Full 1Y0-341 Practice Test and 110 unique questions with explanations waiting just for you!
CCP-N Dumps 1Y0-341 Exam for Full Questions - Exam Study Guide
NEW QUESTION 25
What can a Citrix Engineer implement to protect against the accidental disclosure of personally identifiable information (PII)?
- A. Safe Object
- B. Cookie Consistency
- C. HTML Cross-Site Scripting
- D. Form Field Consistency
Answer: D
Explanation:
Explanation/Reference: https://docs.citrix.com/en-us/citrix-adc/current-release/application-firewall/form-protections/ form-field-consistency-check.html
NEW QUESTION 26
Scenario: A Citrix Engineer configures the Application Firewall for protecting a sensitive website. The security team captures traffic between a client and the website and notes the following cookie:
citrix_ns_id
The security team is concerned that the cookie name is a risk, as it can be easily determined that the NetScaler is protecting the website.
Where can the engineer change the cookie name?
- A. Application Firewall Profile
- B. Application Firewall Policy
- C. Application Firewall Engine Settings
- D. Application Firewall Default Signatures
Answer: A
NEW QUESTION 27
Which Citrix Web App Firewall profile setting can a Citrix Engineer implement to remove non-essential content from web files to improve response time?
- A. Strip HTML Comments
- B. Exclude Uploaded Files from Security Checks
- C. Enable Form Tagging
- D. Exempt Closure URLs from Security Checks
Answer: A
NEW QUESTION 28
A Citrix Engineer needs generate and present a NetScaler PCI-DSS report to management. The report should include a PCI-DSS summary of the required security measures for PCI-DSS compliance.
Where can the engineer generate the report from?
- A. Documentation > Nitro API
- B. Configuration>System>Reports
- C. Reporting> System
- D. Dashboard>System Overview
Answer: B
NEW QUESTION 29
Scenario: A Citrix Engineer has enabled the IP Reputation feature. The engineer wants to protect a critical web application from a distributed denial of service attack.
Which advanced expression can the engineer write for a Responder policy?
- A. CLIENT.IP.SRC.IPREP_THREAT_CATEGORY(WEB_ATTACKS)
- B. CLIENT.IP.SRC.IPREP_THREAT_CATEGORY(WINDOWS_EXPLOITS)
- C. CLIENT.IP.SRC.IPREP_THREAT_CATEGORY(SPAM_SOURCES)
- D. CLIENT.IP.SRC.IPREP_THREAT_CATEGORY(BOTNETS)
Answer: A
NEW QUESTION 30
A Citrix Engineer has configured NetScaler Web Logging on a Linux client machine. The engineer needs to verify if the log.conf file has been configured correctly and that there are NO syntax errors. Which command can the engineer use to accomplish this?
- A. nswl -verify -f/usr/local/netscaler/etc/log.conf
- B. nswl -verify -f/ns/etc/log.conf
- C. nswl -verify -f/usr/local/netscaler/bin/log.conf
- D. nswl -verify -f/ns/bin/log.conf
Answer: A
NEW QUESTION 31
Which is a single-digit rating system that indicates the criticalness of attacks on the application, regardless of whether or NOT the application is protected by a NetScaler appliance?
- A. Threat Index
- B. App Store
- C. Safety Index
- D. Transactions
Answer: A
NEW QUESTION 32
A Citrix Engineer needs to ensure that all traffic to the virtual server is blocked if NONE of the bound Application Firewall policies are matched.
Which setting can the engineer configure to meet this requirement?
- A. set appfw settings undefAction APPFW_BLOCK
- B. set ns httpProfienshttp_default_profile dropInvalReqs ENABLED
- C. set appfw settings defaultProfile APPFW_BLOCK
- D. set ns httpProfilenshttp_default_profile-dropInvalReqs DISABLED
Answer: C
NEW QUESTION 33
Which meta-character can be used as a wildcard to match a single character in a given position?
- A. A dollar Sign ($)
- B. A period (.)
