What is a recommended practice for managing a Citrix ADC high availability (HA) pair to ensure that management changes are always made on the primary Citrix ADC?
What is a recommended practice for managing a Citrix ADC high availability (HA) pair to ensure that management changes are always made on the primary Citrix ADC?
To ensure that management changes are always made on the primary Citrix ADC in a high availability pair, it is recommended to connect to both Citrix ADCs to determine which one is the primary. By doing this, you can directly identify the primary node and make the necessary management changes, reducing the risk of configuration mismatches or errors that could occur if changes were mistakenly made on the secondary node.
C is probably always done, but the question says "recommended pratice" which means "best practice" and enable a SNIP for management it's not considered a best practice. Because of that I will go with B. https://jgspiers.com/secure-management-access-netscaler-and-create-unique-certificates-in-highly-available-setup/#:~:text=As%20a%20best,address%20of%20NetScaler. https://training.citrix.com/public/Exam%20Prep%20Guides/231/1Y0-231_Exam_Preparation_Guide_v01.pdf In this link search for "Sample Question 2" and check it. It comes from Citrix itself.
https://www.carlstalhood.com/system-configuration-citrix-adc-13/#:~:text=However%2C%20enabling%20management%20access%20on%20the%20SNIP%20can%20be%20a%20security%20risk%2C%20especially%20if%20this%20is%20a%20SNIP%20for%20a%20DMZ%20network.
This is a sample question from the Citrix Exam prep guide. They note the correct answer as B. https://training.citrix.com/public/Exam%20Prep%20Guides/231/1Y0-231_Exam_Preparation_Guide_v01.pdf
B is the good one Source for citrix site so 100% is correct answer: https://support.citrix.com/article/CTX111531
Valid C
C SNIP is correct. https://www.jgspiers.com/netscaler-management-via-snip/
https://support.citrix.com/article/CTX111531 How to configure management on SNIP
Is example question from citrix
This is a tough one, I am watching the 1y0-231 series from Citrix. Little outdated, but they have a screenshot that states "it is a best practice to use a SNIP for management of the HA pairt, to ensure management is always performed on the primary system" But I don't see this referenced much anymore myself. But here you will see that they have management access disabled on the SNIP https://docs.netscaler.com/en-us/citrix-adc/current-release/networking/best-practices-network-configurations.html But as discjockeyjoey posted this https://training.citrix.com/public/Exam%20Prep%20Guides/231/1Y0-231_Exam_Preparation_Guide_v01.pdf that is 150% spot on. If it's in the material their, then that is the answer.