1Y0-341 Exam Training Practice Tests (Citrix ADC Advanced Topics

Question 1

A Citrix Engineer enabled Cookie Consistency protection on a web application and wants to verify that it is working.
Which cookie name can the engineer look for in the HTTP headers sent from the client to verify the protection?

A. Citrix_waf_id B. Citrix_sc_id C. Citrix_adc_id D. Citrix_ns_id

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 2

A Citrix Engineer needs to configure the authentication feature on NetScaler Management and Analytics System (NMAS) to enable local authentication to take over if the external authentication fails. What can the engineer configure to meet this requirement?

A. Select EXTERNAL as the Server Type when configuring authentication. B. Enable the fallback local authentication option. C. Configure Cascade authentication with External as primary and LOCAL as secondary. D. Select LOCAL as the Server Type when configuring authentication.

Correct Answer: A

Question 3

Which Citrix Application Delivery Management (ADM) Analytics page allows a Citrix Engineer to monitor Citrix Virtual Apps and Desktops traffic?

A. WAN Insight B. HDX Insight C. Web Insight D. Gateway Insight

Correct Answer: B

Question 4

Scenario: A hacker accessed the HTML code from a product page and manipulated the HTML code as shown:
Original Value: <input type=hidden name=price value=2379.73> Manipulated Value: <input type=hidden name=price value=9.24> Which security check can the engineer configure to counter the manipulation?

A. Field Formats B. HTML Cross-Site Scripting C. Form Field consistency D. Content-type

Correct Answer: C

Question 5

What criteria must be met in order to create a certificate bundle by linking multiple certificates in NetScaler Management and Analytics System (NMAS)?

A. The certificates must be issued by an external Certificate Authority. B. The certificates must be created on the NetScaler. C. The issuer if the first certificate must NOT have issued the second certificate. D. The issuer of the first certificate must match the domain of the second certificate.

Correct Answer: D

Question 6

A Citrix Engineer needs to configure an application firewall profile to ensure that the images uploaded on the website are NOT malicious. The engineer needs to create a policy to filter the upload requests and ensure that they are in JPEG format. Which expression can the engineer use to fulfill this requirement?

A. http.req.url.endswith (".jpeg) || http.req.method.eq (GET) B. http.req.url.endswith (".jpeg) &&http.req.method.eq (POST) C. http.req.url.contains (".jpeg) &&http.req.method.eq (GET) D. http.req.header ("Content-Type").contains ("image/jpeg") || http.req.method.eq(POST)

Correct Answer: D

Question 7

Which security option falls under the Negative Security Model for Citrix Application Firewall?

A. HTML Cross-Site Scripting B. Signature C. Content-type D. Start URL

Correct Answer: B

Question 8

Which Citrix Application Delivery Management (ADM) Analytics page allows an engineer to monitor the metrics of end-point analysis and authentication failures?

A. HDX Insight B. Security Insight C. Web Insight D. Gateway Insight

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 9

A Web Application Engineer is reviewing log files and finds that a large number of bad HTTP requests are being sent to the web application servers.
What can the Citrix ADC Engineer to do prevent bad HTTP requests from getting to the web application?

A. Select 'Change HTTP Parameters' under System > Settings.
Select 'Drop invalid HTTP requests'. B. Modify the default HTTP profile and select 'Drop invalid HTTP requests'.
Bind the default HTTP profile globally. C. Create an HTTP profile and select 'Drop invalid HTTP requests'.
Assign the HTTP profile to the virtual server. D. Create an HTTP profile and select 'Drop invalid HTTP requests'.
Assign the HTTP profile to the Web App Firewall policy.

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 10

Which three options can be used to specify the destination of an HTTP Callout? (Choose three.)

A. Load balancing Virtual server B. Global server load balancing Virtual server C. Citrix ADC Gateway Virtual server D. Cache redirection Virtual server E. Content switching Virtual server

Correct Answer: A,D,E

Question 11

A Citrix Engineer needs to prevent an attack against insecure operating-system or web-server software. The attack can cause the system to crash or behave unpredictably when it receives a data string that is larger than it can handle.
Which security check on the Application Firewall can the engineer enable to prevent such attacks?

A. Buffer Overflow B. Field Format C. Start URL D. Deny URL

Correct Answer: A

Question 12

Scenario: When reviewing the activity logs for a web application, a Citrix Engineer notices a high number of requests for the page, /setup.aspx. Further investigation reveals that most of these requests originated from outside the network. Which protection can the engineer implement to prevent this?

A. HTML Cross-Site Scripting (XSS) B. Start URL with URL Closure C. Buffer Overflow D. Cookie Consistency

Correct Answer: B

Question 13

What can a Citrix Engineer do to decrease browser load times by increasing the number of parallel connections to the resource?

A. Configure Domain Sharding. B. Do NOT allow HTML websites. C. Block JavaScript on client browsers. D. Add more web servers.

Correct Answer: A

Citrix ADC Advanced Topics - Security, Management and Optimization - 1Y0-341 Exam Practice Test