1Y0-240 Citrix ADC 12 Essentials and Traffic Management Resource Guide Part 1

By Jeff Rohrer, on October 14, 2019

Section 1: Getting Started

1.01

Objective: Understand the Citrix ADC architecture and functionality

Source: What is an Application Delivery Controller (ADC)?
https://www.citrix.com/glossary/adc.html

Source: Unified Gateway FAQ
https://docs.citrix.com/en-us/citrix-gateway/12-1/unified-gateway/unified-gateway-FAQ.html

1.02

Objective: Identify Citrix ADC hardware and its components.

Source: Choosing the right platform and edition options
https://www.citrix.com/products/citrix-adc/platforms.html

Source: Citrix Networking: A license to thrill
https://www.citrix.com/blogs/2018/06/20/citrix-networking-a-licence-to-thrill/

1.03

Objective: Determine the deployment and licensing options for a given environment.

Source: Citrix Application Delivery Controller (ADC) Data Sheet
https://www.citrix.com/content/dam/citrix/en_us/documents/products-solutions/netscaler-data-sheet-full.pdf

Source: Citrix Gateway Universal License
https://docs.citrix.com/en-us/netscaler/12/licensing/netscaler-gateway-universal-license.html

Source: Configuring and Managing Citrix NetScaler Instances
https://docs.citrix.com/en-us/sdx/11-1/configuring-managing-netscaler-instance.html

1.04

Objective: Determine how to setup and configure Citrix ADC.

Source: Clock synchronization
https://docs.citrix.com/en-us/netscaler/12/system/basic-operations/configuring-clock-sychronization.html

Source: Initial configuration
https://docs.citrix.com/en-us/citrix-hardware-platforms/mpx/netscaler-initial-configuration.html

Section 2: Basic Networking

2.01

Objective: Determine which networking topology to use with Citrix ADC based on given requirements.

Source: Configuring Link Aggregation
https://docs.citrix.com/en-us/netscaler/12/networking/interfaces/configuring-link-aggregation.html#link-redundancy-using-lacp-channels

2.02

Objective: Determine which interfaces, IP address types, and VLANS to use during configuration of a given environment.

Source: Configuring VLANs on Multiple Subnets
https://docs.citrix.com/en-us/netscaler/12/networking/interfaces/configuring-vlans/configuring-vlans-on-multiple-subnets.html

Source: Understanding VLANs
https://docs.citrix.com/en-us/netscaler/12/networking/interfaces/understanding-vlans.html

https://docs.citrix.com/en-us/netscaler/12/networking/interfaces/configuring-vlans/configuring-multiple-vlans-with-802-1q-tagging.html

Source: Configuring VLANs on a Single Subnet
https://docs.citrix.com/en-us/netscaler/12/networking/interfaces/configuring-vlans/configuring-vlans-on-a-single-subnet.html

Source: Configuring MAC-Based Forwarding
https://docs.citrix.com/en-us/netscaler/12/networking/interfaces/configuring-mac-based-forwarding.html

2.03

Objective: Identify which Citrix ADC routing and traffic-handling mode should be used for a given environment.

Source: Packet Forwarding Modes
https://docs.citrix.com/en-us/netscaler/12/getting-started-with-netscaler/configure-system-settings/configure-modes-packet-forwarding.html

2.04

Objective: Determine how to configure Access Control Lists based on given requirements.

Source: Access Control Lists
https://docs.citrix.com/en-us/netscaler/12/networking/access-control-lists-acls.html

Source: Extended ACLs and Extended ACL6s
https://docs.citrix.com/en-us/netscaler/12/networking/access-control-lists-acls/extended-acls-and-extended-acl6s.html

Section 3: Citrix ADC Platforms

3.01

Objective: Determine which hardware to use (Citrix ADC platforms MPX, VPX, CPX or SDX) when given a use case.

Source: Choosing the right platform and edition options
https://www.citrix.com/products/citrix-adc/platforms.html

Source: Lights out management port of the Citrix ADC SDX appliance
https://docs.citrix.com/en-us/citrix-hardware-platforms/sdx/lights-out-management-port.html

Source: Deploying a NetScaler CPX Instance in Docker
https://docs.citrix.com/en-us/citrix-adc-cpx/12/deploy-using-docker-image-file.html

3.02

Objective: Identify the pieces of the multi-tenant structure for Citrix ADC SDX.

