Scenario: A Citrix Architect needs to deploy SAML integration between NetScaler (Identity Provider) and ShareFile (Service Provider). The design requirements for SAML setup are as follows:
NetScaler must be deployed as the Identity Provider (IDP).
ShareFile server must be deployed as the SAML Service Provider (SP).
The users in domain workspacelab.com must be able to perform Single Sign-on to ShareFile after authenticating at the NetScaler.
The User ID must be UserPrincipalName.
The User ID and Password must be evaluated by NetScaler against the Active Directory servers SFO-ADS-001 and SFO-ADS-002.
After successful authentication, NetScaler creates a SAML Assertion and passes it back to ShareFile.
Single Sign-on must be performed.
SHA 1 algorithm must be utilized.
The verification environment details are as follows:
Domain Name: workspacelab.com
NetScaler AAA virtual server URL https://auth.workspacelab.com
ShareFile URL https://sharefile.workspacelab.com
Which SAML IDP action will meet the design requirements?

• A. add authentication samIIdPProfile SAMI-IDP -samISPCertName Cert_1 -samIIdPCertName Cert_2 -assertionConsimerServiceURL https://sharefile.workspacelab.com/saml/acs" -samIIssuerName auth.workspacelab.com -signatureAlg RSA-SHA1-digestMethod SHA1 -encryptAssertion ON -serviceProviderID sharefile.workspacelab.com
• B. add authentication samIIdPProfile SAMI-IDP -samISPCertName Cert_1 -samIIdPCertName Cert_2 -assertionConsimerServiceURL https://sharefile.workspacelab.com/saml/acs" -samIIssuerName sharefile.workspacelab.com -signatureAlg RSA-SHA1 -digestMethod SHA1 -encryptAssertion ON -serviceProviderID sharefile.workspacelab.com
• C. add authentication samIIdPProfile SAMI-IDP -samISPCertName Cert_1 -samIIdPCertName Cert_2 -assertionConsimerServiceURL https://sharefile.workspacelab.com/saml/acs" -samIIssuerName sharefile.workspacelab.com -signatureAlg RSA-SHA256 -digestMethod SHA256 -serviceProviderID sharefile.workspacelab.com
• D. add authentication samIIdPProfile SAMI-IDP -samISPCertName Cert_1 -samIIdPCertName Cert_2 -assertionConsimerServiceURL "https://auth.workspacelab.com/samIIssueName auth.workspacelab.com -signatureAlg RSA-SHA256-digestMethod SHA256-encryptAssertion ON -serviceProviderUD sharefile.workspacelad.com

A Citrix Architect can execute a configuration job using a DeployMasterConfiguration template on a NetScaler_________deployed_________. (Choose the correct option to complete sentence.)

• A. CPX; as part of a high availability pair
• B. CPX; as a stand alone device
• C. SDX; with no partitions as a stand alone device
• D. MPX; as part of the cluster but Cluster IP is NOT configured
• E. SDX; with less than 6 partitions and dedicated management interface

Scenario: A Citrix Engineer is asked by management at the workspacelab organization to review their existing Citrix ADC Configurations and make the necessary upgrades. The architect recommends small changes to the pre-existing Citrix ADC configuration. Currently, the Citrix ADC MPX devices are configured in high-availability pair, and the outbound traffic is load balanced between two internet service providers (ISPs), however, the failover is NOT happening correctly. The following requirements were discussed during the design requirement phase:
The return traffic for a specific flow should be routed through the same path while using Link Load Balancing.
The link should fail over even if the ISP router is up and intermediary devices to an ISP router are down.
Traffic going through one ISP router should fail over to the secondary ISP, and the traffic should not flow through both routers simultaneously.
What should the architect configure with Link Load Balancing LLB) to meet the requirement?

• A. Reverse NAT.
• B. Least packets load balancing method
• C. Inverse NAT
• D. Destination IP hash load balancing method

A Citrix Architect can execute a configuration job using a DeployMasterConfiguration template on a Citrix ADC____deployed________. (Choose the correct option to complete sentence:

• A. MPX; In high availability
• B. MPX; as a cluster Instance
• C. CPX: without partitions
• D. SDX; with more than 6 partitions
• E. CPX; In high availability

Scenario: A Citrix Architect has met with a team of Workspacelab members for a design discussion. They have captured the following requirements for the Citrix ADC design project:
Multi-factor authentication must be configured for the Citrix Gateway virtual server.
The Citrix Gateway virtual server is integrated with the Citrix Virtual Apps and Desktops environment.
Load balancing must be configured for the StoreFront server.
Authentication must be deployed for the users from the workspacelab.com and vendorlab.com domains.
The logon page must have the workspacelab logo on it.
Certificate verification must be performed to identify and extract the username.
The client certificate must have UserPrincipalName as a subject.
All the managed workstations for the workspacelab users must have the client identification certificate installed on them.
The workspacelab users connecting from the internal network should be authenticated using LDAP.
The workspacelab users connecting from the external network should be authenticated using LDAP and RADIUS.
The vendorlab users should be authenticated using Active Directory Federation Service.
The user credentials must NOT be shared between workspacelab and vendorlab.
Single Sign-on must be performed between StoreFront and Citrix Gateway.
A domain drop down list must be provided if the user connects to the Citrix Gateway virtual server externally.
The domain of the user connecting externally must be identified using the domain selected from the domain drop down list.
Which authentication policy must the architect execute first to meet the design requirements?

• A. Cert
• B. RADIUS
• C. LDAP UPN
• D. SAML