How can a Citrix Engineer monitor the Citrix ADC appliances to check that all SSL certificates have a key strength of at least 2048 bits from the SSL Dashboard Settings?

Select 2048 and 4096 on the Enterprise Policy tab.

Delete 512, 1024, and 4096 on the Enterprise Policy tab.

Delete 512 and 1024 on the Enterprise Policy tab.

Select 2048 and 4096 on the Enterprise Policy tab.

Select 2048 on the Enterprise Policy tab.

A Web Application Engineer is reviewing log files and finds that a large number of bad HTTP requests are being sent to the web application servers.What can the Citrix ADC Engineer to do prevent bad HTTP requests from getting to the web application?

Select ‘Change HTTP Parameters’ under System > Settings.Select'Drop invalid HTTP requests’.

Create an HTTP profile and select 'Drop invalid HTTP requests’.Assignthe HTTP profile to the virtual server.

Create an HTTP profile and select 'Drop invalid HTTP requests’.Assignthe HTTP profile to the Web App Firewall policy.

Modify the default HTTP profile and select 'Drop invalid HTTPrequests’.Bind the default HTTP profile globally.

Select ‘Change HTTP Parameters’ under System > Settings.Select'Drop invalid HTTP requests’.

Scenario: A Citrix Engineer wants to protect a web application using Citrix Web App Firewall. After the Web App Firewall policy afweb_protect is bound to the virtual server, the engineer notices that pages are displaying in plain text with graphics included.What is the likely cause of this?

The Start URL list does NOT include CSS files.

The Safe Objects protection is NOT properly configured.

The Start URL list does NOT include CSS files.

The Web App Firewall feature is disabled.

The policy expression allows for HTML files only.

Which two protections ensure that the correct data is returned by the client?(Choose two.)

Cross-Site Request Forgeries (CSRF)

HTML Cross-Site Scripting (XSS)

Cross-Site Request Forgeries (CSRF)

Scenario: A Citrix Engineer is asked to implement multi-factor authentication for Citrix Gateway. The engineer creates the authentication policies and binds the policies to the appropriate bind points. The engineer creates a custom form using Notepad++ to format the page which will capture the user’s credentials.To which folder on the Citrix ADC will the engineer need to upload this form?

/flash/nsconfig/loginschema/LoginSchema

Scenario: A Citrix Engineer used Learning to establish the HTML SQL Injection relaxations for a critical web application. The engineer now wishes to begin working on the protections for a different web application. The name of the Web App Profile is appfw_prof_customercare.Which CLI command can the engineer use to empty the Learn database?

set appfw learningsettings appfw_prof_customercare -SQLInjectionMinThreshold 0

set appfw learningsettings appfw_prof_customercare -startURLMinThreshold 0

export appfw learningdata appfw_prof_customercare

Which report can a Citrix Engineer review to ensure that the Citrix ADC meets all PCI-DSS requirements.

Generate Application Firewall Configuration

Application Firewall Violations Summary

Scenario: During application troubleshooting, a Citrix Engineer notices that response traffic received from a protected web application is NOT matching what the web server is sending out. The engineer is concerned that someone is trying to disrupt caching behavior.Which action is the Citrix Web App Firewall performing that would trigger this false positive?

Removing the Accept-Encoding header

Removing the Last-Modified header

Removing the Accept-Encoding header

Modifying and adding cookies in the response

Scenario: A Citrix Engineer configures Citrix Web App Firewall to protect an application. Users report that they are NOT able to log on. The engineer enables a Start URL relaxation for the path //login.aspx.What is the effect of the Start URL relaxation on the application?

Access to the path /login.aspx is unblocked.

Access to the path /login.aspx is blocked.

External users are blocked from the path /login.aspx.Internal users are permitted to the path /login.aspx.

Non-administrative users are blocked from the path /login.aspxAdministrative users are permitted to the path /login.aspx.

Which setting in the Cookie Consistency protection feature does a Citrix Engineer need to configure to ensure that all a cookie is sent using TLS only?

