One-arm mode instead depends on servers routing return traffic through the ADC.

Question 16Architecture and Design of Citrix ADC Deployments

A Citrix ADC high-availability pair must fail over when the primary node loses its connection to the upstream switch. Which configuration should be enabled?

  1. A shorter dead interval on the virtual server
  2. Cookie persistence on all services
  3. A larger max client setting
  4. Interface monitoring on the relevant interface Correct answer.

Explanation

Interface monitoring lets the HA pair trigger failover when a monitored interface goes down, which covers upstream link loss. Persistence and connection limits do not affect failover decisions.

Question 17Architecture and Design of Citrix ADC Deployments

An architect needs to decrypt, inspect, and re-encrypt traffic to a backend while preserving end-to-end encryption from client to server at the application layer. Which design best meets this requirement?

  1. Disable SSL on the virtual server and use HTTP only.
  2. Use a TCP virtual server with no SSL profile.
  3. Terminate TLS at the ADC and establish a new TLS session to the backend. Correct answer.
  4. Use SSL bridge and inspect traffic at a separate appliance.

Explanation

Terminating at the ADC and re-establishing TLS to the backend allows the ADC to inspect and apply policies while keeping traffic encrypted on both legs. SSL bridge would prevent the ADC from inspecting the payload.

Question 18Architecture and Design of Citrix ADC Deployments

A design uses content switching to route requests to different virtual servers based on URL path. Which object must the content switching virtual server bind to in order to forward matching traffic?

  1. Responder actions
  2. Backend service monitors
  3. Persistence groups
  4. Target load-balancing virtual servers Correct answer.

Explanation

A content switching virtual server evaluates policies and forwards matching traffic to target load-balancing virtual servers bound as targets. Monitors and persistence groups do not serve as forwarding targets for content switching.

Question 19Architecture and Design of Citrix ADC Deployments

An architect is designing GSLB with active-active data centers and wants DNS answers to reflect real-time site health. Which GSLB configuration element determines whether a site is considered available?

  1. A responder action
  2. A content switching policy
  3. A GSLB service bound to a monitor Correct answer.
  4. An SSL profile

Explanation

GSLB services represent the site endpoints and are bound to monitors that determine availability, so unhealthy sites are excluded from DNS answers. Content switching, responder actions, and SSL profiles do not govern GSLB site health.

Question 20Architecture and Design of Citrix ADC Deployments

A Citrix ADC cluster design requires that traffic for a given flow always be handled by the same cluster node. Which cluster concept provides this?

  1. Flow-based distribution with node ownership Correct answer.
  2. Policy-based routing
  3. Round-robin DNS across cluster nodes
  4. GSLB proximity

Explanation

In a cluster, flows are distributed to nodes and flow ownership keeps a given flow on the same node for its lifetime, preserving state. DNS round robin, GSLB, and policy-based routing do not provide per-flow node affinity within a cluster.

Question 21Architecture and Design of Citrix ADC Deployments

Which Citrix ADC edition tier is required to use content switching and responder policies together in a design?

  1. Express only
  2. Basic only
  3. Advanced or higher Correct answer.
  4. Standard only

Explanation

Content switching and responder policies are features of the Advanced and Premium editions, not the Standard edition. Architects must confirm the edition supports the required policy features before finalizing the design.

Question 22Architecture and Design of Citrix ADC Deployments

An architect must ensure that backend servers can be added or removed without editing each virtual server. Which design choice supports this?

  1. Create a separate virtual server per backend server
  2. Bind each server directly to the virtual server
  3. Use a responder policy to rewrite destinations
  4. Bind servers to a service group and bind the group to the virtual server Correct answer.

Explanation

Binding a service group to the virtual server means servers can be added to or removed from the group without touching the virtual server binding. Direct per-server bindings require edits to each virtual server whenever membership changes.

Question 23Architecture and Design of Citrix ADC Deployments

A Citrix ADC design must support IPv6 clients while backend servers remain IPv4-only. Which ADC capability enables this?

  1. SSL bridge mode
  2. NAT64 translation on the ADC Correct answer.
  3. Cookie persistence
  4. Direct server return

Explanation

NAT64 lets the ADC accept IPv6 client connections and translate them to IPv4 for backend servers, bridging the address families. SSL bridge, direct server return, and cookie persistence do not translate between IP versions.

Question 24Architecture and Design of Citrix ADC Deployments

Which statement best describes the role of the subnet IP (SNIP) in a Citrix ADC deployment?

  1. It is the address used for DNS resolution of GSLB sites.
  2. It is used by the ADC to communicate with backend servers on that subnet. Correct answer.
  3. It is the address used only for HA heartbeat traffic.
  4. It is the address clients connect to for load-balanced applications.

