Dumps of 1Y0-341 Cover all the requirements of the Real Exam [Q13-Q37] : Exams Labs Braindumps : http://blog.examslabs.com

QUESTION 13
A Citrix Engineer has determined that users are able to access random URLs on a web site through bookmarks and by manually typing in the URLs to skip the pages required to reach that part of the website.
Which two checks can the engineer enable to prevent this attack? (Choose two.)

Form Field Consistency

Deny URL

Start URL

Buffer overflow

HTML Cross-site scripting

QUESTION 14
Scenario: A Citrix Engineer is monitoring the environment with Citrix Application Management (ADM). Management has asked lota report of high-risk traffic to protected internal websites.
Which dashboard can the engineer use to generate the requested report?

Transactions

APP

APP Security

Users & Endpoints

QUESTION 15
Scenario: A Citrix Engineer has enabled Security insight and Web insight on NetScaler Management and Analytics System (NMAS). The engineer is NOT able to see data under the Analytics on NMAS, in spite of seeing hits on the APPFLOW policy.
Which log should the engineer check on NMAS to ensure that the information is sent from NetScaler?

mps_afanalytics.log

mps_perf.log

mps_afdecoder.log

nstriton.log

QUESTION 16
A Citrix Engineer needs to configure an application firewall profile to ensure that the images uploaded on the website are NOT malicious. The engineer needs to create a policy to filter the upload requests and ensure that they are in JPEG format. Which expression can the engineer use to fulfill this requirement?

http.req.url.endswith (“.jpeg) &&http.req.method.eq (POST)

http.req.url.contains (“.jpeg) &&http.req.method.eq (GET)

http.req.url.endswith (“.jpeg) || http.req.method.eq (GET)

http.req.header (“Content-Type”).contains (“image/jpeg”) || http.req.method.eq(POST)

QUESTION 17
Which action ensures that content is retrieved from the server of origin?

CACHE

MAY_CACHE

NOCACHE

MAY_NOCACHE

QUESTION 18
Scenario: A Citrix Engineer has configured the Signature file with new patterns and log strings and uploaded the file to Application Firewall. However, after the upload, the Signature rules are NOT implemented.
What can the engineer modify to implement Signature rules?

The Signature update URL should have an older version than the one on Application Firewall.

The new Signature file should have new ID and version number.

TheNetScaler version should be upgraded before upgrading the signatures.

The Signature upgrade will take effect only after a restart.

QUESTION 19
Scenario: A Citrix Engineer created the policies in the attached exhibit.
Click the Exhibit button to view the list of policies.

HTTP Request:
GET /resetpassword.htm HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:64.0) Gecko/20100101 Firefox/64.0 Host: www.citrix.com Accept-Language: en-us Accept-Encoding: gzip, deflate Connection: Keep-Alive Which profile will be applied to the above HTTP request?

Profile_C

Profile_D

Profile_A

Profile_B

QUESTION 20
A Citrix Engineer needs to configure an AppQoE action to deliver content from an alternate service. Which three parameters should the engineer configure to meet this requirement?
(Choose three.)

TCP Profile

Header Name

Action Type

Maximum Connections

Alternate Content Path

QUESTION 21
Scenaho: A Citrix Engineer needs to block requests from a list of IP addresses in a database maintained by the Security team. The Security team has built a web application that will send a response of either “Blocked” or “Allowed,” based on whether the given IP address is on the list. Which expression should the engineer use to extract the status for policy processing?

HTTP.RES.CONTENT LENGTH.GT(0)

HTTP.RES.HEADERf Connection”)

HTTP.RES.STATUS

HTTP.RES.BODY(1000)

QUESTION 22
A manager for a hospital billing system wants to display the last four digits of a credit card number when printing invoices.
Which credit card security action does this?

X-Out

Log

Transform

Block

QUESTION 23
Scenario: A Citrix Engineer discovers a security vulnerability in one of its websites. The engineer takes a header trace and checks the Application Firewall logs.
The following was found in part of the logs:
method=GET request = http://my.companysite.net/FFC/sc11.html msg=URL length (39) is greater than maximum allowed (20).cn1=707 cn2=402 cs1=owa_profile cs2=PPE0 cs3=kW49GcKbnwKByByi3
+jeNzfgWa80000 cs4=ALERT cs5=2015 Which type of Application Firewall security check can the engineer configure to block this type of attack?

Buffer Overflow

Start URL

Cross-site Scripting

Cookie Consistency

QUESTION 24
Which report can a Citrix Engineer review to ensure that the Citrix ADC meets all PCI-DSS requirements.

Generate Application Firewall Configuration

PCI-DSS Standards

Application Firewall Violations Summary

Generate PCI-DSS

QUESTION 25
Which Citrix Application Delivery Management (ADM) Analytics page allows a Citrix Engineer to monitor web application traffic?

Web Insight

WAN Insight

HDX Insight

Gateway Insight

QUESTION 26
Scenario: A Citrix Engineer needs to configure an external SNMP server in a High Availability setup. The engineer configured the load-balancing virtual server to access the NetScaler Management and Analytics System (NMAS) HA pair.
Which IP address will be configured on the external SNMP Manager to add the NMAS devices?

