1Y0-342試験無料問題集（259題）「Citrix CCP-AppDS-NetScaler Advance Features (Security and Management) 認定」

出題：1

A Citrix Engineer wants to quietly track attempts that cause a web application to display a list of all user accounts.
Which action should the engineer enable to achieve this?

A. Learn

B. Stats

C. Block

D. Log

正解：D 解答を投票する

出題：2

Scenario: A Citrix Engineer observes that when going through Citrix ADC, user connections fail and users are unable to access Exchange server.
However, users can connect directly to the Exchange server. After checking the logs, the engineer finds that the POST request is blocked through the Citrix ADC.
The log in/ var/log/ns.log is as follows:
Jul 20 11:00: 38 x.x.x. 1 07/20/2017:11:00:38 GMT ns 0-PPE-0:APPFW AF_400_RESP 29362 0: x.x.x.1 439800-PPEO- urlwdummy https://test.abc.com/rpc/rpcproxy.dll?mail.sfmta.com:6004 Bad request headers. Content-length exceeds post body limit Which parameter can the engineer modify to resolve the issue while maintaining security?

A. Add an Application Firewall policy with the expression "HTTP.REQ.METHOD.EQ(\ "POST"\)" with APPFW_BYPASS profile bound.

B. Increase the POST body limit using the HTTP profile.

C. Increase the POST body limit under common settings in Application Firewall profile settings.

D. Increase the Maximum Header Length under nshttp_default_profile.

正解：C 解答を投票する

出題：3

Which of the following is NOT a primary benefit of using Citrix Web App Firewall?

A. Ensuring application availability.

B. Virtual desktop infrastructure management.

C. Auditing for PCI-DSS compliance.

D. Protecting against data breaches.

正解：B 解答を投票する

出題：4

Scenario: A Citrix Engineer is implementing Citrix Web App Firewall to protect a new web application. The engineer has created a profile, configured the relaxation rules, and applied signature protections.
Additionally, the engineer has assigned the profile to a policy and bound the policy to the application.
What is the next step for the engineer in protecting the web application?

A. Enable the Signature Auto-Update feature.

B. Test the web application protections with a group of trusted users.

C. Update the global default Citrix Wed App Firewall profile with the new signature file.

D. Enable logging on key protections.

正解：A,C 解答を投票する

出題：5

Scenario: A Citrix Engineer wants to protect a web application using Citrix Web App Firewall. After the Web App Firewall policy is bound to the virtual server, the engineer notices that Citrix Web App Firewall Is NOT blocking bad requests from clients.
Which tool can help the engineer view the traffic that is passing lo and from the client?

A. syslog

B. nstrace

C. nsconmsg

D. aaad.debug

正解：B 解答を投票する

出題：6

Scenario: A Citrix Engineer needs to limit Front End Optimization (FEO) on a web application to mobile users with mobile devices. The engineer decides to create and bind an FEO policy.
Which advanced expression should the engineer use in the FEO policy?

A. HTTP.REQ.HEADER("User-Agent").CONTAINS("Mobile") && CLIENT.IP.SRC.IN_SUBNET("192.168.10.0/24")

B. HTTP.REQ.HEADER("User-Agent").NOTCONTAINS("Windows")&&CLIENT.IS_MOBILE

C. HTTP.RED.HEADER("User-Agent").CONTAINS("Ios") II HTTP.REQ.HEADER("User-Agent").CONTAINS("Andriod")

D. CLIENT.IP.SRIS_MOBILE

正解：A 解答を投票する

出題：7

An attacker inserting a malicious code that compromises the trust relationship between users and a web application is an example of a (n) _____ attack.

A. Form Field Consistency

B. SQL Injection

C. Cross-site Scripting

D. Cookie Tampering

正解：C 解答を投票する

出題：8

Which Markup Language is used along with NITRO API to create a StyleBook?

A. GML

B. HTML

C. XML

D. YAML

正解：D 解答を投票する

出題：9

Which reason can cause fail over in a Citrix ADC Application Delivery Management High Availability pair?

A. The engineer manually forces the secondary server to shut down.

B. A secondary server loses connectivity in the LAN.

C. A primary server encounters a critical software issue.

D. A primary server does NOT receive the SNMP traps from the instances connected.

正解：C 解答を投票する

出題：10

Which feature of Learning should a Citrix Engineer configure to direct Citrix Web App Firewall to learn from specific sessions?

A. Trusted Learning Clients list

B. Manage Content Types for Safe Commerce

C. Default policy expression filter

D. Advanced policy expression filter

正解：A 解答を投票する

出題：11

Scenario: A Citrix Engineer has enabled the IP Reputation feature. The engineer wants to protect a critical web application from a distributed denial of service attack.
Which advanced expression can the engineer write for a Responder policy?

A. CLIENT.IP.SRC.IPREP_THREAT_CATEGORY(SPAM_SOURCES)

B. CLIENT.IP.SRC.IPREP_THREAT_CATEGORY(WINDOWS_EXPLOITS)

C. CLIENT.IP.SRIPREP_THREAT_CATEGORY(WEB_ATTACKS)

D. CLIENT.IP.SRC.IPREP_THREAT_CATEGORY(BOTNETS)

正解：C 解答を投票する

1Y0-342試験無料問題集「Citrix CCP-AppDS-NetScaler Advance Features (Security and Management) 認定」