
合格できるCitrix Citrix CCP-AppDS-NetScaler Advance Features (Security and Management)試験最速合格保証最近更新されたPassTest問題集!
合格できる1Y0-342試験の259問題で最適なPassTest出題問題
質問 # 145
Scenario: A Citrix Engineer discovers a security vulnerability in one of its websites. The engineer takes a header trace and checks the Application Firewall logs.
The following was found in part of the logs:
method=GET request = http://my.companysite.net/FFC/sc11.html msg=URL length (39) is greater than maximum allowed (20).cn1=707 cn2=402 cs1=owa_profile cs2=PPE0 cs3=kW49GcKbnwKByByi3+jeNzfgWa80000 cs4=ALERT cs5=2015 Which type of Application Firewall security check can the engineer configure to block this type of attack?
- A. Cookie Consistency
- B. Cross-site Scripting
- C. Start URL
- D. Buffer Overflow
正解:B
質問 # 146
A Citrix Engineer observes that the servers hosting a critical application are crashing on a regular basis.
Which protection could the engineer implement on a Citrix Web App Firewall in front of the application?
- A. HTML SQL Injection
- B. HTML Cross-Site Scripting (XSS)
- C. Buffer Overflow Check
- D. Start URL
正解:C
質問 # 147
A Citrix Engineer needs to configure an application firewall profile to ensure that the images uploaded on the website are NOT malicious. The engineer needs to create a policy to filter the upload requests and ensure that they are in JPEG format.
Which expression can the engineer use to fulfill this requirement?
- A. http.req.url.contains (".jpeg) & & http.req.method.eq (GET)
- B. http.req.header ("Content-Type").contains ("image/jpeg") || http.req.method.eq(POST)
- C. http.req.url.endswith (".jpeg) || http.req.method.eq (GET)
- D. http.req.url.endswith (".jpeg) & & http.req.method.eq (POST)
正解:B
質問 # 148
Which two security checks invoke sessionization?
- A. HTML Cross-Site Scripting
- B. CSRF Form Tagging
- C. Form Field Consistency
- D. Field Formats
正解:B、C
質問 # 149
A Citrix Engineer has correctly installed and configured the Citrix ADC Web Logging (NSWL) client but has noticed that logs are NOT being updated What could be causing this issue?
- A. The NSWL buffer is full on the Citrix ADC
- B. The NSWL client executable is NOT running on the client.
- C. The TCP port 3011 is NOT open between the NSWL client and Citrix ADC.
- D. An NSIP is missing in the log.conf file
正解:D
質問 # 150
A Citrix Engineer needs to configure an Application Firewall policy. According to company policies, the engineer needs to ensure that all the requests made to the website are originating from North America.
Which policy expressions will help the engineer accomplish the requirement?
- A. CLIENT.IP.SRC.MATCHES ("North America.US.*.*.*.*")
- B. CLIENT.IP.SRC.MATCHES_LOCATION ("North America.US.*.*.*.*"). NOT
- C. CLIENT.IP.DST.MATCHES ("North America.US.*.*.*.*")
- D. CLIENT.IP.SRC.MATCHES_LOCATION ("North America.US.*.*.*.*")
正解:D
質問 # 151
How can a Citrix Engineer configure a specific LDAP attribute in the nFactor implementation?
- A. Add the attribute on the nFactor traffic policy.
- B. Change the order of the policies.
- C. Specify the attribute in the LDAP server attributes field.
- D. Change the login schema and add the new attribute.
正解:C
質問 # 152
In which scenario would you primarily use Citrix Web App Firewall learning?
- A. When you need to optimize application delivery.
- B. When you are unsure of the security checks to apply.
- C. When you need to set up VPN access.
- D. When you need to manage user profiles.
正解:B
質問 # 153
Scenario: A Citrix Engineer has a project to enable Integrated Caching on a Citrix ADC for a Financial Consulting company whose clients monitor their stocks in real time. Clients are reporting a delay in the displaying of the stock values.
What can the engineer configure on the Citrix ADC to enable data to be presented to the clients in real time?
- A. Dynamic Content Groups
- B. Static Content Group
- C. Basic Content Group
- D. Add another Citrix ADC
正解:A
質問 # 154
Scenario: A Citrix Engineer implements Application-level Quality of Experience (AppQoE) to protect a web application. The engineer configures the AppQoE action to deliver a custom response from a backup server once the maximum number of concurrent connection is reached.
