Free 1Y0-341 Exam Braindumps certification guide Q&A [Q23-Q40]

Rate this post

Free 1Y0-341 Exam Braindumps certification guide Q&A

1Y0-341 Certification Overview Latest 1Y0-341 PDF Dumps

NO.23 A Citrix Engineer needs to set up access to an internal application for external partners.
Which two entities must the engineer configure on the Citrix ADC to support this? (Choose two.)

SAML Policy

SAML IdP Profile

SAML IdP Policy

SAML Action

NO.24 How can a Citrix Engineer monitor the Citrix ADC appliances to check that all SSL certificates have a key strength of at least 2048 bits from the SSL Dashboard Settings?

Delete 512, 1024, and 4096 on the Enterprise Policy tab.

Delete 512 and 1024 on the Enterprise Policy tab.

Select 2048 and 4096 on the Enterprise Policy tab.

Select 2048 on the Enterprise Policy tab.

NO.25 A Web Application Engineer is reviewing log files and finds that a large number of bad HTTP requests are being sent to the web application servers.
What can the Citrix ADC Engineer to do prevent bad HTTP requests from getting to the web application?

Create an HTTP profile and select ‘Drop invalid HTTP requests’.
Assign the HTTP profile to the virtual server.

Create an HTTP profile and select ‘Drop invalid HTTP requests’.
Assign the HTTP profile to the Web App Firewall policy.

Modify the default HTTP profile and select ‘Drop invalid HTTP requests’.
Bind the default HTTP profile globally.

Select ‘Change HTTP Parameters’ under System > Settings.
Select ‘Drop invalid HTTP requests’.

NO.26 A Citrix Engineer needs to write a regular expression to treat the URL www.citrix.com as a literal string.
Which regular expression can the engineer use?

www$.citrix$.com

[www].[citrix]. [com]

www+.citrix+.com

www.citrix.com

NO.27 Scenario: A Citrix Engineer must enable a cookie consistency security check and ensure that all the session cookies get encrypted during the transaction. The engineer needs to ensure that none of the persistent coolies are encrypted and decrypted and decrypt any encrypted cookies during the transaction. Which cookie consistency security feature will the engineer configure in the following configuration to achieve the desired results?
add appfw profile Test123 startURLAction none- denyURLAction none- cookieConsistencyAction log – cookieTransforms ON cookieEncryptionecryptSessionOnly addCookieFlagshttpOnly – crossSiteScriptingAction none- SQLInjectionAction log stats SQLInjectionTransfrormSpecialChars ON- SQLInjectionCheckSQLWildChars ON fieldFormatAction none bufferOverflowAction none – responseContentType “application/octet- stream”- XMLSQLInjectionAction none XMLXSSAction none- XMLWSIAction none- XMLValidationAction none

Configure Encrypt Server cookies to “Encrypt All”

Configure Encrypt Server cookies to “None”

Configure Encrypt Server cookies to “Encrypt Session Only”

Configure Encrypt Server cookies to “Encrypt only”

NO.28 A Web Application Engineer is reviewing log files and finds that a large number of bad HTTP requests are being sent to the web application servers.
What can the Citrix ADC Engineer to do prevent bad HTTP requests from getting to the web application?

Create an HTTP profile and select ‘Drop invalid HTTP requests’.
Assign the HTTP profile to the virtual server.

Create an HTTP profile and select ‘Drop invalid HTTP requests’.
Assign the HTTP profile to the Web App Firewall policy.

Modify the default HTTP profile and select ‘Drop invalid HTTP requests’.
Bind the default HTTP profile globally.

Select `Change HTTP Parameters’ under System > Settings.
Select ‘Drop invalid HTTP requests’.

NO.29 Which protection can a Citrix Engineer implement to prevent a hacker from extracting a customer list from the company website?

