New 2021 Guaranteed Success with Test4Cram 1Y0-341 Dumps Citrix PDF Questions
Exceptional Practice To Citrix ADC Advanced Topics – Security, Management and Optimization Pass the First Time
NEW QUESTION 25
A Citrix Engineer has determined that users are able to access random URLs on a web site through bookmarks and by manually typing in the URLs to skip the pages required to reach that part of the website. Which two checks can the engineer enable to prevent this attack? (Choose two.)
- A. Form Field Consistency
- B. HTML Cross-site scripting
- C. Start URL
- D. Buffer overflow
- E. Deny URL
Answer: C,D
NEW QUESTION 26
Scenario: A Citrix Engineer has configured NetScaler Management and Analytics System (NMAS) with the default settings. In this configuration, the total number of virtual servers is lower than the number of installed virtual server licenses.
Which type of virtual server will NOT be automatically licensed by the NMAS on discovered instances?
- A. SSL Offload virtual server
- B. Content Switching virtual server
- C. Non-addressable virtual server
- D. Load Balancing virtual server
Answer: C
NEW QUESTION 27
Scenario: A Citrix Engineer is implementing Integrated Caching to increase performance of a web application. The Application Engineer replaces a small logo on the main page with a new one. Later on, when the engineer attempts to access the page, the old logo is displayed. Which enabled setting in the Content Group would cause this to happen?
- A. Expire content after 60 seconds
- B. Do not cache - if hits are less than 1
- C. Ignore browser's reload request
- D. Do not cache - if size exceeds 500 KB
Answer: C
NEW QUESTION 28
What can a Citrix Engineer implement to protect against the accidental disclosure of personally identifiable information (PII)?
- A. Form Field Consistency
- B. Cookie Consistency
- C. HTML Cross-Site Scripting
- D. Safe Object
Answer: D
NEW QUESTION 29
Which protection is applied on a server response from a protected application?
- A. Form Field Consistency
- B. HTML Cross-Site Scripting (XSS)
- C. Cross-Site Request Forgeries (CSRF)
- D. Safe Object
Answer: D
NEW QUESTION 30
A Citrix Engineer wants to delegate management of Citrix Application Delivery Management (ADM) to a junior team member.
Which assigned role will limit the team member to view all application-related data?
- A. readonly
- B. appAdmin
- C. appReadonly
- D. admin
Answer: C
Explanation:
https://docs.citrix.com/en-us/citrix-application-delivery-management-service/setting- up/configuring-role-based-access-control.html
NEW QUESTION 31
Which Markup Language is used along with NITRO API to create a StyleBook?
- A. HTML
- B. YAML
- C. GML
- D. XML
Answer: B
NEW QUESTION 32
Which syntax is used to write a StyleBook?
- A. LISP
- B. YAML
- C. XML
- D. JSON
Answer: B
Explanation:
Explanation/Reference: https://docs.citrix.com/en-us/citrix-application-delivery-management-service/stylebooks.html
NEW QUESTION 33
Which type of Application Profile type can be configured to protect the application which supports both HTML and XML data?
- A. XML Application Profile
- B. Web Application Profile
- C. Web 2.0 Application Profile
- D. Advanced Profile
Answer: C
NEW QUESTION 34
Scenario: A Citrix Engineer has deployed Front-end Optimization on NetScaler. Below is the snippet of the content before and after optimization.
Before Optimization:
After Optimization:
Which optimization technique has been applied to the content?
- A. CSS Minify
- B. CSS Combine
- C. CSS Make Inline
- D. CSS Move to Head Tag
Answer: C
NEW QUESTION 35
Scenario: A Citrix Engineer is notified that improper requests are reacting the web application.
While investigating, the engineer notices that the Citrix Web App Firewall policy has zero hits.
What are two possible causes for this within the Citrix Web App Firewall policy? (Choose two.)
- A. It has been assigned an Advanced HTML profile.
- B. The expression is incorrect.
- C. It is NOT bound to the virtual server.
- D. It has been assigned the built-in APPFW_RESET profile.
Answer: B,C
NEW QUESTION 36
Which two protections ensure that the correct data is returned by the client? (Choose two.)
- A. Form Field Consistency.
- B. Field Formats
- C. HTML Cross-Site Scripting (XSS)
- D. Cross-Site Request Forgeries (CSRF)
Answer: A,D
Explanation:
https://docs.citrix.com/en-us/citrix-adc/citrix-adc-secure-deployment/secure-deployment- guide.html
NEW QUESTION 37
A Citrix Engineer has defined an HTTP Callout, hc_authorized_location, to return the value "Authorized" if client's IP address is on a list of authorized external locations.
Which advanced expression should the engineer use in a policy for testing this condition?
- A. SYS.HTTP_CALLOUT(hc_authorized_location).IS_VALID
- B. SYS.HTTP_CALLOUT(hc_authorized_location).EQ("Authorized")
- C. SYS.HTTP_CALLOUT(hc_authorized_location).EQUALS_ANY("Authorized")
- D. SYS.HTTP_CALLOUT(hc_authorized_location).IS_TRUE
Answer: C
NEW QUESTION 38
Which two protections ensure that the correct data is returned by the client? (Choose two.)
- A. Form Field Consistency.