Flags to Add in Cookies > Secure

Encrypt Server Cookies > Encrypt All

Flags to Add in Cookies > Secure

Encrypt Server Cookies > Encrypt Session Only

Proxy Server Cookies > Session Only

Scenario: A Citrix Engineer has configured Integrated Caching to improve application performance. Within hours, the Citrix ADC appliance has run out of memory.Which Content Group setting can the engineer configure to show the caching process until a need is demonstrated?

Do not cache – if hits are less than

Do not cache – if size exceeds

A Citrix Engineer reviews the App Dashboard and notices that three of the monitored applications have an App Score of less than 50.The engineer can interpret the App Score as a metric of application ___________. (Choose the correct option to complete the sentence.)

performance and availability, with a higher score indicating better health

security, with a lower score indicating better security

performance and availability, with a higher score indicating better health

performance and availability, with a lower score indicating better health

security, with a higher score indicating better security

A review of purchases made at an online retailer shows that several orders were processed for items at an unpublished price.Which protection can a Citrix Engineer implement to prevent a site visitor from modifying the unit price of a product on the shopping cart page?

Cross-Site Request Forgeries (CSRF)

HTML Cross-Site Scripting (XSS)

Scenario: A Citrix Engineer configures Citrix Web App Firewall to protect an application. Upon reviewing the log files, the engineer notices a pattern of forceful browsing toward the configuration page for the application. To protect against this, the engineer enforces Start URL and enables Enforce URL Closure.What is the effect of enforcing Start URL and enabling Enforce URL Closure on the application?

Access to the path /config.aspx is unblocked when a user clicks a referring link elsewhere on the website.

Non-administrative users are blocked from the path /config.aspx.Administrative users are permitted to the path /config.aspx.

External users are blocked from the path /config.aspx.Internal users are permitted to the path /config.aspx. D. Access to the path /config.aspx is blocked.

Scenario: A Citrix Engineer implements Application-level Quality of Experience (AppQoE) to protect a web application. The engineer configures the AppQoE action to deliver a custom response from a backup server once the maximum number of concurrent connection is reached.To achieve this, the engineer should set the Acton Type to ________ and specify the ________. (Choose the correct option to complete the sentence.)

NS; Alternate Content Server Name

ACS; Alternate Content Server Name

Scenario: A Citrix Engineer wants to configure the Citrix ADC for OAuth authentication. The engineer uploads the required certificates, configure the actions, and creates all the necessary policies. After binding the authentication policy to the application, the engineer is unable to authenticate.What is the most likely cause of this failure?

The policy bindings were assigned incorrect priorities.

Scenario: A Citrix Engineer is asked to help improve the performance of a web application. After capturing and analyzing a typical session, the engineer notices a large number of user requests for the stock price of the company.Which action can the engineer take to improve web application performance for the stock quote?

Enable the Minify JavaScript optimization.

Enable the Combine CSS optimization.

Create a dynamic content group.

Enable the Minify JavaScript optimization.

Scenario: A Citrix Engineer is notified that improper requests are reacting the web application. While investigating, the engineer notices that the Citrix Web App Firewall policy has zero hits. What are two possible causes for this within the Citrix Web App Firewall policy? (Choose two.)

It is NOT bound to the virtual server.

It has been assigned an Advanced HTML profile.

It is NOT bound to the virtual server.

It has been assigned the built-in APPFW_RESET profile.

Which feature of Learning should a Citrix Engineer configure to direct Citrix Web App Firewall to learn from specific sessions?

Advanced policy expression filter

Default policy expression filter

Manage Content Types for Safe Commerce

A Citrix Engineer has defined an HTTP Callout, hc_authorized_location, to return the value “Authorized” if client’s IP address is on a list of authorized external locations.Which advanced expression should the engineer use in a policy for testing this condition?

