Citrix ADC Advanced Topics: Security, Management, and Optimization (1Y0-340) Free Practice Test

Question 1

Scenario: A Citrix Engineer has configured an IP Reputation policy and Profile in Application Firewall.
However, the engineer is NOT able to see any hits on the policy during testing.
Which logs can the engineer check to ensure that IP Reputation is configured correctly?

A. websocketd.log

B. iprep.log

C. snmpd.log

D. httpaccess.log

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

Which two threats can be prevented by using IP Reputation? (Choose two.)

A. Trojan horses

B. Phishing Proxies

C. Compromised IPv4 web-server

D. Worm

E. Compromised IPv6 web-server

Correct Answer: B,C

Question 3

Scenario: A Citrix Engineer observes that when going through NetScaler, user connections fail and users are unable to access Exchange server. However, users can connect directly to the Exchange server. After checking the logs, the engineer finds that the POST request is blocked through the NetScaler.
The log in/ var/log/ns.log is as follows:
Jul 20 11:00: 38 <local0.info>x.x.x. 1 07/20/2017:11:00:38 GMT ns 0-PPE-0:APPFW AF_400_RESP 29362
0: x.x.x.1 439800-PPEO- urlwdummy
https://test.abc.com/rpc/rpcproxy.dll?mail.sfmta.com:6004 Bad request headers. Content-length exceeds post body limit <blocked> Which parameter can the engineer modify to resolve the issue while maintaining security?

A. Increase the Maximum Header Length under nshttp_default_profile.

B. Increase the POST body limit using the HTTP profile.

C. Add an Application Firewall policy with the expression "HTTP.REQ.METHOD.EQ(\ "POST"\)" with APPFW_BYPASS profile bound.

D. Increase the POST body limit under common settings in Application Firewall profile settings.

Correct Answer: D

Question 4

Which three options can be used to specify the destination of an HTTP Callout? (Choose three.)

A. Global server load balancing Virtual server

B. Load balancing Virtual server

C. Content switching Virtual server

D. Cache redirection Virtual server

E. NetScaler Gateway Virtual server

Correct Answer: B,C,D

Question 5

A Citrix Engineer is considered that malicious users could exploit a web system by sending a large cookie.
Which security check can the engineer implement to address this concern?

A. Start URL

B. Field Formats

C. Buffer Overflow

D. Content-type

Correct Answer: C

Question 6

Scenario: A Citrix Engineer needs to set up a NetScaler Web Logging (NSWL) client system for logging. The engineer attempted to start the NSWL service on the client system and found that the service is NOT starting.
What could be causing this issue?

A. Web Logging feature is NOT installed on the NetScaler.

B. TCP 3011 is NOT open between the NetScaler SNIP and the NSWL client.

C. "nswl-verify" command has NOT yet been run on the NSWL client.

D. log.conf file is NOT properly configured on the NSWL client.

Correct Answer: C

Question 7

The NetScaler processes HTTP/2 web client connections to the backend web servers by _________. (Choose the correct option to complete the sentence.)

A. Dropping HTTP/2 requests as it is NOT supported by web servers.

B. Converting HTTP/2 to HTTP 0.9 and forwarding the packets to the web servers.

C. Converting the HTTP/2 headers to HTTP/1.1 headers and forwarding them to the web servers.

D. Passing- through all HTTP/2 traffic to the web servers.

Correct Answer: C

Question 8

Which content type takes the maximum advantage of web caching mechanisms to boost performance?

A. Pseudo-Dynamic Content

B. Static Content

C. Pseudo-Static Content

D. Dynamic Content

Correct Answer: D

Welcome to TestSimulate

Citrix ADC Advanced Topics: Security, Management, and Optimization (1Y0-340) Free Practice Test