I85PREP
⌘ K
Citrix CCP-N study materials
Citrix CCP-N study resources

Citrix CCP-N practice questions

One question at a time. Build your Citrix CCP-N understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Networking architecture and Citrix ADC platform fundamentals

In a Citrix ADC deployment, which component is responsible for performing health checks on backend servers and removing failed servers from the load-balancing decision?

  1. A monitor bound to the service Correct answer.
  2. The virtual server's persistence setting
  3. The NetScaler IP (NSIP) address
  4. The MAC-based forwarding table

Explanation

Monitors are bound to services (or service groups) and periodically probe backend servers; when probes fail, the service is marked DOWN and the virtual server stops sending new requests to it. The NSIP is the management address, persistence controls client stickiness, and MAC-based forwarding affects Layer 2 path selection, not health state.

Question 2Networking architecture and Citrix ADC platform fundamentals

Which Citrix ADC entity is the client-facing object that owns the VIP address and distributes requests across bound services?

  1. A service group
  2. A load-balancing virtual server Correct answer.
  3. A responder action
  4. A policy expression

Explanation

A load-balancing virtual server holds the VIP and the load-balancing method, and it forwards client requests to the services or service groups bound to it. A service group is a container of backend servers, while policy expressions and responder actions are used for traffic policy decisions.

Question 3Networking architecture and Citrix ADC platform fundamentals

What is the primary purpose of the Citrix ADC NetScaler IP (NSIP) address?

  1. To bind SSL certificates for client-facing traffic
  2. To act as the default gateway for client traffic
  3. To provide the management address used for administration and configuration Correct answer.
  4. To serve as the source IP for backend server connections

Explanation

The NSIP is the appliance's management IP, used to reach the ADC for administration, configuration, and high-availability communication. Backend source addresses are handled by the SNIP, client-facing traffic terminates on VIPs, and certificates are bound to virtual servers.

Question 4Networking architecture and Citrix ADC platform fundamentals

A Citrix ADC must route backend-originated traffic to remote subnets. Which address type is normally used as the source for connections the appliance initiates to backend servers?

  1. The mapped IP (MIP) in all cases
  2. The NSIP
  3. The client source IP preserved by the virtual server
  4. The Subnet IP (SNIP) Correct answer.

Explanation

The SNIP is the address on a subnet connected to the backend servers and is typically used as the source when the ADC initiates connections to them, including health checks and server-side traffic. Using the NSIP for backend traffic is not the standard design, and the MIP is used in specific modes such as use-source-IP or certain reverse-proxy scenarios.

Question 5Networking architecture and Citrix ADC platform fundamentals

Which load-balancing method distributes requests based on the current number of active connections each service is handling?

  1. Response time
  2. Least connection Correct answer.
  3. Source IP hash
  4. Round robin

Explanation

Least connection selects the service with the fewest active connections at the time of the request, which naturally favors less-loaded servers. Round robin cycles through services regardless of load, source IP hash provides stickiness, and response time is a different, latency-based method.

Question 6Networking architecture and Citrix ADC platform fundamentals

An administrator wants clients from the same source network to consistently reach the same backend server without using cookies. Which persistence type best fits this requirement?

  1. RULE-based persistence using HTTP headers
  2. SOURCEIP persistence Correct answer.
  3. SSLSESSION persistence
  4. COOKIEINSERT persistence

Explanation

SOURCEIP persistence hashes the client source address so that clients from the same address consistently map to the same service. COOKIEINSERT and SSLSESSION rely on cookies or TLS session identifiers, and RULE-based persistence depends on a configured expression rather than the client network address.

Question 7Networking architecture and Citrix ADC platform fundamentals

In a Citrix ADC high-availability pair, which protocol and port are used for heartbeats and configuration synchronization between the nodes?

