1Y0-340 Online Practice Questions and Answers

Scenario: A Citrix Engineer needs to configure an Application Firewall policy for an online shopping website called "mycompany.com". As a security measure, the shopping cart application is hosted on a separate directory "/mycart" on the backend server. The engineer configured a profile to secure the connections to this shopping cart and now needs to ensure that this profile is allied to all incoming connections to the shopping cart.

Which policy expression will accomplish this requirement?

A. http.req.url. contains("/mycart") and http:req.url.hostname.eq("mycompany.com")

B. http.req.url. contains("/mycart") || http:req.url.hostname.eq("mycompany.com")

C. http.req.header ("url").contains ("/mycart") || http.req.url.contains ("mycompany.com")

D. http.req.header ("url").contains ("/mycart") andand http:req.url.contains ("mycompy.com")

Scenario: A Citrix Engineer configures an Application Firewall HTML SQL Injection Check and sets it to BLOCK and to use SQLSplCharANDKeyword as the SQL injection type. The engineer checks the logs and finds that nothing is being blocked.

What can be the cause of the Application Firewall failing to block the attack?

A. The request contains SQL Wildcard Characters.

B. The request neither contains SQL Special Characters nor keywords.

C. The request only contains SQL Special Characters.

D. The request only contains SQL keywords.

Which two settings can be used when creating a Cache Content group? (Choose two.)

A. Remove response cookies

B. Set Lazy DNS resolution

C. Expire cookies

D. Use DNS Query

E. Use browser settings

Scenario: A Citrix Engineer receives the following error when accessing content from a virtual server:

"Page cannot be displayed."

However, the content is accessible when connecting directly to the web server.

The engineer captured the traffic using nstrace and found that the amount of data sent from the web server

exceeds the content length defined in the HTTP header.

Which action can the engineer take to resolve the issue?

A. Disable Drop extra CRLF in the HTTP Profile.

B. Enable Drop extra data from server in the HTTP Profile.

C. Increase the Content length in the Application Firewall Profile.

D. Disable Drop extra data from server in the HTTP Profile.

Scenario: A Citrix Engineer has created a default admin user with username Admin1 and password `nsroot' for the tenant example-online. However, the tenant administrator is unable to log in as username Admin1 and password `nsroot'.

Which action resolves this problem?

A. User should use the system administrator credentials to login.

B. The user BIND DN should be specified.

C. The default password must be change before login.

D. User should enter username as example-online\Admin1.

A Citrix Engineer needs to configure an Application Firewall policy. According to company policies, the engineer needs to ensure that all the requests made to the website are originating from North America.

Which policy expressions will help the engineer accomplish the requirement?

A. CLIENT.IP.SRC.MATCHES_LOCATION ("North America.US.*.*.*.*")

B. CLIENT.IP.SRC.MATCHES_LOCATION ("North America.US.*.*.*.*"). NOT

C. CLIENT.IP.DST.MATCHES ("North America.US.*.*.*.*")

D. CLIENT.IP.SRC.MATCHES ("North America.US.*.*.*.*")

Which setting should be enabled to convert the content-length form submission requests to chunked requests, when HTML SQL Injection protection is enabled?

A. Optimize Partial Requests

B. Streaming

C. Enable form tagging

D. Percentage Recursive Decoding

A Citrix Engineer needs generate and present a NetScaler PCI-DSS report to management. The report should include a PCI-DSS summary of the required security measures for PCI-DSS compliance.

Where can the engineer generate the report from?

A. Documentation > Nitro API

B. Reporting> System

C. Dashboard>System Overview

D. Configuration>System>Reports

Scenario: A Citrix Engineer is trying to optimize a website that is load balanced on a NetScaler and is accessed by mobile users. The web application is complex and made up of hundreds of embedded images, scripts, and other objects per page. This limitation is creating a significant bottleneck, resulting in excessive load times.

Which NetScaler feature can the engineer use to optimize the web application?

A. Domain Sharding

B. SPDY (Speedy)

C. Multipath TCP

D. Minification

A Citrix Engineer needs to configure NetScaler Management and Analytics System (NMAS) in their network to retain network reporting data, events, audit logs, and task logs for 20 days.

Which settings can the engineer configure to meet the requirement?

A. System Prune Settings

B. System Backup Settings

C. Instance Backup Settings

D. Syslog Prune Settings