Source: Allowing L2 Mode on a Citrix NetScaler instance
https://docs.citrix.com/en-us/sdx/12/configuring-managing-netscaler-instance/configuring-l2-mode-on-netscaler-instance.html

3.03

Objective: Determine the specific function of the SDX when given various SDX interface allocation scenarios.

Source: Bandwidth Metering in SDX
https://docs.citrix.com/en-us/sdx/12/bandwidth-metering-in-sdx.html

Source: Allowing L2 Mode on a Citrix NetScaler instance
https://docs.citrix.com/en-us/sdx/12/configuring-managing-netscaler-instance/configuring-l2-mode-on-netscaler-instance.html

Section 4: High Availability

4.01

Objective: Understand how the high availability (HA) process works on Citrix ADC.

Source: Upgrade a high availability pair
https://docs.citrix.com/en-us/netscaler/12/upgrade-downgrade-netscaler-appliance/upgrade-downgrade-HA-pair.html

Source: Troubleshooting
https://docs.citrix.com/en-us/netscaler/12/upgrade-downgrade-netscaler-appliance/troubleshooting.html

4.02

Objective: Determine the appropriate Citrix ADC high availability configuration options, including advanced settings, given a description of an environment.

Source: Forcing the secondary node to stay secondary
https://docs.citrix.com/en-us/netscaler/12/system/high-availability-introduction/forcing-a-secondary-node-to-stay-secondary.html

Source: Forcing the primary node to stay primary
https://docs.citrix.com/en-us/netscaler/12/system/high-availability-introduction/forcing-the-primary-node-stay-primary.html

4.03

Objective: Determine which method should be used to manage a Citrix ADC high availability configuration given a scenario.

Source: Configure high availability
https://docs.citrix.com/en-us/netscaler/12/getting-started-with-netscaler/configure-ha-first-time.html#disable-high-availability-monitoring-for-unused-interfaces

Source: Configure high availability
https://docs.citrix.com/en-us/netscaler/12/getting-started-with-netscaler/configure-ha-first-time.html

Source: Access a NetScaler
https://docs.citrix.com/en-us/netscaler/12/getting-started-with-netscaler/accessing-netscaler.html

Source: Configuring fail-safe mode
https://docs.citrix.com/en-us/netscaler/12/system/high-availability-introduction/configuring-fail-safe-high-availability.html

4.04

Objective: Determine how to resolve common high availability issues.

Source: High Availability
https://docs.citrix.com/en-us/netscaler/12/networking-faq/faq-ha.html

Source: Configuring VMACs on an Interface
https://docs.citrix.com/en-us/sdx/12/configuring-managing-netscaler-instance/configuring-vmac-on-interface.html

Source: High Availability
https://docs.citrix.com/en-us/netscaler/12/networking-faq/faq-ha.html

Section 5: Load Balancing

5.01

Objective: Identify the Citrix ADC load-balancing role of entities.

Source: Token Load Balancing Method
https://support.citrix.com/article/CTX220374

Source: Least response time method
https://docs.citrix.com/en-us/netscaler/12/load-balancing/load-balancing-customizing-algorithms/leastresponsetime-method.html

Source: Assign weights to services
https://docs.citrix.com/en-us/netscaler/12/load-balancing/load-balancing-customizing/assign-weight-services.html

5.02

Objective: Determine when to use the different load-balancing and monitoring options available on the Citrix ADC.

Source: RADIUS service monitoring
https://docs.citrix.com/en-us/netscaler/12/load-balancing/load-balancing-builtin-monitors/monitor-radius-services.html

Source: The no-monitor option for services
https://docs.citrix.com/en-us/netscaler/12/load-balancing/load-balancing-advanced-settings/no-monitor-service.html

Source: Source IP address persistence
https://docs.citrix.com/en-us/netscaler/12/load-balancing/load-balancing-persistence/source-ip-persistence.html

Source: Hashing methods
https://docs.citrix.com/en-us/netscaler/12/load-balancing/load-balancing-customizing-algorithms/hashing-methods.html

Source: TCP-based application monitoring
https://docs.citrix.com/en-us/netscaler/12/load-balancing/load-balancing-builtin-monitors/monitor-tcp.html

5.03

Objective: Determine how to customize monitoring and service options based on a scenario.

Source: Understand user monitors
https://docs.citrix.com/en-us/netscaler/12/load-balancing/load-balancing-custom-monitors/understand-user-monitors.html

5.04

Objective: Determine which method to use to protect and troubleshoot a Citrix ADC load-balancing configuration based on a given scenario.