  1. VRRP on UDP 112
  2. The proprietary HA protocol on TCP 3003 Correct answer.
  3. SNMP on UDP 161
  4. RADIUS on UDP 1812

Explanation

Citrix ADC HA nodes exchange heartbeats and synchronize configuration over the proprietary HA protocol on TCP port 3003. VRRP is used for virtual router failover in some designs, but the node-to-node HA communication itself uses TCP 3003.

Question 8Networking architecture and Citrix ADC platform fundamentals

Which statement accurately describes the role of a Citrix ADC content switching virtual server?

  1. It inspects requests and forwards them to a target load-balancing virtual server based on a policy. Correct answer.
  2. It terminates SSL and offloads encryption from backend servers.
  3. It performs global server load balancing across data centers.
  4. It caches static content and serves it without contacting backends.

Explanation

A content switching virtual server evaluates policies against incoming requests and directs traffic to the appropriate target load-balancing virtual server, enabling URL- or host-based routing. SSL offload, GSLB, and caching are separate features that can be combined with content switching but are not its defining function.

Question 9Networking architecture and Citrix ADC platform fundamentals

A Citrix ADC is configured in one-arm mode. What does this deployment mode require of the network to ensure return traffic reaches the appliance?

  1. Client and server subnets must be directly connected to separate ADC interfaces.
  2. The upstream router must route client traffic to the VIP and return traffic must be directed back through the ADC. Correct answer.
  3. The backend servers must use the ADC as their default gateway.
  4. The ADC must be placed inline between the client and server with all traffic passing through it.

Explanation

In one-arm mode the ADC sits on a single network segment, so the upstream router must direct client traffic to the VIP and ensure that server responses return through the appliance, often via policy routing or gateway configuration. Inline mode places the ADC directly in the traffic path, and multi-interface designs are different topologies.

Question 10Networking architecture and Citrix ADC platform fundamentals

Which Citrix ADC feature allows a single virtual server to present multiple SSL certificates to clients so the correct certificate is chosen based on the requested hostname?

  1. SSL profile with HSTS enabled
  2. SSL session reuse
  3. SSL bridging
  4. SNI-enabled SSL virtual server with multiple certificate bindings Correct answer.

Explanation

Server Name Indication (SNI) lets a client indicate the requested hostname during the TLS handshake, and the ADC selects the matching certificate from multiple bindings on the same SSL virtual server. SSL bridging and session reuse affect how TLS is handled but do not select certificates by hostname.

Question 11Networking architecture and Citrix ADC platform fundamentals

What is the function of a Citrix ADC responder policy?

  1. It returns a configured response, such as a redirect, to matching traffic without forwarding it to a backend. Correct answer.
  2. It rewrites the source IP of client requests.
  3. It monitors backend server health.
  4. It selects a backend service based on load.

Explanation

A responder policy evaluates an expression and, when matched, executes a responder action such as a redirect or a fixed response, so the request never reaches a backend. Load selection, health monitoring, and source IP handling are performed by other ADC features.

Question 12Networking architecture and Citrix ADC platform fundamentals

An administrator needs to modify HTTP request headers before they reach backend servers. Which Citrix ADC feature is designed for this purpose?

  1. A monitor of type HTTP-ECV
  2. Responder policy with a DROP action
  3. Rewrite policy with an HTTP header action Correct answer.
  4. Content switching policy

Explanation

Rewrite policies act on requests or responses and can insert, delete, or replace HTTP headers before the traffic is forwarded. Responder policies generate their own responses, content switching selects a target virtual server, and monitors only check health.

Question 13Networking architecture and Citrix ADC platform fundamentals

Which Citrix ADC address type is used in a global server load balancing (GSLB) deployment to advertise the GSLB site's virtual server address to DNS clients?

  1. The GSLB service IP
  2. The NSIP
  3. The SNIP
  4. The GSLB site IP Correct answer.

Explanation

Each GSLB site has a site IP used for site-to-site communication, and the GSLB virtual server's address is returned to DNS clients as the resolution for the published name. The SNIP and NSIP are local appliance addresses, and a GSLB service represents a backend target within a site.