- B. Field Formats
- C. HTML Cross-Site Scripting (XSS)
- D. Cross-Site Request Forgeries (CSRF)
Answer: A,D
NEW QUESTION 39
Scenario: A Citrix Engineer needs to configure Application Firewall to handle SQL injection issues.
However, after enabling SQL injection check, the backend server started dropping user requests.
The Application Firewall configuration is as follows:
add appfw profile Test123 startURLAction none- denyURLAction none-crossSiteScriptingAction none - SQLInjectionAction log stats- SQLInjectionTransformSpecialChars ON SQLInjectionCheckSQLWildChars ON- fieldFormatAction none- bufferOverflowAction none- responseContentType "application/octet-stream" XMLSQLInjectionAction none- XMLXSSAction none-XMLWSIAction none- XMLValidationAction none What does the engineer need to change in the Application Firewall configuration?
- A. Enable-XMLSQLInjectionAction none
- B. Disable- SQLInjectionCheckSQLWildChars ON
- C. Enable-XMLValidationAction none
- D. Disable- SQLInjectionTransformSpecialChars ON
Answer: B
NEW QUESTION 40
Which action ensures that content is retrieved from the server of origin?
- A. MAY_NOCACHE
- B. CACHE
- C. NOCACHE
- D. MAY_CACHE
Answer: C
Explanation:
Explanation/Reference: https://docs.citrix.com/en-us/citrix-adc/current-release/optimization/integrated-caching/ configure-cookies-headers-and-polling.html
NEW QUESTION 41
Scenario: A Citrix Engineer has deployed Front-end Optimization on NetScaler. Below is the snippet of the content before and after optimization.
Before Optimization:
After Optimization:
Which optimization technique has been applied to the content?
- A. CSS Minify
- B. CSS Combine
- C. CSS Make Inline
- D. CSS Move to Head Tag
Answer: C
NEW QUESTION 42
Scenario: A Citrix Engineer created the policies in the attached exhibit.
Click the Exhibit button to view the list of policies.
HTTP Request:
GET /resetpassword.htm HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:64.0) Gecko/20100101 Firefox/64.0 Host: www.citrix.com Accept-Language: en-us Accept-Encoding: gzip, deflate Connection: Keep-Alive Which profile will be applied to the above HTTP request?
- A. Profile_D
- B. Profile_B
- C. Profile_A
- D. Profile_C
Answer: B
NEW QUESTION 43
Which license must be present on the Citrix ADC for the Citrix Application Delivery Management (ADM) Service to generate HDX Insight reports that present one year's worth of data?
- A. Advanced
- B. Premium
- C. Premium Plus
- D. Standard
Answer: A
NEW QUESTION 44
Scenario: A Citrix Engineer configures the Application Firewall for protecting a sensitive website.
The security team captures traffic between a client and the website and notes the following cookie:
citrix_ns_id
The security team is concerned that the cookie name is a risk, as it can be easily determined that the NetScaler is protecting the website.
Where can the engineer change the cookie name?
- A. Application Firewall Profile
- B. Application Firewall Policy
- C. Application Firewall Engine Settings
- D. Application Firewall Default Signatures
Answer: A
NEW QUESTION 45
Which setting in the Cookie Consistency protection feature does a Citrix Engineer need to configure to ensure that all a cookie is sent using TLS only?
- A. Encrypt Server Cookies > Encrypt Session Only
- B. Proxy Server Cookies > Session Only
- C. Flags to Add in Cookies > Secure
- D. Encrypt Server Cookies > Encrypt All
Answer: C
NEW QUESTION 46
Scenario: A Citrix Engineer reviewed the log files of a web application and found the error message below: "Unable to complete request Unrecognized field cext2_price>" Which protection can the engineer implement to prevent this error from happening?
- A. HTML Cross-Site Scripting (XSS)
- B. Cross-Site Request Forgeries (CSRF)
- C. HTML SQL Injection
- D. Form Field Consistency
Answer: D
NEW QUESTION 47
Scenario: A Citrix Engineer is implementing Citrix Web App Firewall to protect a new web application. The engineer has created a profile, configured the relaxation rules, and applied signature protections. Additionally, the engineer has assigned the profile to a policy and bound the policy to the application.
What is the next step for the engineer in protecting the web application?
- A. Enable logging on key protections.
- B. Update the global default Citrix Wed App Firewall profile with the new signature file.
- C. Enable the Signature Auto-Update feature.
- D. Test the web application protections with a group of trusted users.
Answer: C
NEW QUESTION 48
Which two settings can be used when creating a Cache Content group? (Choose two.)
- A. Remove response cookies
- B. Use browser settings
- C. Expire cookies
- D. Set Lazy DNS resolution
- E. Use DNS Query
Answer: A,D
NEW QUESTION 49
Which protection is applied on a server response from a protected application?
- A. Form Field Consistency
- B. Safe Object
- C. HTML Cross-Site Scripting (XSS)
- D. Cross-Site Request Forgeries (CSRF)
Answer: D
NEW QUESTION 50
......
1Y0-341 EXAM DUMPS WITH GUARANTEED SUCCESS: https://www.test4cram.com/1Y0-341_real-exam-dumps.html
Best Quality Citrix 1Y0-341 Exam Questions: https://drive.google.com/open?id=1TkkcomoaDtUP2DMGK_49p8e7vJxabxYq