Explanation

The SNIP is a subnet-specific address the ADC uses for backend communication, including health checks and source NAT to servers. The VIP is the client-facing address, and the NSIP handles management.

Question 25Architecture and Design of Citrix ADC Deployments

An architect is evaluating a design where the ADC must inspect and modify HTTP responses before they reach clients. Which policy type should be used?

  1. Persistence type
  2. Content switching policy
  3. Responder policy Correct answer.
  4. Load-balancing method

Explanation

Responder policies evaluate requests or responses and can take actions such as rewriting or redirecting, making them the right tool for modifying responses. Content switching selects a target virtual server, while load-balancing methods and persistence affect distribution.

Question 26Architecture and Design of Citrix ADC Deployments

An architect is planning a Citrix ADC deployment and needs to decide where to terminate TLS for backend web servers. Which design choice describes TLS bridging rather than TLS offloading?

  1. The ADC decrypts client traffic, inspects it, then re-encrypts it toward the backend. Correct answer.
  2. The ADC decrypts client traffic and forwards it to the backend as clear-text HTTP.
  3. The ADC terminates client TLS and uses a separate certificate for backend authentication.
  4. The ADC passes encrypted client traffic through to the backend without decrypting it.

Explanation

TLS bridging means the ADC terminates the client-side TLS session, can inspect or apply policies to the clear-text payload, and then establishes a new encrypted session to the backend server. Offloading differs because the ADC-to-backend leg is clear text, while pass-through leaves encryption end to end without ADC inspection.

Question 27Architecture and Design of Citrix ADC Deployments

An architect wants the Citrix ADC to answer DNS queries for a GSLB domain and return the site that is closest to the client based on the client's DNS resolver subnet. Which GSLB method should be selected?

  1. Source IP hash across configured sites
  2. Round robin across all active GSLB services
  3. Static proximity with location database entries Correct answer.
  4. Least connection based on active service load

Explanation

Static proximity uses the ADC's location database to map the client's DNS resolver address to a geographic location and returns the GSLB site with the shortest configured distance. It is the standard choice when answers should reflect client location rather than live load metrics.

Question 28Architecture and Design of Citrix ADC Deployments

An architect is designing a Citrix ADC high-availability pair and must decide how the two nodes synchronize configuration and state. Which statement accurately describes the default behavior of an HA pair?

  1. Both nodes independently maintain configuration and synchronize only when a failover occurs.
  2. The primary node pushes its configuration to the secondary node, and the secondary keeps state in sync for failover. Correct answer.
  3. The secondary node is the configuration master and replicates its settings to the primary node.
  4. Configuration is stored on an external management server and both nodes read it at boot time.

Explanation

In a Citrix ADC HA pair, the primary node owns the configuration and automatically synchronizes it to the secondary node, which also maintains connection and session state so that failover is transparent. The secondary node does not act as the configuration master.

Question 29Architecture and Design of Citrix ADC Deployments

A Citrix ADC design must direct requests to different backend pools based on the value of an HTTP header, and the architect wants the decision to occur before a load-balancing virtual server is selected. Which object should be configured as the entry point?

  1. A responder policy bound to a load-balancing virtual server that rewrites the header
  2. A content switching virtual server with policies bound to target load-balancing virtual servers Correct answer.
  3. A load-balancing virtual server with multiple services and a header-based monitor
  4. A cache redirection virtual server that forwards traffic based on header values

Explanation

Content switching virtual servers evaluate policies and forward matching requests to the appropriate target load-balancing virtual server, which makes them the correct entry point when routing depends on header values. Load-balancing virtual servers select among their own services and cannot themselves branch to other virtual servers.

Question 30Architecture and Design of Citrix ADC Deployments

An architect is designing a multi-site Citrix ADC deployment where each site uses a cluster of ADC nodes. The requirement is that a client flow is consistently handled by the same cluster node for the life of the connection. Which design element should the architect rely on?

  1. The GSLB site persistence setting that keeps clients bound to a site for a configured duration
  2. The cluster's flow distribution setting, which determines whether flows are steered by node or by source and destination Correct answer.
  3. The load-balancing method that selects the service with the fewest active connections
  4. The HA failover setting that promotes the secondary node when the primary loses connectivity

Explanation

Cluster flow distribution controls how flows are assigned across cluster nodes, and the steer-by-node or steer-by-source-destination options determine whether a flow stays pinned to one node. This is the mechanism that guarantees consistent node handling for the life of a connection.

Question 31Networking and Traffic Management (ADC)

In a NetScaler/ADC load balancing configuration, which entity directly holds the service members that receive client traffic and is bound to a virtual server?

  1. Content switching policy
  2. Service group Correct answer.
  3. SSL profile
  4. Responder action

Explanation

A service group aggregates multiple backend services that share configuration settings and is bound to a virtual server so the vserver can distribute traffic across the members. It is the standard object for managing many identical backend endpoints as one unit.

