1Y0-A28 · Question #107
Some SSL certificate files may be missing from a NetScaler appliance. Which directory should an engineer check to determine which files are missing?
The correct answer is A. /nsconfig/ssl. Citrix 1Y0-A28 Exam
Question
Some SSL certificate files may be missing from a NetScaler appliance. Which directory should an engineer check to determine which files are missing?
Options
- A/nsconfig/ssl
- B/nsconfig/ssh
- Cflash/nsconfig/
- D/var/netscaler/ssl/
How the community answered
(42 responses)- A79% (33)
- B12% (5)
- C5% (2)
- D5% (2)
Explanation
Citrix 1Y0-A28 Exam
Topics
Community Discussion
5
Brenda K.Dec 15, 2025A is your answer, and you should be clocking this one in under 20 seconds. On NetScaler, all SSL certificate and key files live in /nsconfig/ssl, and that is the first place any engineer opens when a cert is reported missing or when the appliance throws SSL-related errors on boot. Option D trips up a lot of people because /var/netscaler/ssl/ sounds plausible, but that path does not hold the operational cert store the way /nsconfig/ssl does. B is the SSH directory, completely different protocol, and C has the slashes backwards, which is a dead giveaway that it is a trap. Mark it, move on, bank that time for the multi-step scenario questions later in the set.
Imani T.Dec 15, 2025Good breakdown, and the memory hook I give people is that /nsconfig/ persists across reboots because it sits on the config partition, so if you just tie "cert store equals config partition equals /nsconfig/ssl" in your head you will never second-guess yourself on any NetScaler SSL path question again.
Hiroshi T.Nov 29, 2025I initially second-guessed myself and thought /var/netscaler/ssl/ might be where the runtime SSL files live, but the Citrix NetScaler documentation is clear that /nsconfig/ssl is the persistent configuration directory where certificate and key files are stored and where you should audit for missing files. The /var paths are transient and the /nsconfig partition is what survives reboots, which is what matters when you are tracking down missing certs.
Brenda K.Nov 30, 2025Hiroshi is right that /nsconfig/ssl is your persistent home base, but do not sleep on also checking /var/nslog during an active incident since cert-load errors surface there and can tell you exactly when a missing file broke things before you even open the config.
Imani T.Nov 26, 2025I'll be honest, I almost picked D because /var/netscaler/ssl/ sounds like where a running system would store cert files, but then I remembered that NetScaler keeps its persistent config and SSL certs in /nsconfig/ssl so they survive reboots. That directory is where you go when files are missing after a restore or upgrade, not the runtime location.