Question 14Networking architecture and Citrix ADC platform fundamentals

What does the Citrix ADC 'use source IP' (USIP) setting accomplish when enabled on a service?

  1. It forces all clients to use the same source IP.
  2. It preserves the client source IP in connections from the ADC to the backend server. Correct answer.
  3. It changes the VIP to the client address.
  4. It enables source IP persistence automatically.

Explanation

When USIP is enabled, the ADC uses the client's source IP for the connection it opens to the backend, so the server sees the real client address. It does not alter the client's address, change the VIP, or by itself enable persistence.

Question 15Networking architecture and Citrix ADC platform fundamentals

A Citrix ADC must forward client requests to backend servers while preserving the original destination IP. Which mode describes this behavior?

  1. Reverse proxy mode
  2. One-arm mode
  3. SSL bridging mode
  4. Transparent mode Correct answer.

Explanation

In transparent mode the ADC forwards traffic to the backend with the original destination IP intact, often requiring the backend to route return traffic through the appliance. Reverse proxy mode terminates the client connection and opens a new one, and SSL bridging and one-arm describe other aspects of deployment.

Question 16Networking architecture and Citrix ADC platform fundamentals

Which Citrix ADC component stores the configuration and is synchronized between nodes in a high-availability pair?

  1. The backend server's local configuration
  2. The ns.conf configuration file Correct answer.
  3. The DNS resolver cache
  4. The client's browser cache

Explanation

The appliance configuration is stored in ns.conf and is synchronized from the primary node to the secondary node in an HA pair. Backend, browser, and DNS caches are external and are not part of ADC configuration synchronization.

Question 17Networking architecture and Citrix ADC platform fundamentals

An administrator wants the ADC to insert the client IP address into an HTTP header sent to backend servers. Which approach is most appropriate?

  1. Bind a responder policy with a redirect action.
  2. Bind a rewrite policy with an insert_http_header action to the virtual server. Correct answer.
  3. Configure a content switching policy on the URL.
  4. Enable USIP on the service.

Explanation

A rewrite policy with an insert_http_header action adds a header containing the client IP to requests before they reach the backend. USIP changes the connection source address rather than adding a header, responder policies generate responses, and content switching selects a target virtual server.

Question 18Networking architecture and Citrix ADC platform fundamentals

Which statement best explains why a Subnet IP (SNIP) is required in a typical Citrix ADC deployment?

  1. It gives the appliance an address on the server subnet so it can communicate with backend servers. Correct answer.
  2. It terminates SSL connections from clients.
  3. It provides the management interface for administrators.
  4. It advertises routes to upstream routers via OSPF.

Explanation

The SNIP places the appliance on the same subnet as the backend servers, allowing it to reach them for load balancing and health checks. Management is handled by the NSIP, SSL termination by SSL virtual servers, and routing advertisement by dynamic routing features if configured.

Question 19Networking architecture and Citrix ADC platform fundamentals

A load-balancing virtual server is configured with the least connection method. One backend service has 10 active connections and another has 2. Which service receives the next new request?

  1. The service with 2 active connections Correct answer.
  2. Neither, because the virtual server is marked DOWN
  3. Both, because requests are duplicated
  4. The service with 10 active connections

Explanation

Least connection sends the next request to the service with the fewest active connections, so the service with 2 connections is selected. Round robin would ignore the counts, and the virtual server remains operational as long as at least one bound service is UP.

Question 20Networking architecture and Citrix ADC platform fundamentals

Which Citrix ADC feature is used to inspect and block malicious HTTP requests based on application-layer signatures?

  1. Link load balancing
  2. Content switching
  3. Application Firewall (AppFW) Correct answer.
  4. GSLB

Explanation

The Application Firewall inspects HTTP and HTTPS traffic against signatures and security policies to block attacks such as SQL injection and cross-site scripting. Content switching, GSLB, and link load balancing address routing and availability rather than application-layer attack detection.

