Citrix 1Y0-341 Exam Questions Instant Access

Question 1

A Citrix Engineer is notified that no traffic is reaching the protected web application. While investigating, the engineer notices that the Citrix Web App Firewall policy has 516,72 hits. What should the engineer check next?

AThe security checks in the assigned profile

BThe HTML Error Object

CThe policy expression

DThe security checks in the global default profile

Answer : A

Question 2

A Citrix Engineer wants the Citrix Web App Firewall to respond with a page stored on the Citrix ADC when a violation is detected.

Which profile setting accomplishes this?

ARedirect URL

BRFC Profile

CDefault Request

DHTML Error Object

Answer : D

Question 3

Scenario: A Citrix Engineer is asked to implement multi-factor authentication for Citrix Gateway. The engineer creates the authentication policies and binds the policies to the appropriate bind points. The engineer creates a custom form using Notepad++ to format the page which will capture the user's credentials.

What is the first step the engineer must perform to assign this form to the authentication process?

ACreate a login schema policy and bind it to the authentication virtual server.

BBind the authentication policy to the primary authentication bank of the Citrix Gateway

CCreate a login schema profile and select the uploaded file.

DCreate an authentication policy label and bind it to an authentication policy.

Answer : B

Question 4

Scenario: A Citrix Engineer configured signature protections for Citrix Web App Firewall. Signature Auto- Update has been enabled. Upon reviewing the log files, the engineer notices that the auto update process has an error. In the settings for Signature Auto Update the engineer notices that the URL is blank.

Which URL should the engineer enter to restore the update process?

Ahttps://s3.amazonaws.com/NSAppFwSignatures/SignaturesMapping.xml

Bhttps://download.citrix.com/NSAppFwSignatures/SignaturesMapping.xml

Chttps://www.citrix.com/NSAppFwSignatures/SignaturesMapping.xml

Dhttps://citrix.azure.com/NSAppFwSignatures/SignaturesMapping.xml

Answer : A

Question 5

Scenario: During application troubleshooting, a Citrix Engineer notices that response traffic received from a protected web application is NOT matching what the web server is sending out. The auditor is concerned that Man-In-The-Middle attack is in progress.

Which action is the Citrix Web App Firewall performing that would trigger this false positive?

ARemoving the Last-Modified header

BInserting a hidden form field

CRemoving the Accept-Encoding header

DModifying and adding cookies in the response

Answer : D

Question 6

Scenario: A Citrix Engineer configures Citrix Web App Firewall to protect an application. Upon reviewing the log files, the engineer notices a pattern of forceful browsing toward the configuration page for the application. To protect against this, the engineer enforces Start URL and enables Enforce URL Closure.

What is the effect of enforcing Start URL and enabling Enforce URL Closure on the application?

AAccess to the path /config.aspx is unblocked when a user clicks a referring link elsewhere on the website.

BNon-administrative users are blocked from the path /config.aspx.
Administrative users are permitted to the path /config.aspx.

CExternal users are blocked from the path /config.aspx.
Internal users are permitted to the path /config.aspx.

DAccess to the path /config.aspx is blocked.

Answer : A

Question 7

Scenario: A Citrix Engineer needs to limit Front End Optimization (FEO) on a web application to mobile users with mobile devices. The engineer decides to create and bind an FEO policy.

Which advanced expression should the engineer use in the FEO policy?

AHTTP.REG.HEADER(''User-Agent'').CONTAINS(''Mobile'')&&CLIENT.IP.SRC.IN_SUBNET(192.168.10.0/24.NOT

BHTTP.REQ.HEADER(''User-Agent'').NOTCONTAINS(''Windows'')&&CLIENT.IS_MOBILE

CCLIENT.IP.SRC.IS_MOBILE

DHTTP.RED.HEADER(''User-Agent'').CONTAINS(''Ios'') II HTTP.REQ.HEADER(''User-Agent'').CONTAINS(''Andriod'')

Answer : A

Citrix ADC Advanced Topics - Security, Management and Optimization 1Y0-341 Exam Questions