Question 32Networking and Traffic Management (ADC)

Which NetScaler/ADC load balancing method distributes requests to services in strict sequential order, cycling back to the first service after the last is used?

  1. Least response time
  2. Source IP hash
  3. Round robin Correct answer.
  4. Least connection

Explanation

Round robin assigns each new connection to the next service in the configured list and wraps around to the beginning, giving an even rotation regardless of load. It does not consider current connection counts or server responsiveness.

Question 33Networking and Traffic Management (ADC)

A client connects to a NetScaler/ADC virtual server configured for SSL offloading. Where is traffic decrypted in this deployment?

  1. On the client device twice
  2. On the upstream router
  3. On the ADC virtual server Correct answer.
  4. On the backend web servers

Explanation

With SSL offloading, the ADC terminates the TLS session at the virtual server, decrypts traffic, and forwards plain HTTP to the backend servers. This removes certificate and CPU overhead from the servers.

Question 34Networking and Traffic Management (ADC)

Which persistence type keeps a client tied to the same backend service based on the client's IP address?

  1. SSL session ID persistence
  2. URL persistence
  3. Source IP persistence Correct answer.
  4. Cookie persistence

Explanation

Source IP persistence builds a persistence session keyed on the client's source address, so subsequent connections from that address go to the same service. It is useful when cookies are unavailable but can be imprecise behind NAT.

Question 35Networking and Traffic Management (ADC)

In a NetScaler/ADC content switching configuration, what does the content switching virtual server do with an incoming request?

  1. Applies only compression before routing
  2. Evaluates policies and forwards to a target load balancing virtual server Correct answer.
  3. Rewrites all HTTP headers before routing
  4. Terminates only TLS and forwards to a fixed service

Explanation

A content switching virtual server evaluates its bound policies against request attributes such as host, URL, or headers, then directs the request to the matching target load balancing virtual server. This enables routing different traffic to different server farms.

Question 36Networking and Traffic Management (ADC)

Which monitoring probe type would an administrator configure to verify that a backend web server returns a valid HTTP 200 response for a specific path?

  1. HTTP-ECV monitor Correct answer.
  2. PING monitor
  3. TCP monitor
  4. UDP-ECV monitor

Explanation

An HTTP-ECV monitor sends an HTTP request and checks that the response body contains a configured expression, confirming application-level health. A plain HTTP monitor checks status codes, while ECV adds content validation.

Question 37Networking and Traffic Management (ADC)

What is the primary purpose of configuring a backup virtual server on a NetScaler/ADC load balancing virtual server?

  1. To decrypt TLS for the primary virtual server
  2. To serve traffic when all primary services are unavailable Correct answer.
  3. To store persistence cookies for the primary
  4. To compress responses sent to clients

Explanation

A backup virtual server is used only when the primary virtual server has no available services, providing a fallback such as a maintenance page or secondary data center. It remains inactive while primary services are healthy.

Question 38Networking and Traffic Management (ADC)

Which NetScaler/ADC feature distributes incoming connections across multiple links or ISPs and can select an outbound path based on policy?

  1. Content switching
  2. Responder
  3. Link load balancing Correct answer.
  4. Global server load balancing

Explanation

Link load balancing manages multiple WAN or ISP links, monitoring their health and choosing an outbound path according to configured policies. It addresses link redundancy and outbound traffic distribution rather than server selection.

Question 39Networking and Traffic Management (ADC)

An administrator wants requests for /images/* to reach one server farm and all other requests to reach a default farm. Which configuration achieves this?

  1. A rewrite policy that blocks /images/*
  2. One SSL policy bound globally
  3. A single load balancing vserver with no policies
  4. Two content switching policies with a default target vserver Correct answer.

Explanation

Content switching policies can match on the URL path, with the /images/* policy targeting the image farm and the remaining traffic falling through to the default target vserver. This is the standard pattern for path-based routing.

Question 40Networking and Traffic Management (ADC)

A service is marked DOWN by its monitor even though the application responds on the correct port. Which monitor setting should be reviewed first?

  1. The service group's compression policy
  2. The SSL profile's cipher list
  3. The monitor's send string and receive expression Correct answer.
  4. The virtual server's persistence timeout

Explanation

If the port responds but the monitor fails, the probe's send string and expected receive expression likely do not match the application's actual response. Verifying these values confirms whether the health check criteria are correct.

Question 41Networking and Traffic Management (ADC)

Clients behind a large NAT device all appear to share one public IP and are being pinned to a single backend server by source IP persistence. What is the best remedy?

