Citrix 1Y0-A28 考試概覽:

認證廠商:	Citrix
考試名稱:	Citrix 實作 NetScaler 10 用於網路與流量最佳化
考試代碼:	1Y0-A28
實際考試題數:	60-70
考試時間:	90-120
及格分數:	約 62%
相關認證:	Citrix Certified Associate - Networking (CCA-N) Citrix Certified Professional - Networking (CCP-N)
考試費用:	200 美元（僅供參考，依地區有所差異）
支援語言:	English
證照有效期限:	3 年
考試形式:	情境式題目, 選擇題
範例考題:	Citrix 1Y0-A28 範例考題
考試方式:	線上遠端監考或授權考試中心應考
必備條件:	建議具備網路基礎知識，以及 Citrix NetScaler (ADC) 概念的基礎認識
官方大綱網址:	https://www.citrix.com/training-and-certifications.html

Citrix 1Y0-A28 考試大綱主題:

章節	目標
主題 1: NetScaler 架構與元件	- 流量流向與處理邏輯 - 部署模式（實體、虛擬、雲端） - NetScaler 系統架構
主題 2: 資安與存取控制	- 應用程式防火牆概念 - SSL 卸載與憑證管理 - 身分驗證與授權原則
主題 3: 進階功能與故障排除	- 記錄與監控工具 - GSLB (Global Server Load Balancing) - 常見設定問題與解決方法
主題 4: 高可用性與備援機制	- 狀態同步 - 故障轉移機制 - 高可用性配對設定
主題 5: 負載平衡	- 持續性連線與健康狀態監控 - 服務與服務群組設定 - 負載平衡方式與演算法
主題 6: 流量最佳化與加速	- HTTP 最佳化技術 - 壓縮與 TCP 最佳化 - 快取機制

最新的 CCA 1Y0-A28 免費考試真題：

問題 #1

What type of protocol does AppFlow use for reporting?

A. HTTP
B. UDP
C. TCP
D. SSL_TCP

問題 #2

Scenario: A network engineer has installed a NetScaler system into their corporate DMZ and would like to provide access to a web server on the internal LAN. The web server will be accessed by external users through the Netscaler. The firewall administrator has opened the relevant ports required on the external and the internal firewall. The engineer notices that the virtual server and services representing the web server are down and the
internal web server does NOT appear accessible from the NetScaler. What could be the cause of this?

A. USIP is not enabled.
B. A URL rewrite policy is not created.
C. Client IP Insertion is not enabled.
D. A SNIP address has not been added.

問題 #3

Scenario: Company Inc. wants to modify the HTTP
Server header so that unauthorized users and malicious code CANNOT use the header to identify the software that the HTTP server uses. Which two actions can the engineer take to meet the needs of the scenario? (Choose two.)

A. Add an HTTP Server Type on the Client Request.
B. Delete the HTTP Server Type on the Server Response.
C. Replace the HTTP Server Type on the Client Request.
D. Mask the HTTP Server Type on the Server Response.

問題 #4

A network engineer has enabled USIP and USNIP and set a unique IP address as the source IP using the proxyIP parameter on an INAT policy. Which is the correct order of precedence for the IP addresses?

A. Unique IP-USIP-MIP-Error
B. USIP-unique IP-USNIP-MIP-Error
C. USIP-USNIP-MIP-Unique IP-Error
D. USIP-Unique IP-MIP-USNIP-Error

問題 #5

Scenario: A NetScaler engineer needs to enable access to some web servers running on an IPv6-only network. The clients connecting
the services are on an IPv4 network. The engineer has already enabled IPv6 on the NetScaler. What does the engineer need to do in order to provide access to the services on the IPv6 network?

A. Create an IPv6 ACL and a IPv4 virtual server and bind the ACL to the virtual server.
B. Create an IPv6 tunnel and a IPv4 virtual server.
C. Configure an IPv6 VLAN and bind the required interface.
D. Create a IPv4 virtual server and bind the service group to it.

問題與答案：

問題 #1
答案： B

問題 #2
答案： D

問題 #3
答案： B,D

問題 #4
答案： B

問題 #5
答案： D