Cause all that matters here is passing the Citrix 1y0-340 exam. Cause all that you need is a high score of 1y0-340 Analyzing Citrix NetScaler Advanced Topics: Security - Management - and Optimization exam. The only one thing you need to do is downloading Exambible 1y0-340 exam study guides now. We will not let you down with our money-back guarantee.
NEW QUESTION 1
A Citrix Engineer needs to configure an Application Firewall policy. According to company policies, the engineer needs to ensure that all the requests made to the website are originating from North America.
Which policy expressions will help the engineer accomplish the requirement?
- A. CLIENT.IP.SRC.MATCHES_LOCATION (“North America.US.*.*.*.*”)
- B. CLIENT.IP.SRC.MATCHES_LOCATION (“North America.US.*.*.*.*”). NOT
- C. CLIENT.IP.DST.MATCHES (“North America.US.*.*.*.*”)
- D. CLIENT.IP.SRC.MATCHES (“North America.US.*.*.*.*”)
Answer: A
NEW QUESTION 2
Scenario: A Citrix Engineer has configured a Denial-of-Service (DoS) protection on the NetScaler and found that client TCP connections are failing. After taking a packet trace, the engineer notices that the first packet was dropped and that the NetScaler terminated the connection due to DoS protection being enabled.
What step can the engineer take to resolve the client connection failure?
- A. Enable the SYN COOKIE mechanism.
- B. Enable Denial-of-Service TCP connections.
- C. Disable the SYN COOKIE mechanism.
- D. Change the services from TCP to HTTP.
Answer: A
NEW QUESTION 3
Which type of Application Profile type can be configured to protect the application which supports both HTML and XML data?
- A. Web 2.0 Application Profile
- B. Web Application Profile
- C. XML Application Profile
- D. Advanced Profile
Answer: A
Explanation:
Reference https://docs.citrix.com/zh-cn/netscaler/11/security/application-firewall/DeploymentGuide.html
NEW QUESTION 4
Which TCP flag will the NetScaler Application Firewall module send in response to a malformed/non-RFC complaint request from a client?
- A. FIN+ACK packet with a window size set to 9845
- B. RST packet with a window size set to 9845
- C. RST +ACK packet with a window size set to 0
- D. FIN packet with a window size set to 0
Answer: B
NEW QUESTION 5
Which Markup Language is used along with NITRO API to create a StyleBook?
- A. YAML
- B. GML
- C. XML
- D. HTML
Answer: A
NEW QUESTION 6
Which NetScaler owned IP address is used by NetScaler Management and Analytics System (NMAS) to communicate with NetScaler Instances?
- A. VIP (Virtual IP)
- B. NSIP (NetScaler IP)
- C. CLIP (Cluster IP)
- D. SNIP (Subnet IP)
Answer: B
NEW QUESTION 7
Scenario: A Citrix Engineer has configured the Signature file with new patterns and log strings and uploaded the file to Application Firewall. However, after the upload, the Signature rules are NOT implemented.
What can the engineer modify to implement Signature rules?
- A. The Signature update URL should have an older version than the one on Application Firewall.
- B. The new Signature file should have new ID and version number.
- C. The NetScaler version should be upgraded before upgrading the signatures.
- D. The Signature upgrade will take effect only after a restart.
Answer: D
NEW QUESTION 8
What criteria must be met in order to create a certificate bundle by linking multiple certificates in NetScaler Management and Analytics System (NMAS)?
- A. The issuer of the first certificate must match the domain of the second certificate.
- B. The issuer if the first certificate must NOT have issued the second certificate.
- C. The certificates must be created on the NetScaler.
- D. The certificates must be issued by an external Certificate Authority.
Answer: A
NEW QUESTION 9
A Citrix Engineer is configuring an Application Firewall Policy to protect a website. Which expression will the engineer use in the policy?
