Pass Your 1Y0-341 Dumps as PDF Updated on 2023 With 109 Questions
Citrix 1Y0-341 Real Exam Questions and Answers FREE
NEW QUESTION # 40
Which protection ensures that links to sensitive pages can only be reached from within an application?
- A. Form Field Consistency Check
- B. Deny URL
- C. Buffer Overflow Check
- D. URL Closure
Answer: B
Explanation:
https://docs.citrix.com/en-us/citrix-adc/current-release/application-firewall/url-protections/denyurl- check.html
NEW QUESTION # 41
A Citrix Engineer is considered that malicious users could exploit a web system by sending a large cookie. Which security check can the engineer implement to address this concern?
- A. Start URL
- B. Field Formats
- C. Content-type
- D. Buffer Overflow
Answer: D
NEW QUESTION # 42
Scenario: A Citrix Engineer has configured Integrated Caching to improve application performance. Within hours, the Citrix ADC appliance has run out of memory.
Which Content Group setting can the engineer configure to show the caching process until a need is demonstrated?
- A. Quick Abort Size
- B. Do not cache - if hits are less than
- C. Maximum memory usage limit
- D. Do not cache - if size exceeds
Answer: C
Explanation:
https://docs.citrix.com/en-us/citrix-adc/current-release/optimization/integrated-caching.html
NEW QUESTION # 43
Scenario: A Citrix Engineer has configured LDAP group extraction on the NetScaler Management and Analytics System (NMAS) for the administration. The engineer observes that extraction is NOT working for one of the five configured groups.
What could be the cause of the issue?
- A. The NMAS group does NOT match the one on the external LDAP servers.
- B. The admin bind user has read-only permissions on the LDAP server.
- C. The LDAP bind DN is incorrectly configured in the LDAP profile.
- D. The user group extraction is NOT supported with plaintext LDAP.
Answer: A
NEW QUESTION # 44
Scenario: A Citrix Engineer configures Citrix Web App Firewall to protect an application. Upon reviewing the log files, the engineer notices a pattern of forceful browsing toward the configuration page for the application. To protect against this, the engineer enforces Start URL and enables Enforce URL Closure.
What is the effect of enforcing Start URL and enabling Enforce URL Closure on the application?
- A. Access to the path /config.aspx is unblocked when a user clicks a referring link elsewhere on the website.
- B. External users are blocked from the path /config.aspx.
Internal users are permitted to the path /config.aspx. - C. Access to the path /config.aspx is blocked.
- D. Non-administrative users are blocked from the path /config.aspx.
Administrative users are permitted to the path /config.aspx.
Answer: C
NEW QUESTION # 45
Scenario: A Citrix Engineer needs to configure an external SNMP server in a High Availability setup. The engineer configured the load-balancing virtual server to access the NetScaler Management and Analytics System (NMAS) HA pair.
Which IP address will be configured on the external SNMP Manager to add the NMAS devices?
- A. IP Address of the LB VIP
- B. IP Address of the active mode
- C. IP Address of the Primary node
- D. IP Address of both the NMAS nodes
Answer: D
NEW QUESTION # 46
Scenario: A Citrix Engineer created the policies in the attached exhibit.
Click the Exhibit button to view the list of policies.
HTTP Request:
GET /resetpassword.htm HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:64.0) Gecko/20100101 Firefox/64.0 Host: www.citrix.com Accept-Language: en-us Accept-Encoding: gzip, deflate Connection: Keep-Alive Which profile will be applied to the above HTTP request?
- A. Profile_B
- B. Profile_A
- C. Profile_C
- D. Profile_D
Answer: A
NEW QUESTION # 47
Which Front End Optimization technique can a Citrix Engineer enable on the Citrix ADC to remove all excess whitespace from a file?
- A. Inlining
- B. Lazy Load
- C. Minify
- D. Shrink to Attributes
Answer: C
Explanation:
Explanation/Reference: https://docs.citrix.com/en-us/citrix-adc/current-release/optimization/front-end-optimization.html
NEW QUESTION # 48
Scenario: A Citrix Engineer wants to protect a web application using Citrix Web App Firewall.
After the Web App Firewall policy afweb_protect is bound to the virtual server, the engineer notices that pages are displaying in plain text with graphics included.
What is the likely cause of this?
- A. The Web App Firewall feature is disabled.
- B. The Safe Objects protection is NOT properly configured.
- C. The policy expression allows for HTML files only.
- D. The Start URL list does NOT include CSS files.
Answer: D
NEW QUESTION # 49
A Citrix Engineer is considered that malicious users could exploit a web system by sending a large cookie.
Which security check can the engineer implement to address this concern?
- A. Start URL
- B. Field Formats
- C. Content-type
- D. Buffer Overflow
Answer: D
NEW QUESTION # 50
A Citrix Engineer wants to delegate management of Citrix Application Delivery Management (ADM) to a junior team member.
Which assigned role will limit the team member to view all application-related data?