- C. A forward slash (/)
- D. An asterisk (*)
Answer: A
NEW QUESTION 34
A Citrix Engineer has enabled transform action in SQL injection check.
What would the following parameter be transformed into?
- A. Citrix OR "1"=/1
- B. Citrix\ OR "1"="1
- C. Citrix OR "1"="1
- D. Citrix; OR '1' ='1
- E. Citrix/ OR "1"="1
Answer: B
NEW QUESTION 35
A Citrix Engineer needs to implement a rate limiting policy to permit an average of one request in 40 ms using NetScaler.
Which Limit Identifier will meet this requirement?
- A. add ns limitIdentifierlimit_req threshold 1 mode CONNECTION
- B. set limitidentifierlimit_req mode request_rate timeslice 2000 Threshold 50 limitTypeBursty
- C. adds ns limitIdentifierlimit_req-threshold 40 mode CONNECTION
- D. set limitidentifierlimit_req mode request_rate timeslice 2000 Threshold 50 limitType smooth
Answer: D
NEW QUESTION 36
Scenario: A Citrix Engineer needs to ensure that the flow of traffic to a web application does NOT overwhelm the server. After thorough testing, the engineer determines that the application can handle a maximum of 3,000 requests per minute. The engineer builds a limit identifier, rl_maxrequests, to enforce this limitation.
Which advanced expression can the engineer write in the Responder policy to invoke rate limiting?
- A. SYS.CHECK_LIMIT("rl_maxrequests").CONTAINS("Busy")
- B. SYS.CHECK_LIMIT("rl_maxrequests").GE(3000)
- C. SYS.CHECK_LIMIT("rl_maxrequests")
- D. SYS.CHECK_LIMIT("rl_maxrequests").IS_VALID
Answer: A
NEW QUESTION 37
A Citrix Engineer needs to configure an Application Firewall policy. According to company policies, the engineer needs to ensure that all the requests made to the website are originating from North America.
Which policy expressions will help the engineer accomplish the requirement?
- A. CLIENT.IP.SRC.MATCHES ("North America.US.*.*.*.*")
- B. CLIENT.IP.SRC.MATCHES_LOCATION ("North America.US.*.*.*.*"). NOT
- C. CLIENT.IP.DST.MATCHES ("North America.US.*.*.*.*")
- D. CLIENT.IP.SRC.MATCHES_LOCATION ("North America.US.*.*.*.*")
Answer: D
NEW QUESTION 38
Which license must be present on the Citrix ADC for the Citrix Application Delivery Management (ADM) Service to generate HDX Insight reports that present one year's worth of data?
- A. Advanced
- B. Premium
- C. Premium Plus
- D. Standard
Answer: A
NEW QUESTION 39
Which Citrix Application Delivery Management (ADtv1) Analytics page allows a Citrix Engineer to monitor Citrix Virtual Apps and Desktop traffic?
- A. WAN Insight
- B. Gateway Insight
- C. Web Insight
- D. HDX Insight
Answer: D
NEW QUESTION 40
Which protocol does NetScaler Management and Analytics System (NMAS) use when Discovery is run to locate instances?
- A. ICMP
- B. NITRO
- C. RIP
- D. TCP
Answer: A
Explanation:
The NetScaler MAS server sends an Internet Control Message Protocol (ICMP) ping to locate the instance.
Then, it uses the instance profile details to log on to the instance. Using a NetScaler NITRO call, NetScaler MAS retrieves the license information of the instance. On the basis of the licensing information, it determines whether the instance is a NetScaler instance and the type of NetScaler platform (for example, NetScaler MPX, NetScaler VPX, NetScaler SDX, or NetScaler Gateway).
On succesful detection of the NetScaler instance, it is added to the NetScaler MAS server's database.
NEW QUESTION 41
Which protection can a Citrix Engineer implement to prevent a hacker from extracting a customer list from the company website?