Question 21Networking architecture and Citrix ADC platform fundamentals

In a Citrix ADC HA pair, what is the primary role of the secondary node?

  1. It terminates all SSL traffic for the pair.
  2. It actively serves client traffic in parallel with the primary.
  3. It monitors the primary and takes over the VIPs if the primary fails. Correct answer.
  4. It performs only configuration backups.

Explanation

In an active-passive HA pair, the secondary node monitors the primary and assumes ownership of the VIPs and other addresses if a failover occurs. It does not normally serve client traffic in parallel, and it is not limited to backups or SSL termination.

Question 22Networking architecture and Citrix ADC platform fundamentals

Which Citrix ADC policy type is evaluated to decide which target load-balancing virtual server should receive a request based on the requested URL?

  1. Responder policy
  2. Rewrite policy
  3. Authorization policy
  4. Content switching policy Correct answer.

Explanation

Content switching policies match attributes such as the URL or host and direct the request to a target load-balancing virtual server. Responder and rewrite policies modify or answer traffic, and authorization policies make access decisions.

Question 23Networking architecture and Citrix ADC platform fundamentals

A client connects to a Citrix ADC SSL virtual server that is configured for SSL offload. What happens to the traffic between the ADC and the backend servers in this configuration?

  1. It is dropped unless the backend supports SNI.
  2. It is re-encrypted using a different certificate.
  3. It remains encrypted with the client's TLS session.
  4. It is sent to the backend servers in clear text over HTTP. Correct answer.

Explanation

With SSL offload, the ADC terminates the client TLS session and forwards the request to the backend in clear text, which reduces encryption load on the servers. SSL bridging would re-encrypt traffic, and SNI is a front-end certificate selection mechanism, not a backend requirement for offload.

Question 24Networking architecture and Citrix ADC platform fundamentals

What is the purpose of a Citrix ADC service group?

  1. To group virtual servers for GSLB
  2. To group multiple backend servers and their services for simplified management and binding Correct answer.
  3. To group administrators by role
  4. To group policies by priority

Explanation

A service group is a container that holds multiple backend servers and their services, allowing a single binding to a virtual server and simplified management of many backends. It is not used for GSLB site grouping, policy priority, or administrative role grouping.

Question 25Networking topology, interfaces, VLANs, and routing

In a Citrix ADC deployment, which component is responsible for forwarding client requests to the appropriate service based on configured policies and load-balancing methods?

  1. Monitor
  2. Service group
  3. Policy expression
  4. Virtual server Correct answer.

Explanation

A virtual server is the client-facing entity on Citrix ADC that owns the VIP, evaluates policies, and selects a bound service to receive each connection. Services and service groups represent the backend servers, while monitors only track their health.

Question 26Networking topology, interfaces, VLANs, and routing

Which Citrix ADC mode must be enabled before you can configure multiple VLANs and their associated interfaces on the appliance?

  1. Layer 3 mode Correct answer.
  2. Use source IP mode
  3. MAC-based forwarding mode
  4. USIP mode

Explanation

Layer 3 mode allows the ADC to route between subnets and to host multiple VLANs with distinct IP interfaces. USIP and MAC-based forwarding affect address handling for backend connections, not the ability to define multiple VLANs.

Question 27Networking topology, interfaces, VLANs, and routing

A Citrix ADC has two interfaces in the same VLAN but only one is bound as tagged. What is the effect on traffic arriving untagged on the untagged interface?

  1. It is dropped because a VLAN can have only tagged members
  2. It is accepted and assigned to that VLAN Correct answer.
  3. It is accepted only if USIP is enabled
  4. It is forwarded to the default VLAN 1

Explanation

A VLAN may contain one untagged interface that accepts untagged frames and assigns them to that VLAN, plus any number of tagged interfaces. Tagged membership is required only for frames that carry an 802.1Q tag.

Question 28Networking topology, interfaces, VLANs, and routing

Which Citrix ADC feature lets you associate a set of VLANs with a single logical interface so that traffic can be routed across them without defining a separate IP address for every VLAN?