Cross-Site Request Forgeries (CSRF)

Form Field Consistency

HTML Cross-Site Scripting (XSS)

HTML SQL Injection

NO.30 Scenario: A Citrix Engineer wants to protect a web application using Citrix Web App Firewall. After the Web App Firewall policy is bound to the virtual server, the engineer notices that Citrix Web App Firewall is NOT blocking bad requests from clients. Which tool can help the engineer view the traffic that is passing to and from the client?

nstrace

nsconmsg

syslog

aaad.debug

NO.31 A Citrix Engineer needs to ensure that all traffic to the virtual server is blocked if NONE of the bound Application Firewall policies are matched.
Which setting can the engineer configure to meet this requirement?

set appfw settings undefAction APPFW_BLOCK

set ns httpProfilenshttp_default_profile-dropInvalReqs DISABLED

set ns httpProfienshttp_default_profile dropInvalReqs ENABLED

set appfw settings defaultProfile APPFW_BLOCK

NO.32 Scenario: A Citrix Engineer has configured Application Firewall and enabled it in learning mode. However, the Application Firewall database is reaching full capacity due to excessive requests. What can the engineer configure to mitigate this issue?

Enable learning only on XML based profiles.

Increase NetScaler hard drive capacity.

Configure caching policies.

Configure Trusted Learning Clients.

NO.33 Which mechanism does the NetScaler use to enable a safe and speedy data exchange between a client/ server initial TCP handshake?

TCP Fast Open (TFO)

TCP Burst Rate Control

TCP Hystart

TCP Time Stamp

NO.34 Scenario: A Citrix Engineer has deployed four NetScaler MPXs with the following network configuration:
– Management traffic is on VLAN 5 (NSIP).
– Application and server traffic is on VLAN 10 (SNIP).
The engineer added the NetScaler Management and Analytics System (NMAS) interface to VLAN
10 to deploy a NMAS High Availability (HA) pair to manage and monitor the applications and virtual servers. After doing so, the engineer is NOT able to see the NetScaler or applications that need to be managed.
How can the engineer resolve the issue?

Configure VLAN 5 as NSVLAN 5

Move the NMAS interface to VLAN 5

Configure VLAN 5 as NSSYNC VLAN

Bind SNIP to VLAN 5

NO.35 A Citrix Engineer needs to configure the authentication feature on NetScaler Management and Analytics System (NMAS) to enable local authentication to take over if the external authentication fails.
What can the engineer configure to meet this requirement?

Select LOCAL as the Server Type when configuring authentication.

Select EXTERNAL as the Server Type when configuring authentication.

Enable the fallback local authentication option.

Configure Cascade authentication with External as primary and LOCAL as secondary.

NO.36 Which NetScaler owned IP address is used by NetScaler Management and Analytics System (NMAS) to communicate with NetScaler Instances?

VIP (Virtual IP)

NSIP (NetScaler IP)

CLIP (Cluster IP)

SNIP (Subnet IP)

NO.37 Scenario: A Citrix Engineer has configured Integrated Caching to improve application performance. Within hours, the Citrix ADC appliance has run out of memory.
Which Content Group setting can the engineer configure to show the caching process until a need is demonstrated?

Maximum memory usage limit

Quick Abort Size

Do not cache – if hits are less than

Do not cache – if size exceeds

NO.38 A Citrix Engineer needs to implement a rate limiting policy to permit an average of one request in 40 ms using NetScaler.
Which Limit Identifier will meet this requirement?

adds ns limitIdentifierlimit_req-threshold 40 mode CONNECTION

set limitidentifierlimit_req mode request_rate timeslice 2000 Threshold 50 limitType smooth

add ns limitIdentifierlimit_req threshold 1 mode CONNECTION

set limitidentifierlimit_req mode request_rate timeslice 2000 Threshold 50 limitTypeBursty

NO.39 Which method is used by NetScaler Management and Analytics System (NMAS) to gather licensing information from NetScaler?

CFLOW

APPFLOW

NITRO

IPFLOW

NO.40 Scenario: A Citrix Engineer is trying to optimize a website that is load balanced on a NetScaler and is accessed by mobile users. The web application is complex and made up of hundreds of embedded images, scripts, and other objects per page. This limitation is creating a significant bottleneck, resulting in excessive load times.
Which NetScaler feature can the engineer use to optimize the web application?

Domain Sharding

SPDY (Speedy)

Multipath TCP

Minification