2022 Valid 1Y0-341 Real Exam Questions (Updated) 100% Dumps & Practice Exam
[UPDATED 2022] Citrix 1Y0-341 Questions Prepare with Free Demo of PDF
NEW QUESTION 32
Statistics for which three types of violations are presented on the App Security Dashboard? (Choose three.)
- A. Signature
- B. SSL Enterprise Policy
- C. Web App Firewall protection
- D. AAA
- E. IP Reputation
Answer: A,C,E
Explanation:
Explanation/Reference: https://docs.citrix.com/en-us/citrix-application-delivery-management-service/analytics/security/ security-violations.html
NEW QUESTION 33
Scenario: A Citrix Engineer is asked to implement multi-factor authentication for Citrix Gateway. The engineer creates the authentication policies and binds the policies to the appropriate bind points. The engineer creates a custom form using Notepad++ to format the page which will capture the user's credentials.
To which folder on the Citrix ADC will the engineer need to upload this form?
- A. /flash/nsconfig/loginschema
- B. /var
- C. /var/netscaler
- D. /flash/nsconfig/loginschema/LoginSchema
Answer: D
NEW QUESTION 34
A Citrix Engineer has defined an HTTP Callout, hc_authorized_location, to return the value
"Authorized" if client's IP address is on a list of authorized external locations.
Which advanced expression should the engineer use in a policy for testing this condition?
- A. SYS.HTTP_CALLOUT(hc_authorized_location).IS_VALID
- B. SYS.HTTP_CALLOUT(hc_authorized_location).EQ("Authorized")
- C. SYS.HTTP_CALLOUT(hc_authorized_location).IS_TRUE
- D. SYS.HTTP_CALLOUT(hc_authorized_location).EQUALS_ANY("Authorized")
Answer: D
NEW QUESTION 35
A Citrix Engineer needs to implement a rate limiting policy to permit an average of one request in 40 ms using NetScaler.
Which Limit Identifier will meet this requirement?
- A. add ns limitIdentifierlimit_req threshold 1 mode CONNECTION
- B. set limitidentifierlimit_req mode request_rate timeslice 2000 Threshold 50 limitTypeBursty
- C. set limitidentifierlimit_req mode request_rate timeslice 2000 Threshold 50 limitType smooth
- D. adds ns limitIdentifierlimit_req-threshold 40 mode CONNECTION
Answer: C
NEW QUESTION 36
Scenario: A Citrix Engineer reviews the log files for a business-critical web application. The engineer notices a series of attempts to directly access a file, /etc/passwd.
Which feature can the engineer implement to protect the application against this attack?
- A. Content Type
- B. Form Field Consistency
- C. Start URL
- D. Buffer Overflow
Answer: C
NEW QUESTION 37
Scenario: A Citrix Engineer is notified that improper requests are reacting the web application.
While investigating, the engineer notices that the Citrix Web App Firewall policy has zero hits.
What are two possible causes for this within the Citrix Web App Firewall policy? (Choose two.)
- A. It has been assigned an Advanced HTML profile.
- B. The expression is incorrect.
- C. It has been assigned the built-in APPFW_RESET profile.
- D. It is NOT bound to the virtual server.
Answer: B,D
NEW QUESTION 38
Which reason can cause fail over in a NetScaler Management and Analytics System (NMAS) High Availability pair?
- A. A primary server does NOT receive the SNMP traps from the instances connected.
- B. The engineer manually forces the secondary server to shut down.
- C. A secondary server loses connectivity in the LAN.
- D. A primary server encounters a critical software issue.
Answer: D
NEW QUESTION 39
Which Front End Optimization technique causes the Citrix ADC to resize images before sending them to the client?
- A. Minify
- B. Shrink to Attributes
- C. Compression
- D. Inlining
Answer: B
Explanation:
Explanation/Reference: https://docs.citrix.com/en-us/citrix-adc/current-release/optimization/front-end-optimization.html
NEW QUESTION 40
Scenario: A Citrix Engineer wants to configure the Citrix ADC for 0Auth Authentication. The engineer uploads the required certificates, configures the actions, and creates all the necessary policies. After binding the authentication policy to the application, the engineer is unable to authenticate.
- A. The Redirect URL is incorrect
- B. The policy bindings were assigned incorrect priorities
- C. The certificates have expired
- D. The log files are full
Answer: A
NEW QUESTION 41
Scenario: A Citrix Engineer configures Citrix Web App Firewall to protect an application. Upon reviewing the log files, the engineer notices a pattern of forceful browsing toward the configuration page for the application. To protect against this, the engineer enforces Start URL and enables Enforce URL Closure.
What is the effect of enforcing Start URL and enabling Enforce URL Closure on the application?
- A. External users are blocked from the path /config.aspx.
Internal users are permitted to the path /config.aspx. - B. Non-administrative users are blocked from the path /config.aspx.
Administrative users are permitted to the path /config.aspx. - C. Access to the path /config.aspx is blocked.
- D. Access to the path /config.aspx is unblocked when a user clicks a referring link elsewhere on the website.
Answer: C
NEW QUESTION 42
A Citrix Engineer enabled Cookie Consistency protection on a web application and wants to verify that it is working.