  1. Link aggregation
  2. VLAN binding to a channel Correct answer.
  3. Policy-based routing
  4. Net profile

Explanation

Binding multiple VLANs to a single channel (or interface) lets the appliance carry several VLANs over one logical link, with an IP address per VLAN as needed for routing. Link aggregation combines physical links for bandwidth and redundancy but does not by itself provide multi-VLAN routing.

Question 29Networking topology, interfaces, VLANs, and routing

On Citrix ADC, what does a route table entry with a next hop of a directly connected subnet's gateway accomplish when the appliance is in Layer 3 mode?

  1. It load balances traffic across services in the subnet
  2. It rewrites the destination IP to the gateway address
  3. It forwards matching traffic to that gateway for delivery to remote networks Correct answer.
  4. It applies a monitor to the destination subnet

Explanation

In Layer 3 mode the ADC consults its route table to decide where to send traffic whose destination is not local; the next hop is the gateway that can reach that network. Routing decisions are separate from load balancing and monitoring.

Question 30Networking topology, interfaces, VLANs, and routing

A client connects to a Citrix ADC virtual server, and the ADC must send backend traffic using its own subnet IP (SNIP) rather than the client IP. Which setting achieves this?

  1. Enable Layer 3 mode
  2. Enable MAC-based forwarding
  3. Enable Use Source IP
  4. Disable Use Source IP Correct answer.

Explanation

With Use Source IP disabled, the ADC sources backend connections from its own SNIP, which is the default behavior. Enabling USIP would preserve the client address instead, and MAC-based forwarding only affects L2 addressing.

Question 31Networking topology, interfaces, VLANs, and routing

Which statement accurately describes the purpose of a Citrix ADC SNIP address?

  1. It is the address clients connect to for the virtual server
  2. It is the address assigned to backend servers behind the ADC
  3. It is the address the ADC uses as the source for traffic it originates toward backend servers Correct answer.
  4. It is the address used for management access only

Explanation

A subnet IP (SNIP) is an address on the ADC used as the source for connections the appliance initiates toward servers, and it also supports routing in Layer 3 mode. The VIP is what clients target, and the NSIP is used for management.

Question 32Networking topology, interfaces, VLANs, and routing

In a Citrix ADC high-availability pair, which IP address remains reachable for management regardless of which node is active?

  1. The MIP of the active node
  2. The shared NSIP configured for the pair Correct answer.
  3. The NSIP of the active node
  4. The SNIP of the standby node

Explanation

An HA pair can share a single NSIP that stays reachable on whichever node is primary, simplifying management during failover. Each node also keeps its own NSIP, but the shared address is the stable management target.

Question 33Networking topology, interfaces, VLANs, and routing

Which Citrix ADC deployment mode places the appliance in the path of traffic so that clients connect directly to the ADC's VIP and the ADC proxies connections to servers?

  1. Reverse proxy mode Correct answer.
  2. One-arm mode with MAC-based forwarding
  3. Policy-based routing mode
  4. Transparent mode

Explanation

In reverse proxy mode clients terminate their connections at the ADC VIP, and the ADC opens separate connections to the backend servers. Transparent mode instead intercepts traffic destined for the servers without changing the client's target address.

Question 34Networking topology, interfaces, VLANs, and routing

A Citrix ADC in transparent mode must forward client traffic to backend servers while preserving the original destination address. Which configuration is essential for this behavior?

  1. A content switching policy
  2. An SSL profile on the virtual server
  3. A virtual server bound to the backend services
  4. A SNIP on the server subnet and a route to the servers Correct answer.

Explanation

Transparent mode relies on the ADC having an address on the server network (SNIP) and a route so it can forward traffic to the real servers while the destination IP stays intact. A virtual server would normally imply reverse proxy termination.

Question 35Networking topology, interfaces, VLANs, and routing

Which Citrix ADC setting determines whether the appliance responds to ARP requests for a VIP from all interfaces or only from interfaces in the VIP's VLAN?