IP Address of the LB VIP

IP Address of the Primary node

IP Address of the active mode

IP Address of both the NMAS nodes

QUESTION 27
Scenario: A Citrix Engineer has a pair of Citrix ADC VPX appliances configured as a High- Availability (HA) pair and hosted on a Citrix Hypervisor. The engineer wants to use Citrix Application Delivery Management (ADM) to monitor and manage the 35 web applications on the appliances. The engineer has imported Citrix ADM virtual appliance to Citrix Hypervisor. The engineer has also configured the management IP address settings and has added the 35 instances. However, some of the instances are NOT reporting any data.
Which two areas can the engineer check to determine the cause of the issue? (Choose two.)

A Premium platform license must be configured on each instance.

AppFlow must be enabled on each instance.

The Citrix ADM license must be installed.

An SSL certificate must be installed on the Citrix ADM appliance.

QUESTION 28
How can a Citrix Engineer configure a specific LDAP attribute in the nFactor implementation?

Specify the attribute in the LDAP server attributes field.

Change the order of the policies.

Add the attribute on the nFactor traffic policy.

Change the login schema and add the new attribute.

QUESTION 29
Scenario: A Citrix Engineer is trying to optimize a website that is load balanced on a NetScaler and is accessed by mobile users. The web application is complex and made up of hundreds of embedded images, scripts, and other objects per page. This limitation is creating a significant bottleneck, resulting in excessive load times.
Which NetScaler feature can the engineer use to optimize the web application?

Domain Sharding

SPDY (Speedy)

Multipath TCP

Minification

QUESTION 30
A Citrix Engineer needs to configure an Application Firewall policy. According to company policies, the engineer needs to ensure that all the requests made to the website are originating from North America.
Which policy expressions will help the engineer accomplish the requirement?

CLIENT.IP.SRC.MATCHES_LOCATION (“North America.US.*.*.*.*”)

CLIENT.IP.SRC.MATCHES_LOCATION (“North America.US.*.*.*.*”). NOT

CLIENT.IP.DST.MATCHES (“North America.US.*.*.*.*”)

CLIENT.IP.SRC.MATCHES (“North America.US.*.*.*.*”)

QUESTION 31
Scenario: A Citrix Engineer has configured LDAP group extraction on the NetScaler Management and Analytics System (NMAS) for the administration. The engineer observes that extraction is NOT working for one of the five configured groups.
What could be the cause of the issue?

The admin bind user has read-only permissions on the LDAP server.

The NMAS group does NOT match the one on the external LDAP servers.

The LDAP bind DN is incorrectly configured in the LDAP profile.

The user group extraction is NOT supported with plaintext LDAP.

QUESTION 32
Scenario: A Citrix Engineer manages Citrix Application Delivery Management (ADM) for a large holding company. Each division maintains its own ADC appliances. The engineer wants to make Citrix ADM features and benefits available to each group independently.
What can the engineer create for each division to achieve this?

A site

A role

A tenant

A dashboard

A group

QUESTION 33
How can a Citrix Engineer monitor the Citrix ADC appliances to check that all SSL certificates have a key strength of at least 2048 bits from the SSL Dashboard Settings?

Delete 512, 1024, and 4096 on the Enterprise Policy tab.

Delete 512 and 1024 on the Enterprise Policy tab.

Select 2048 and 4096 on the Enterprise Policy tab.

Select 2048 on the Enterprise Policy tab.

QUESTION 34
Which setting should be enabled to convert the content-length form submission requests to chunked requests, when HTML SQL Injection protection is enabled?

Optimize Partial Requests

Streaming

Enable form tagging

Percentage Recursive Decoding

QUESTION 35
A Citrix Engineer needs to implement Application Firewall to prevent the following tampering and vulnerabilities:
– If web server does NOT send a field to the user, the check should NOT allow the user to add that field and return data in the field.
– If a field is a read-only or hidden field, the check verifies that data has NOT changed.
– If a field is a list box or radio button field, the check verifies that data in the response corresponds to one of the values in that field.
Which security check can the engineer enable to meet this requirement?

Field Formats

Form Field Consistency

HTML Cross-Site Scripting

CSRF Form Tagging

QUESTION 36
A Citrix Engineer reviews the App Dashboard and notices that three of the monitored applications have an App Score of less than 50.
The engineer can interpret the App Score as a metric of application ___________. (Choose the correct option to complete the sentence.)

security, with a lower score indicating better security

performance and availability, with a higher score indicating better health

performance and availability, with a lower score indicating better health

security, with a higher score indicating better security

QUESTION 37
A Citrix Engineer has defined an HTTP Callout, hc_authorized_location, to return the value
“Authorized” if client’s IP address is on a list of authorized external locations.
Which advanced expression should the engineer use in a policy for testing this condition?

SYS.HTTP_CALLOUT(hc_authorized_location).IS_TRUE

SYS.HTTP_CALLOUT(hc_authorized_location).EQ(“Authorized”)

SYS.HTTP_CALLOUT(hc_authorized_location).IS_VALID

SYS.HTTP_CALLOUT(hc_authorized_location).EQUALS_ANY(“Authorized”)

Dumps of 1Y0-341 Cover all the requirements of the Real Exam [Q13-Q37]

The benefits in Obtaining the Citrix ADC Advanced Concepts - Security, Management and Optimization Certification

What is the duration of the Citrix ADC Advanced Concepts - Security, Management and Optimization

Citrix ADC Advanced Concepts - Security, Management and Optimization Certification Path