Which cookie name can the engineer look for in the HTTP headers sent from the client to verify the protection?
- A. Citrix_waf_id
- B. Citrix_sc_id
- C. Citrix_ns_id
- D. Citrix_adc_id
Answer: C
NEW QUESTION 43
Which security model should a Citrix Engineer implement to make sure that no known attack patterns pass through Citrix Web App Firewall?
- A. Negative
- B. Static
- C. Positive
- D. Hybrid
Answer: D
Explanation:
Explanation/Reference: https://docs.citrix.com/en-us/citrix-adc/current-release/application-firewall/introduction-to-citrix- web-app-firewall.html
NEW QUESTION 44
Which action can be used to place the rule on the relaxation list without being deployed and ensuring that the rule is NOT learned again?
- A. Delete
- B. Deploy
- C. Skip
- D. Edit& Deploy
Answer: C
NEW QUESTION 45
Scenario: A Citrix Engineer has enabled Security insight and Web insight on NetScaler Management and Analytics System (NMAS). The engineer is NOT able to see data under the Analytics on NMAS, in spite of seeing hits on the APPFLOW policy.
Which log should the engineer check on NMAS to ensure that the information is sent from NetScaler?
- A. mps_perf.log
- B. mps_afanalytics.log
- C. mps_afdecoder.log
- D. nstriton.log
Answer: C
NEW QUESTION 46
Which report can a Citrix Engineer review to ensure that the Citrix ADC meets all PCI-DSS requirements.
- A. Application Firewall Violations Summary
- B. Generate Application Firewall Configuration
- C. PCI-DSS Standards
- D. Generate PCI-DSS
Answer: D
Explanation:
https://docs.citrix.com/en-us/citrix-adc/current-release/application-firewall/stats-and-reports.html
NEW QUESTION 47
Scenario: A Citrix Engineer configured signature protections for Citrix Web App Firewall. Signature Auto- Update has been enabled. Upon reviewing the log files, the engineer notices that the auto update process has an error. In the settings for Signature Auto Update the engineer notices that the URL is blank.
Which URL should the engineer enter to restore the update process?
- A. https://www.citrix.com/NSAppFwSignatures/SignaturesMapping.xml
- B. https://s3.amazonaws.com/NSAppFwSignatures/SignaturesMapping.xml
- C. https://citrix.azure.com/NSAppFwSignatures/SignaturesMapping.xml
- D. https://download.citrix.com/NSAppFwSignatures/SignaturesMapping.xml
Answer: B
NEW QUESTION 48
Scenario: A Citrix Engineer is reviewing the log files for a protected application. The engineer discovers a lot of errors pertaining to invalid data being supplied by users.
Which protection can the engineer implement at the Citrix Web App Firewall to reduce these errors?
- A. Cross-Site Request Forgeries (CSRF)
- B. Field Format
- C. HTML SQL Injection
- D. Form Field Consistency
Answer: D
NEW QUESTION 49
A Citrix Engineer has determined that users are able to access random URLs on a web site through bookmarks and by manually typing in the URLs to skip the pages required to reach that part of the website.
Which two checks can the engineer enable to prevent this attack? (Choose two.)
- A. Buffer overflow
- B. Deny URL
- C. Form Field Consistency
- D. HTML Cross-site scripting
- E. Start URL
Answer: A,E
NEW QUESTION 50
Scenario: During application troubleshooting, a Citrix Engineer notices that response traffic received from a protected web application is NOT matching what the web server is sending out. The engineer is concerned that someone is trying to disrupt caching behavior.
Which action is the Citrix Web App Firewall performing that would trigger this false positive?
- A. Inserting a hidden form field
- B. Modifying and adding cookies in the response
- C. Removing the Accept-Encoding header
- D. Removing the Last-Modified header
Answer: D
NEW QUESTION 51
Which data populates the Events Dashboard?
- A. API calls
- B. AppFlow IPFIX records
- C. SNMP trap messages
- D. Syslog messages
Answer: D
NEW QUESTION 52
Which requirement must be addressed to implement the IP Reputation feature on a NetScaler MPX appliance?
- A. TheNetScaler appliance must be able to connect to api.bcti.brightcloud.com on port 443.
- B. TheNetScaler appliance must be able to connect to api.bcss.brightcloud.com on port 80.
- C. TheNetScaler appliance must be able to connect to wiprep-rtu.s3-us-west-2.amazonaws.com on port
443. - D. TheNetScaler appliance must be able to connect to wiprep-rtu.s3-us-west-2.amazonaws.com on port
80.
Answer: A
NEW QUESTION 53
......
Citrix ADC Advanced Concepts - Security, Management and Optimization Topics
Our CITRIX 1Y0-341 dumps will include the following topics:
- Knowledge of virtualization ideas
- Intermediate information on Microsoft Windows Server
- Basic information on Active Directory
- Knowledge of data set ideas
- Securing network correspondences
- Basic organization abilities
1Y0-341 Deluxe Study Guide with Online Test Engine: https://www.testvalid.com/1Y0-341-exam-collection.html
NEW 2022 Certification Sample Questions 1Y0-341 Dumps & Practice Exam: https://drive.google.com/open?id=1hKFARK1Rak4ldtMR5MPuNpfbrGOrRrkQ