  1. Use Source IP
  2. MAC-based forwarding
  3. Layer 3 mode
  4. ARP response control Correct answer.

Explanation

ARP response control governs how the ADC answers ARP requests for its owned addresses, including whether replies are limited to the relevant VLAN interfaces. The other settings affect source addressing or routing, not ARP reply scope.

Question 36Networking topology, interfaces, VLANs, and routing

A Citrix ADC has VLAN 10 (untagged interface 1/1) and VLAN 20 (tagged interface 1/2). A frame arrives on 1/2 with 802.1Q tag 20. How is it handled?

  1. It is assigned to VLAN 20 Correct answer.
  2. It is flooded to all VLANs
  3. It is dropped because 1/2 is not in VLAN 10
  4. It is assigned to VLAN 10

Explanation

A tagged frame arriving on an interface bound as tagged to VLAN 20 is associated with VLAN 20 based on its tag. Untagged frames on 1/1 would instead map to VLAN 10.

Question 37Networking topology, interfaces, VLANs, and routing

Which Citrix ADC object would you configure to define a range of backend server IP addresses that share the same port and settings and are load balanced together?

  1. Net profile
  2. Virtual server
  3. Service group Correct answer.
  4. Monitor

Explanation

A service group holds multiple services that share port and configuration, and it can be bound to a virtual server for load balancing. A virtual server is the client-facing target, while monitors check health.

Question 38Networking topology, interfaces, VLANs, and routing

What is the primary function of a Citrix ADC monitor bound to a service?

  1. To encrypt traffic between the ADC and the server
  2. To periodically probe the server and mark the service up or down Correct answer.
  3. To route client traffic to the correct VLAN
  4. To translate the destination IP of client requests

Explanation

Monitors send periodic probes to backend servers and change the service state based on the response, so the virtual server can avoid unhealthy servers. Encryption, routing, and address translation are handled by other features.

Question 39Networking topology, interfaces, VLANs, and routing

An administrator wants client requests to a single VIP to be directed to different backend server sets based on the requested URL path. Which Citrix ADC feature provides this?

  1. Global server load balancing
  2. Link aggregation
  3. Policy-based routing
  4. Content switching Correct answer.

Explanation

Content switching uses policies to examine request attributes such as the URL path and forward the connection to the appropriate target virtual server or service. Link aggregation and GSLB address different concerns.

Question 40Networking topology, interfaces, VLANs, and routing

Which statement best describes the role of a Citrix ADC net profile?

  1. It selects the load-balancing method for a virtual server
  2. It defines the source IP address used for backend connections Correct answer.
  3. It assigns VLAN membership to interfaces
  4. It configures health monitoring intervals

Explanation

A net profile specifies source IP behavior, such as using a particular SNIP or a client IP, for connections the ADC makes to backend servers. It does not affect VLAN membership, monitoring, or the load-balancing algorithm.

Question 41Networking topology, interfaces, VLANs, and routing

On Citrix ADC, which load-balancing method distributes requests to services in a fixed sequence, cycling through the available servers?

  1. Least connection
  2. Source IP hash
  3. Round robin Correct answer.
  4. Least response time

Explanation

Round robin sends each new request to the next service in order, cycling through the list. Least connection and least response time choose based on current load or latency, and source IP hash selects based on a client-address hash.

Question 42Networking topology, interfaces, VLANs, and routing

A Citrix ADC must keep a client's requests going to the same backend server across multiple connections. Which feature accomplishes this?

  1. Policy-based routing
  2. Link aggregation
  3. Content switching
  4. Persistence Correct answer.

Explanation

Persistence, such as source IP or cookie-based persistence, ties a client to a specific service for a period so subsequent requests reach the same server. Content switching selects targets by content, not session affinity.

Question 43Networking topology, interfaces, VLANs, and routing

Which Citrix ADC address type is used primarily for management access such as GUI, CLI, and SNMP?

