Which tool can be used to verify that a policy is bound and shows the number of hits?

• A. nscollect
• B. nstrace.sh
• C. nstcpdump.sh
• D. nsconmsg

Answer: (D)

To verify a policy is bound and see how many times it has been matched, you look at the NetScaler logs that record policy evaluation events. The tool that directly reads and decodes those policy-related console messages is nsconmsg. It can display binding status messages and the hit counter for a given policy as traffic flows, so you can confirm the policy is bound to the vServer (or globally) and see the accumulated hits.

Other tools serve different purposes: nscollect gathers a broad diagnostic bundle rather than focusing on policy hit counters; nstrace.sh traces application-level events but doesn’t summarize policy hits; nstcpdump.sh captures packets for low-level debugging and likewise doesn’t expose policy hit counts.