Free Citrix ADC Advanced Topics – Security Management and Optimization Exam 1Y0-341 Exam Practice Test

Scenario: A Citrix Engineer implements Application-level Quality of Experience (AppQoE) to protect a web application. Shortly after that, users call to complain that nearly every request is being met with a Captcha.What can the engineer do to improve the user experience?

• Disable the Captcha.
  
• Increase the DOS Attack Threshold.
  
• Increase the Policy Queue Depth.
  
• Increase the Session Life.
  

Scenario: A Citrix Engineer wants to protect a web application using Citrix Web App Firewall. After the Web App Firewall policy afweb_protect is bound to the virtual server, the engineer notices that Citrix Web App Firewall is NOT properly displaying the page.A positive number for the Policy Hits counter for afweb_protect, tells the engineer the number of times Citrix Web App Firewall__________. (Choose the correct option to complete the sentence.)

• received a request that matched the policy expression for afweb_protect
  
• blocked traffic for web applications assigned the afweb_protect policy
  
• logged a request matching the expression defined in the afweb_protect policy
  
• forwarded users to the Redirect URL specified in the profile assigned to afweb_protect
  

A Citrix Engineer wants to quietly track attempts that cause a web application to display a list of all user accounts.Which action should the engineer enable to achieve this?

• Stats
  
• Block
  
• Log
  
• Learn
  

What should a Citrix Engineer do when using the Learn feature for Start URL relaxation?

• Ensure that only valid or correct traffic is directed to the protected web application while in Learn mode.
  
• Invite at least 10 test users to collect sufficient data for the Learn feature.
  
• Create a Web App Firewall policy that blocks unwanted traffic.
  
• Ensure that the /var file system has at least 10 MB free.
  

Which two protections ensure that the correct data is returned by the client? (Choose two.)

• Form Field Consistency.
  
• Field Formats
  
• HTML Cross-Site Scripting (XSS)
  
• Cross-Site Request Forgeries (CSRF)
  

A Citrix Engineer has defined an HTTP Callout, hc_authorized_location, to return the value ''Authorized'' if client's IP address is on a list of authorized external locations.Which advanced expression should the engineer use in a policy for testing this condition?

• SYS.HTTP_CALLOUT(hc_authorized_location).IS_TRUE
  
• SYS.HTTP_CALLOUT(hc_authorized_location).EQ(''Authorized'')
  
• SYS.HTTP_CALLOUT(hc_authorized_location).IS_VALID
  
• SYS.HTTP_CALLOUT(hc_authorized_location).EQUALS_ANY(''Authorized'')
  

Scenario: A Citrix Engineer needs to limit Front End Optimization (FEO) on a web application to mobile users with mobile devices. The engineer decides to create and bind an FEO policy.Which advanced expression should the engineer use in the FEO policy?

• HTTP.REG.HEADER(''User-Agent'').CONTAINS(''Mobile'')&&CLIENT.IP.SRC.IN_SUBNET(192.168.10.0/24.NOT
  
• HTTP.REQ.HEADER(''User-Agent'').NOTCONTAINS(''Windows'')&&CLIENT.IS_MOBILE
  
• CLIENT.IP.SRC.IS_MOBILE
  
• HTTP.RED.HEADER(''User-Agent'').CONTAINS(''Ios'') II HTTP.REQ.HEADER(''User-Agent'').CONTAINS(''Andriod'')
  

A Citrix Engineer reviews the App Dashboard and notices that three of the monitored applications have an App Score of less than 50.The engineer can interpret the App Score as a metric of application . (Choose the correct option to complete the sentence.)

• security, with a lower score indicating better security
  
• performance and availability, with a higher score indicating better health
  
• performance and availability, with a lower score indicating better health
  
• security, with a higher score indicating better security
  

Scenario: A Citrix Engineer is asked to implement multi-factor authentication for Citrix Gateway. The engineer creates the authentication policies and binds the policies to the appropriate bind points. The engineer creates a custom form using Notepad++ to format the page which will capture the user's credentials. The engineer uploads the form and binds the form to the authentication policy.When the engineer connects to the Citrix Gateway for validation testing, the form fields are NOT correctly displayed. What is the most likely cause of this display issue?

• The login schema contains invalid XML syntax.
  
• The authentication policies are bound in the wrong order
  
• The first authentication server is offline.
  
• The policy bindings are NOT consistent with the login schema.
  

Scenario: A Citrix Engineer is monitoring the environment with Citrix Application Management (ADM). Management has asked lota report of high-risk traffic to protected internal websites.Which dashboard can the engineer use to generate the requested report?

• Transactions
  
• APP
  
• APP Security
  
• Users & Endpoints