  1. VIP
  2. NSIP Correct answer.
  3. SNIP
  4. MIP

Explanation

The NSIP is the management address of the appliance and is used for GUI, CLI, and SNMP access. The VIP serves client traffic, and the SNIP is used for server-side and routed traffic.

Question 44Networking topology, interfaces, VLANs, and routing

In a Citrix ADC HA pair configured for active-active operation, how is traffic typically distributed between the two nodes?

  1. Each node handles traffic for its own VIPs and they share state Correct answer.
  2. Only the secondary node handles traffic
  3. All traffic goes to the primary node until it fails
  4. Traffic is split by client MAC address

Explanation

In active-active HA, both nodes actively process traffic, each handling its own virtual servers while sharing session and persistence state so failover is seamless. Active-passive would send all traffic to the primary until failure.

Question 45Networking topology, interfaces, VLANs, and routing

Which Citrix ADC configuration allows the appliance to route traffic between two VLANs that each have their own IP interface?

  1. Enabling Layer 3 mode and configuring an IP address per VLAN Correct answer.
  2. Enabling MAC-based forwarding
  3. Binding both VLANs to a single interface as tagged
  4. Configuring a single SNIP shared by both VLANs

Explanation

Routing between VLANs requires Layer 3 mode and an IP interface on each VLAN so the ADC can forward packets between subnets. Tagging both VLANs to one interface provides L2 trunking but not routing by itself.

Question 46Networking topology, interfaces, VLANs, and routing

What happens when a Citrix ADC service is marked DOWN by its bound monitor?

  1. The virtual server stops accepting client connections entirely
  2. The service is removed from load-balancing selection until it recovers Correct answer.
  3. The service's IP address is reassigned to another service
  4. The monitor is automatically disabled

Explanation

When a monitor marks a service down, the virtual server excludes it from selection so traffic goes to healthy services. The virtual server continues to accept clients as long as at least one bound service is up.

Question 47Networking topology, interfaces, VLANs, and routing

Which Citrix ADC feature lets you define a policy that routes traffic to a specific next hop based on the source address, independent of the destination-based route table?

  1. Policy-based routing Correct answer.
  2. Net profile
  3. Persistence
  4. Content switching

Explanation

Policy-based routing evaluates policies such as source address and directs matching traffic to a chosen next hop, overriding the normal destination-based lookup. Content switching selects backend targets by request content, not next-hop routing.

Question 48Networking topology, interfaces, VLANs, and routing

What is the effect of binding a VLAN to an interface as untagged on a Citrix ADC?

  1. Frames on that interface must carry an 802.1Q tag
  2. The VLAN is automatically assigned to all interfaces
  3. Untagged frames on that interface are associated with that VLAN Correct answer.
  4. The interface is disabled for routing

Explanation

An untagged binding means frames arriving without an 802.1Q tag on that interface are treated as belonging to the bound VLAN. Tagged bindings are used when frames carry VLAN tags.

Question 49Load balancing virtual servers, services, and monitors

A NetScaler administrator wants a load balancing virtual server to accept traffic only on TCP port 443 and to silently drop connections on all other ports. Which virtual server setting controls this behavior?

  1. The service group member weight
  2. The virtual server IP address and port binding Correct answer.
  3. The monitor interval configured on the service
  4. The persistence type assigned to the virtual server

Explanation

A load balancing virtual server is defined by an IP address plus port (or a wildcard port), and it only listens on the configured address/port combination. Persistence, weights, and monitor intervals affect how requests are distributed or health-checked, not which port is opened.

Question 50Load balancing virtual servers, services, and monitors

Which load balancing method distributes requests to services in strict rotation, ignoring current server load?

  1. Round Robin Correct answer.
  2. Least Response Time
  3. Least Connection
  4. Custom Load

Explanation

Round Robin cycles through the bound services in order regardless of load, which is simple but ignores server capacity. The other methods consider connection counts, response time, or measured load when selecting a service.