SYS.HTTP_CALLOUT(hc_authorized_location).EQUALS_ANY(“Authorized”)

SYS.HTTP_CALLOUT(hc_authorized_location).IS_TRUE

SYS.HTTP_CALLOUT(hc_authorized_location).EQ(“Authorized”)

SYS.HTTP_CALLOUT(hc_authorized_location).IS_VALID

SYS.HTTP_CALLOUT(hc_authorized_location).EQUALS_ANY(“Authorized”)

Scenario: A Citrix Engineer configured signature protections for Citrix Web App Firewall. Signature Auto-Update has been enabled. Upon reviewing the log files, the engineer notices that the auto update process has an error. In the settings for Signature Auto Update the engineer notices that the URL is blank.Which URL should the engineer enter to restore the update process?

https://s3.amazonaws.com/NSAppFwSignatures/SignaturesMapping.xml

https://download.citrix.com/NSAppFwSignatures/SignaturesMapping.xml

https://www.citrix.com/NSAppFwSignatures/SignaturesMapping.xml

https://citrix.azure.com/NSAppFwSignatures/SignaturesMapping.xml

Scenario: A Citrix Engineer is reviewing the Citrix Web App Firewall log files using the GUI. Upon further analysis, the engineer notices that legitimate application traffic is being blocked.What can the engineer do to allow the traffic to pass through while maintaining security?

Note the protection blocking the traffic in the log entry. Edit the profile and deselect the Block action for the protection.

Select the check box in the log entry. Choose Dismiss to allow the traffic to pass through from the Action menu.

Note the protection blocking the traffic in the log entry. Create a new profile and policy and bind it with a larger priority number.

Select the check box in the log entry. Choose Edit & Deploy to create a relaxation rule from the Action menu.

Scenario: A Citrix Engineer has enabled the IP Reputation feature. The engineer wants to protect a critical web application from a distributed denial of service attack.Which advanced expression can the engineer write for a Responder policy?

CLIENT.IP.SRC.IPREP_THREAT_CATEGORY(WEB_ATTACKS)

CLIENT.IP.SRC.IPREP_THREAT_CATEGORY(SPAM_SOURCES)

CLIENT.IP.SRC.IPREP_THREAT_CATEGORY(BOTNETS)

CLIENT.IP.SRC.IPREP_THREAT_CATEGORY(WEB_ATTACKS)

CLIENT.IP.SRC.IPREP_THREAT_CATEGORY(WINDOWS_EXPLOITS)

Scenario: A Citrix Engineer implements Application-level Quality of Experience (AppQoE) to protect a web application. Shortly after that, users call to complain that nearly every request is being met with a Captcha.What can the engineer do to improve the user experience?

Increase the DOS Attack Threshold.

Increase the Policy Queue Depth.

Citrix 1Y0-341 Practice Test 1 - Free Online Exam Prep & Questions

Home / Citrix / 1Y0-341 / Practice Test 1

Ask Question

00:00:00

Show Answer

Training mode

Report Issue

Restart test

Question 1 / 40

Scenario: A Citrix Engineer created the policies in the attached exhibit.

Click the Exhibit button to view the list of policies.

Citrix 1Y0-341 image Question 1 21426 09162024192728000000

HTTP Request:

GET /resetpassword.htm HTTP/1.1

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:64.0) Gecko/20100101 Firefox/64.0 Host:

www.citrix.com

Accept-Language: en-us

Accept-Encoding: gzip, deflate

Connection: Keep-Alive

Which profile will be applied to the above HTTP request?

Profile_C

Profile_D

Profile_A

Profile_B

Comment (0)

Citrix 1Y0-341 Practice Tests

Practice Test 1
1 - 40

Practice Test 2
41 - 68

1Y0-341: Citrix ADC Advanced Topics – Security, Management, and Optimization

Vendor:

Citrix

Exam Questions:

Learners

2.370

Last Updated

March - 2025

Language

English

Citrix 1Y0-341 Practice Tests

Practice Test 1
1 - 40

Practice Test 2
41 - 68