The Renewal Guide To 1Y0-341 Exam Prep

NEW QUESTION 1
What can a Citrix Engineer do to aggregate Citrix Web App Firewall log messages to a central location?

• A. Enable AppFlow and forward AppFlow records to a Citrix Application Delivery Management (ADM) server.
• B. Modifythe CitrixWeb App Firewall settings.
• C. Create a Citrix Web App Firewall Audit policy.
• D. Create a Responder action and policy, and bind it to the virtual server.

Answer: C

NEW QUESTION 2
Scenario: A Citrix Engineer has enabled the Learn function for a Citrix Web App Firewall profile. After a period of time, the engineer notices that Citrix Web App
Firewall is no longer learning any new rules.
What would cause Citrix Web App Firewall to stop learning?

• A. The Citrix Web App Firewall has reached its capacity of 500 Learn transactions.
• B. The Citrix Web App Firewall feature is NOT licensed.
• C. The Citrix Web App Firewall Learn database has reached its capacity of 20 MB.
• D. The Citrix Web App Firewall profile was unbound from the application.

Answer: C

NEW QUESTION 3
Which variable will display the client's source IP address when added to an HTML Error Object page?

• A. $<CUENTIP.SRC>
• B. ${CUENT.IPSRC}
• C. $(CLIENT.1P.SRC)
• D. $[CLIENT.IP.SRC]

Answer: B

NEW QUESTION 4
Scenario: A Citrix Engineer creates a Responder policy to redirect users attempting to access an application protected with Citrix Web App Firewall. Instead of being redirected, users are seeing an ‘Access Denied’ page.
This is happening because Citrix Web App Firewall is processed. (Choose the correct option to complete the sentence.)

• A. before Responder, and the redirection is invalid
• B. after Responder, but the violation is applied to prevent access
• C. before Responder, and a violation is occurring
• D. after Responder, and the redirection is invalid

Answer: C

NEW QUESTION 5
Which security model should a Citrix Engineer implement to make sure that no known attack patterns pass through Citrix Web App Firewall?

• A. Hybrid
• B. Static
• C. Positive
• D. Negative

Answer: D

NEW QUESTION 6
Scenario: A Citrix Engineer configured signature protections for Citrix Web App Firewall. Signature Auto- Update has been enabled. Upon reviewing the log files, the engineer notices that the auto update process has an error. In the settings for Signature Auto Update the engineer notices that the URL is blank.
Which URL should the engineer enter to restore the update process?

• A. https://s3.amazonaws.com/NSAppFwSignatures/SignaturesMapping.xml
• B. https://download.citrix.com/NSAppFwSignatures/SignaturesMapping.xml
• C. https://www.citrix.com/NSAppFwSignatures/SignaturesMapping.xml
• D. https://citrix.azure.com/NSAppFwSignatures/SignaturesMapping.xml

Answer: A

NEW QUESTION 7
Which Citrix Web App Firewall profile setting can a Citrix Engineer implement to remove non-essential content from web files to improve response time?

• A. Strip HTML Comments
• B. Exclude Uploaded Files from Security Checks
• C. Enable Form Tagging
• D. Exempt Closure URLs from Security Checks

Answer: A

NEW QUESTION 8
Scenario: A Citrix Engineer has configured Citrix Application Delivery Management (ADM) to monitor applications presented by Citrix ADC appliances. When reviewing the App Security Dashboard, the engineer finds no data.
What must the engineer do to ensure data is being collected from the applications?

• A. Enable AppFlow for Security Insight on the instances in Citrix ADM.
• B. Update the password stored in the instance profile on Citrix ADM.
• C. Point the default route on Citrix ADM to the subnet with the NSIPs of the Citrix ADC appliances.
• D. Enable the Web App Firewall feature on the Citrix ADC appliances.

Answer: A

NEW QUESTION 9
Which variable will display the client’s source IP address when added to an HTML Error Object page?

• A. $[CLIENT.IP.SRC]
• B. ${CLIENT.IP.SRC}
• C. $<CLIENT.IP.SRC>
• D. $(CLIENT.IP.SRC)

Answer: B

NEW QUESTION 10
Which security model should a Citrix Engineer implement to ensure that only appropriate traffic that matches the expected application behavior is permitted to pass through to the web application?

• A. Dynamic
• B. Hybrid
• C. Positive
• D. Negative

Answer: C

NEW QUESTION 11
Which license must be present on the Citrix ADC for the Citrix Application Delivery Management (ADM) Service to generate HDX Insight reports that present one year’s worth of data?

• A. Advanced
• B. Premium Plus
• C. Premium
• D. Standard

Answer: C

NEW QUESTION 12
A Citrix Engineer reviews the App Dashboard and notices that three of the monitored applications have an App Score of less than 50.
The engineer can interpret the App Score as a metric of application. (Choose the correct option to complete the sentence.)

• A. security, with a lower score indicating better security
• B. performance and availability, with a higher score indicating better health
• C. performance and availability, with a lower score indicating better health
• D. security, with a higher score indicating better security

Answer: B

NEW QUESTION 13
Scenario: A Citrix Engineer has established protections for web applications using Citrix Web App Firewall. One of the application owners is concerned that some negative traffic is passing through to the application servers. The owner wants confirmation that Citrix Web App Firewall is blocking negative traffic. Which CLI command can the engineer use to display statistics on a per-protection basis for the enabled protections?

• A. stat appfw policyjabel <policy_label_name>
• B. stat appfw policy <policy_name>
• C. stat appfw profile <profile_name>
• D. stat appfw signature <signature_object>

Answer: C

NEW QUESTION 14
A Citrix Engineer wants to create a configuration job template to add a DNS nameserver to each Citrix ADC instance. What is a valid variable name for the DNS nameserver?

• A. %dns_nameserver%
• B. %dns_nameserver
• C. $dns_nameserver$
• D. $dns nameserver

Answer: C

NEW QUESTION 15
Scenario: A Citrix Engineer wants to protect a web application using Citrix Web App Firewall. After the Web App Firewall policy afweb_protect is bound to the virtual server, the engineer notices that Citrix Web App Firewall is NOT properly displaying the page.
A positive number for the Policy Hits counter for afweb_protect, tells the engineer the number of times Citrix Web App Firewall . (Choose the correct option to complete the sentence.)

• A. received a request that matched the policy expression for afweb_protect
• B. blocked traffic for web applications assigned the afweb_protect policy
• C. logged a request matching the expression defined in the afweb_protect policy
• D. forwarded users to the Redirect URL specified in the profile assigned to afweb_protect

Answer: A

NEW QUESTION 16
......