- A. Form Field Consistency
- B. HTML SQL Injection
- C. HTML Cross-Site Scripting (XSS)
- D. Cross-Site Request Forgeries (CSRF)
Answer: B
NEW QUESTION 42
A Citrix Engineer wants to delegate management of Citrix Application Delivery Management (ADM) to a junior team member.
Which assigned role will limit the team member to view all application-related data?
- A. readonly
- B. appAdmin
- C. appReadonly
- D. admin
Answer: C
Explanation:
https://docs.citrix.com/en-us/citrix-application-delivery-management-service/setting- up/configuring-role-based-access-control.html
NEW QUESTION 43
Scenario: A Citrix Engineer is asked to help improve the performance of a web application. After capturing and analyzing a typical session, the engineer notices a large number of user requests for the stock price of the company.
Which action can the engineer take to improve web application performance for the stock quote?
- A. Create a dynamic content group.
- B. Enable the Minify JavaScript optimization.
- C. Create a static content group.
- D. Enable the Combine CSS optimization.
Answer: B
NEW QUESTION 44
A Citrix Engineer needs to ensure that infrastructure is PCI DSS compliant. Which two are prerequisite actions for PCI DSS compliance? (Choose two.)
- A. Assign a unique ID to each person with computer access.
- B. Track and monitor every transaction of the cardholder.
- C. Ensure that cardholder data is sent unencrypted over public networks.
- D. Use only vendor-supplied defaults for system passwords and other security parameters.
- E. Regularly test security systems and processes.
Answer: B,E
NEW QUESTION 45
Scenario: A Citrix Engineer notices that a web page takes a long time to display. Upon further investigation, the engineer determines that the requested page consists of a table of high-resolution pictures which are being displayed in table cells measuring 320 by 180 pixels.
Which Front End Optimization technique can the engineer enable on the Citrix ADC to improve time to display?
- A. Minify
- B. Shrink to Attributes
- C. Extend Page Cache
- D. Make Inline
Answer: A
Explanation:
Explanation/Reference: https://docs.citrix.com/en-us/netscaler/11-1/optimization/front-end-optimization.html
NEW QUESTION 46
A Citrix Engineer has received the following message after setting up Application Firewall in Learning mode.
August 28 6 03:14:27 <local0.info>XXX.0.0.2.08/28/2017:03:14:27 GMT VPXExtProd01 0-PPE-0:
default GUI CMD_EXECUTED 1670370 0: User CitrixAdmin- Remote_ip XXX.19.XXX.XXX-Command
"show appfwlearningdata WebPub_vs_af_1 startURL"- Status "ERROR: Communication error with aslearn" What can the engineer perform to resolve the issue?
- A. Disable the Application Firewall feature.
- B. Delete the Profile database and restart the aslearn process.
- C. Reinstall the Application Firewall license.
- D. Reboot the NetScaler appliance.
Answer: D
NEW QUESTION 47
Which three items does Citrix Application Delivery Management (ADM) require when adding an instances?
(Choose three.)
- A. Tags
- B. IP address
- C. Site
- D. Profile
- E. Agent
Answer: B,D,E
Explanation:
Explanation
Explanation/Reference: https://docs.citrix.com/en-us/citrix-application-delivery-management-software/current-release/ configure/add-instances.html
NEW QUESTION 48
Which feature of Learning should a Citrix Engineer configure to direct Citrix Web App Firewall to learn from specific sessions?
- A. Manage Content Types for Safe Commerce
- B. Advanced policy expression filter
- C. Default policy expression filter
- D. Trusted Learning Clients list
Answer: D
Explanation:
Explanation/Reference: https://docs.citrix.com/en-us/citrix-adc/current-release/application-firewall/profiles/learning.html
NEW QUESTION 49
......
Authentic Best resources for 1Y0-341 Online Practice Exam: https://www.real4prep.com/1Y0-341-exam.html
Get the superior quality 1Y0-341 Dumps Questions from Real4Prep: https://drive.google.com/open?id=1n1s3he0j_awgtQ_RjmtUsnpcMQpSxuAU