- A. readonly
- B. admin
- C. appReadonly
- D. appAdmin
Answer: C
NEW QUESTION # 51
A Citrix Engineer wants the Citrix Web App Firewall to respond with a page stored on the Citrix ADC when a violation is detected.
Which profile setting accomplishes this?
- A. RFC Profile
- B. Redirect URL
- C. HTML Error Object
- D. Default Request
Answer: C
NEW QUESTION # 52
The NetScaler logging client server can be installed and configured to store the log for
___________.
(Choose the correct option to complete the sentence.)
- A. HTTP and HTTPS requests processed by the NetScaler
- B. status of all the HTTP and HTTPS backend web servers
- C. HTTP and HTTPS active connections on the NetScaler
- D. statistics of the HTTP and HTTPS web sites load balanced on NetScaler
Answer: A
NEW QUESTION # 53
Which license must be present on the Citrix ADC for the Citrix Application Delivery Management (ADM) Service to generate HDX Insight reports that present one year's worth of data?
- A. Advanced
- B. Premium Plus
- C. Standard
- D. Premium
Answer: A
NEW QUESTION # 54
Which data populates the Events Dashboard?
- A. Syslog messages
- B. SNMP trap messages
- C. API calls
- D. AppFlow IPFIX records
Answer: D
NEW QUESTION # 55
Which three protocols in a NetScaler Management and Analytics System (NMAS) can be used to back up the current state of the managed NetScaler instances? (Choose three.)
- A. Secure Copy (SCP)
- B. NITRO calls
- C. Telnet
- D. Secure Shell (SSH)
- E. HTTP
Answer: A,B,D
Explanation:
You can manually backup and restore NetScaler configurations using the GUI, CLI, or you can use NetScaler MAS to perform automatic backups and manual restores. NetScaler MAS backs up the current state of your managed NetScaler instances by using NITRO calls and the Secure Shell (SSH) and Secure Copy (SCP) protocols.
NEW QUESTION # 56
A Citrix Engineer observes that when the application firewall policy is bound to the virtual server, some of the webpages are NOT loading correctly.
Which log file can the engineer use to view the application firewall-related logs in the native format?
- A. /var/nslog/ns.log
- B. /var/log/ns.log
- C. /var/log/iprep.log
- D. /var/nslog/newnslog
Answer: B
NEW QUESTION # 57
Which TCP flag will the NetScaler Application Firewall module send in response to a malformed/non- RFC complaint request from a client?
- A. RST +ACK packet with a window size set to 0
- B. FIN+ACK packet with a window size set to 9845
- C. FIN packet with a window size set to 0
- D. RST packet with a window size set to 9845
Answer: D
NEW QUESTION # 58
Which two settings can be used when creating a Cache Content group? (Choose two.)
- A. Use browser settings
- B. Set Lazy DNS resolution
- C. Remove response cookies
- D. Use DNS Query
- E. Expire cookies
Answer: B,C
NEW QUESTION # 59
Scenario: A Citrix Engineer is setting up Citrix Application Delivery Management (ADM) in High Availability (HA) mode. The engineer creates both nodes and connects them to the same subnet.
Which IP address must the engineer configure on the Citrix ADM HA pair to allow instances to reconnect to Citrix ADM after a failover?
- A. Floating
- B. Virtual
- C. Cluster
- D. Subnet
Answer: A
NEW QUESTION # 60
Scenario: A Citrix Engineer has enabled the IP Reputation feature. The engineer wants to protect a critical web application from a distributed denial of service attack.
Which advanced expression can the engineer write for a Responder policy?
- A. CLIENT.IP.SRC.IPREP_THREAT_CATEGORY(BOTNETS)
- B. CLIENT.IP.SRC.IPREP_THREAT_CATEGORY(SPAM_SOURCES)
- C. CLIENT.IP.SRC.IPREP_THREAT_CATEGORY(WEB_ATTACKS)
- D. CLIENT.IP.SRC.IPREP_THREAT_CATEGORY(WINDOWS_EXPLOITS)
Answer: C
NEW QUESTION # 61
Scenario: A Citrix Engineer wants to use Citrix Application Delivery Management (ADM) to monitor a single Citrix ADC VPX with eight web applications and one Citrix Gateway. It is important that the collected data be protected.
Which deployment will satisfy the requirements?
- A. A pair of Citrix ADM virtual appliances, each working independently.
- B. A single Citrix ADM imported onto the same hypervisor as the Citrix ADC VPX.
- C. A pair of Citrix ADM virtual appliances configured for High Availability.
- D. A single Citrix ADM with database replication to a secondary storage repository.
Answer: D
NEW QUESTION # 62
......
Pass Citrix 1Y0-341 Exam Info and Free Practice Test: https://www.testkingit.com/Citrix/latest-1Y0-341-exam-dumps.html
New 2023 Latest Questions 1Y0-341 Dumps - Use Updated Citrix Exam: https://drive.google.com/open?id=1iIrWCpcSjakYzjdPQkkqCrDwW2qGTX1h