To achieve this, the engineer should set the Acton Type to and specify the. (Choose the correct option to complete the sentence.)
- A. NS; Custom File
- B. NS; Alternate Content Server Name
- C. ACS; Custom File
- D. ACS; Alternate Content Server Name
正解:D
質問 # 155
An organization wants to deploy another instance of Citrix Application Delivery Management for redundancy. They should
- A. Create additional instances
- B. Install SSL Certificates
- C. Use the Citrix ADM Service
- D. Perform the initial configuration
正解:A
質問 # 156
Which of the following is essential for understanding the traffic patterns and potential threats detected by Citrix Web App Firewall?
- A. Optimizing application delivery
- B. Setting up VPN access
- C. Implementing logging and reporting
- D. Managing user profiles
正解:C
質問 # 157
The NetScaler logging client server can be installed and configured to store the log for ___________.
- A. HTTP and HTTPS requests processed by the NetScaler
- B. status of all the HTTP and HTTPS backend web servers
- C. statistics of the HTTP and HTTPS web sites load balanced on NetScaler
- D. HTTP and HTTPS active connections on the NetScaler
正解:A
質問 # 158
To reduce the number of HTTP requests and improve web page load times, which front-end optimization should be utilized?
- A. Content caching
- B. Minification of JavaScript and CSS
- C. SSL offloading
- D. Image compression
正解:B
質問 # 159
Which reason can cause fail over in a Citrix ADC Application Delivery Management High Availability pair?
- A. A primary server encounters a critical software issue.
- B. The engineer manually forces the secondary server to shut down.
- C. A secondary server loses connectivity in the LAN.
- D. A primary server does NOT receive the SNMP traps from the instances connected.
正解:A
質問 # 160
Scenario: A Citrix Engineer configures Citrix Web App Firewall to protect an application. Users report that they are NOT able to log on. The engineer enables a Start URL relaxation for the path //login.aspx.
What is the effect of the Start URL relaxation on the application?
- A. External users are blocked from the path /login.aspx. Internal users are permitted to the path /login.aspx
- B. Access to the path /login.aspx is unblocked.
- C. Access to the path /login.aspx is blocked.
- D. Non-administrative users are blocked from the path /login.aspx Administrative users are permitted to the path /lo
正解:B
質問 # 161
Scenario: A Citrix Engineer has established protections for web applications using Citrix Web App Firewall. One of the application owners is concerned that some negative traffic is passing through to the application servers. The owner wants confirmation that Citrix Web App Firewall is blocking negative traffic.
Which CLI command can the engineer use to display statistics on a per-protection basis for the enabled protections?
- A. stat appfw signature <signature_object>
- B. stat appfw profile <profile_name>
- C. stat appfw policyjabel <policy_label_name>
- D. stat appfw policy <policy_name>
正解:B
質問 # 162
Scenario: A Citrix Engineer is implementing Integrated Caching to increase performance of a web application. The Application Engineer replaces a small logo on the main page with a new one. Later on, when the engineer attempts to access the page, the old logo is displayed.
Which enabled setting in the Content Group would cause this to happen?
- A. Ignore browser's reload request
- B. Do not cache - if size exceeds 500 KB
- C. Expire content after 60 seconds
- D. Do not cache - if hits are less than 1
正解:A
質問 # 163
In a scenario where a Citrix ADC system experiences slow response times due to heavy SSL traffic, which feature can help improve performance?
- A. Connection Multiplexing
- B. Front End Optimization
- C. Content Caching
- D. SSL Offloading
正解:D
質問 # 164
Which two actions can a Citrix Engineer use to provide Denial of Service (DoS) protection with the AppQoE feature? (Choose two.)
- A. HIC Response
- B. Simple Response
- C. Denial Response
- D. Complex Response
正解:A、B
質問 # 165
Which Citrix Application Delivery Management (ADM) Analytics page allows a Citrix Engineer to monitor web application traffic?
- A. HDX Insight
- B. Web Insight
- C. WAN Insight
- D. Gateway Insight
正解:B
質問 # 166
......
合格突破受験者シミュレーションされた1Y0-342試験問題集:https://www.passtest.jp/Citrix/1Y0-342-shiken.html
無料テストエンジンはCitrix CCP-AppDS-NetScaler Advance Features (Security and Management)認定試験:https://drive.google.com/open?id=1Hk6gAptmJaiuw8l6nzYQxwOVQ7ncOq73