Source: Source IP address persistence
https://docs.citrix.com/en-us/netscaler/12/load-balancing/load-balancing-persistence/source-ip-persistence.html

Source: How to Obtain Performance Statistics and Event Logs from NetScaler
https://support.citrix.com/article/CTX113341

Source: Gradually stepping up the load on a new service with virtual server–level slow start
https://docs.citrix.com/en-us/netscaler/12/load-balancing/load-balancing-advanced-settings/slow-start-service.html

Section 6: SSL Offload

6.01

Objective: Determine the process and requirement for creating and uploading SSL Certificates.

Source: Install, link, and update certificates
https://docs.citrix.com/en-us/citrix-adc/12-1/ssl/ssl-certificates/add-group-certs.html

6.02

Objective: Determine how to create SSL virtual servers.

Source: SSL offloading configuration
https://docs.citrix.com/en-us/netscaler/12/ssl/config-ssloffloading.html

6.03

Objective: Determine which SSL deployment to use for a given environment.

Source: Use case: Making enterprise internet access compliant and secure
https://docs.citrix.com/en-us/netscaler-secure-web-gateway/12/use-case-making-enterprise-internet-access-compliant-and-secure.html

Source: Managing SSL Certificates in a Double-Hop DMZ Deployment
https://docs.citrix.com/en-us/citrix-gateway/12-1/double-hop-dmz/ng-double-dmz-install-con/ng-double-dmz-install-ssl-certificates-tsk.html

6.04

Objective: Determine which Citrix ADC configuration settings can prevent a given SSL Exploit.

Source: Scoring an A+ at SSLlabs.com with Citrix NetScaler – 2016 update
https://www.citrix.com/blogs/2016/06/09/scoring-an-a-at-ssllabs-com-with-citrix-netscaler-2016-update/

Source: Strict Transport Security (STS or HSTS) with Citrix NetScaler and Access Gateway Enterprise
https://www.citrix.com/blogs/2010/09/10/strict-transport-security-sts-or-hsts-with-citrix-netscaler-and-access-gateway-enterprise/

Source: Configure "-denySSLReneg" Parameter to Disable Client Side and Server Side SSL Renegotiation on NetScaler
https://support.citrix.com/article/CTX123680

Source: Scoring an A+ at SSLlabs.com with Citrix NetScaler – 2016 update
https://www.citrix.com/blogs/2016/06/09/scoring-an-a-at-ssllabs-com-with-citrix-netscaler-2016-update/

Section 7: Securing the Citrix ADC

7.01

Objective: Determine how to utilize authentication, authorization, and auditing.

Source: How AAA works
https://docs.citrix.com/en-us/netscaler/12/aaa-tm/ns-aaa-how-it-works-con.html

Source: Troubleshooting Authentication Issues Through NetScaler or NetScaler Gateway with aaad.debug Module
https://support.citrix.com/article/CTX114999

7.02

Objective: Determine how to configure authentication and authorization on Citrix ADC.

Source: Configuring users and groups
https://docs.citrix.com/en-us/netscaler/12/aaa-tm/ns-aaa-users-and-groups-tsk.html

Source: Configuring Two-Factor Authentication
https://docs.citrix.com/en-us/netscaler-gateway/12/authentication-authorization/configure-multifactor-authentication/ng-multifactor-auth-double-source-tsk.html

Source: Configuring DNS
https://docs.citrix.com/en-us/netscaler/12/aaa-tm/authentication-virtual-server/ns-aaa-setup-dns-con.html

7.03

Objective: Determine the components and steps required to secure a Citrix ADC configuration.

Source: Configuring users, user groups, and command policies
https://docs.citrix.com/en-us/netscaler/12/system/ns-ag-aa-intro-wrapper-con/ns-ag-aa-config-users-and-grps-tsk.html

Source: Configuring SmartControl
https://docs.citrix.com/en-us/netscaler-gateway/12/integrate-web-interface-apps/smart-control.html

Source: HDX Insight Integration with Director
https://www.citrix.com/blogs/2013/09/19/hdx-insight-integration-with-director/

Source: FAQ: XenMobile 10 and NetScaler Gateway Integration
https://support.citrix.com/article/CTX200430#Q4

Source: Active/Active GSLB for XenDesktop – A Practical Approach (Part 1)
https://www.citrix.com/blogs/2014/04/09/activeactive-gslb-for-xendesktop-a-practical-approach-part-1/