  1. Change the load balancing method to round robin only
  2. Switch persistence to cookie-based or another client-identifying method Correct answer.
  3. Increase the virtual server's idle timeout
  4. Disable all monitors on the services

Explanation

Source IP persistence collapses many distinct clients behind NAT onto one persistence entry, overloading a single server. Using cookie persistence or another method that distinguishes individual clients avoids the NAT aggregation problem.

Question 42Networking and Traffic Management (ADC)

What is the effect of enabling the 'down state flush' option on a load balancing virtual server?

  1. It removes monitor bindings from the service
  2. It flushes DNS cache entries for the vserver
  3. It clears persistence entries on a timer
  4. It resets existing connections when a service is marked DOWN Correct answer.

Explanation

Down state flush causes the ADC to terminate existing client connections to a service when that service transitions to DOWN, rather than letting them linger. This speeds failover to healthy services.

Question 43Networking and Traffic Management (ADC)

An administrator needs the ADC to insert an HTTP header identifying the selected backend server before forwarding to the server. Which feature is appropriate?

  1. Rewrite policy with an insert-header action Correct answer.
  2. Authorization policy with a deny action
  3. Content switching policy with a target vserver
  4. Responder policy with a redirect action

Explanation

A rewrite policy with an insert-HTTP-header action modifies the request before it reaches the backend, adding the desired header. Rewrite is designed for request or response transformation.

Question 44Networking and Traffic Management (ADC)

Which statement correctly distinguishes a NetScaler/ADC virtual server from a service?

  1. The service is the client-facing endpoint; the virtual server is a monitor
  2. Both represent the same backend endpoint with different names
  3. The virtual server is the client-facing IP and port; the service represents a backend server and port Correct answer.
  4. The virtual server is the backend server; the service is the client-facing endpoint

Explanation

A virtual server owns the client-facing IP address and port that users connect to, while a service defines a specific backend server and port that the vserver can use. Binding services to the vserver links the front end to the back ends.

Question 45Networking and Traffic Management (ADC)

A virtual server uses the least connection method, but one backend server is far more powerful than the others and stays underutilized. Which approach best balances load by capacity?

  1. Reduce the monitor interval on all services
  2. Enable down state flush on the vserver
  3. Assign weights to services so the stronger server receives proportionally more connections Correct answer.
  4. Switch to round robin for all services

Explanation

Weighted least connection lets you assign higher weights to more capable servers so they receive proportionally more new connections. This aligns distribution with actual server capacity.

Question 46Networking and Traffic Management (ADC)

What does the 'redirect URL' action on a responder policy accomplish for clients?

  1. It returns an HTTP redirect that instructs the client to request a different URL Correct answer.
  2. It applies compression to the response body
  3. It decrypts the client's TLS session
  4. It forwards the request to a backend service silently

Explanation

A responder redirect action sends a redirect response, such as a 302, causing the client to issue a new request to the specified URL. This is commonly used to force HTTPS or redirect to a new site.

Question 47Networking and Traffic Management (ADC)

Which global server load balancing method returns an answer based on the measured network proximity or round-trip time to each site?

  1. Source IP hash
  2. Least connection
  3. Static proximity Correct answer.
  4. Round robin DNS

Explanation

Static proximity GSLB selects a site based on network proximity, typically derived from a configured location database and round-trip measurements. This directs clients toward the closest or fastest data center.

Question 48Networking and Traffic Management (ADC)

An administrator wants to distribute traffic across two data centers and have clients automatically sent to the secondary site if the primary site's ADC is unavailable. Which feature provides this?

  1. Link load balancing with ISP metrics
  2. SSL offloading with a single certificate
  3. Global server load balancing with site monitoring Correct answer.
  4. Content switching with URL policies

Explanation

GSLB with site monitoring checks the health of each data center and returns answers pointing to an available site, enabling disaster failover across locations. It operates at the DNS resolution layer.

Question 49Networking and Traffic Management (ADC)

Which NetScaler/ADC feature inspects the payload of a UDP health check to confirm an application-specific response string?

  1. TCP monitor
  2. HTTP monitor
  3. UDP-ECV monitor Correct answer.
  4. PING monitor

Explanation

A UDP-ECV monitor sends a UDP payload and validates the response against a configured expression, confirming application-level health for UDP services. Plain TCP and PING monitors cannot inspect payload content.

Question 50Networking and Traffic Management (ADC)

A client requests https://shop.example.com. The ADC must route by host header to the shop vserver while sending other hosts to a default vserver. Which policy expression type is most appropriate?

  1. A UDP payload expression in a content switching policy
  2. An HTTP host-header expression in a content switching policy Correct answer.
  3. An SSL cipher expression in a content switching policy
  4. A TCP source-port expression in a content switching policy

Explanation

Content switching evaluates request attributes, and the HTTP host header directly identifies the requested domain. A policy matching the host routes shop.example.com to its vserver, with remaining traffic going to the default target.