- A. HTTP.RES.IS_VALID
- B. HTTP.REQ.HOSTNAME.EQ (“true”)
- C. HTTP.RES.HEADER (“hostname”).EQ (“true”)
- D. HTTP.REQ.IS_VALID
Answer: B
NEW QUESTION 10
Which action can be used to place the rule on the relaxation list without being deployed and ensuring that the rule is NOT learned again?
- A. Skip
- B. Deploy
- C. Delete
- D. Edit& Deploy
Answer: A
NEW QUESTION 11
A Citrix Engineer needs to configure NetScaler Management and Analytics System (NMAS) in their network to retain network reporting data, events, audit logs, and task logs for 20 days.
Which settings can the engineer configure to meet the requirement?
- A. System Prune Settings
- B. System Backup Settings
- C. Instance Backup Settings
- D. Syslog Prune Settings
Answer: A
NEW QUESTION 12
A Citrix Engineer has deployed Front-end Optimization on NetScaler. The following are the snippets of the content before and after optimization.
Before Optimization:
After Optimization:
Which optimization technique has been applied to the content?
- A. Combine CSS
- B. Minify CSS
- C. Inline CSS
- D. Linked JavaScript to inline JavaScript
Answer: A
NEW QUESTION 13
In PCRE, the only characters assumed to be literals are (Choose the correct option to complete the sentence.)
- A. A-Z
- B. a-z, A-Z
- C. a-z, A-Z, 0-9
- D. 0-9
Answer: B
NEW QUESTION 14
A Citrix Engineer needs to protect a website that contains sensitive data such as employee ID numbers and customer ID numbers.
Which security check can the engineer implement to protect the sensitive data?
- A. Content-type
- B. Safe Object Check
- C. Field Formats
- D. CSRF Form tagging
Answer: B
Explanation:
The Safe Object check provides user-configurable protection for sensitive business information, such as customer numbers, order numbers, and country-specific or region-specific telephone numbers or postal codes.
NEW QUESTION 15
Scenario: A Citrix Engineer configures the Application Firewall for protecting a sensitive website. The security team captures traffic between a client and the website and notes the following cookie:
citrix_ns_id
The security team is concerned that the cookie name is a risk, as it can be easily determined that the NetScaler is protecting the website.
Where can the engineer change the cookie name?
- A. Application Firewall Policy
- B. Application Firewall Engine Settings
- C. Application Firewall Default Signatures
- D. Application Firewall Profile
Answer: D
NEW QUESTION 16
The NetScaler Management and Analytics System (NMAS) collects inventory from the instance by sending a(n) request. (Choose the correct option to complete the sentence.)
- A. AppFlow
- B. NITRO
- C. SNMP
- D. HTTP
Answer: B
NEW QUESTION 17
A company has experienced an outage of their mission-critical website. Upon investigation, the Citrix Engineer determines that the following command was executed on the website:
DROP TABLE table_name
Which security check would have prevented this issue?
- A. HTML SQL Injection
- B. Form Field Consistency
- C. HTML Cross-Site Scripting
- D. Field Formats
Answer: A
NEW QUESTION 18
Scenario: A Citrix Engineer is configuring a Buffer Overflow Security Check. When configuring the options, the engineer notices that the Learn Mode is unavailable.
Why is the Learn Mode unavailable in this configuration?
- A. The NetScaler License is at Enterprise.
- B. The Application Firewall database is at 20 MB.
- C. The Application Firewall feature is disabled.
- D. The Learn Mode is NOT available for Buffer Overflow.
Answer: A
NEW QUESTION 19
A Citrix Engineer executed the below commands on the NetScaler command-line interface (CLI): add stream selector cacheStreamSelector http.req.url
add ns limitidentifier cacheRateLimitIdentifier –threshold 5 –timeSlice 2000 –selectorName cacheStreamSelector
add cache policy cacheRateLimitPolicy –rule “http.req.method.eq(get) && sys.check_limit ( “cacheRateLimitIdentifier”)” –action cache
bind cache global cacheRateLimitPolicy- priority 10 What will be the effect of executing these commands?
- A. NetScaler will cache a response if the request URL rate exceeds 5 per 2000 milliseconds.
- B. NetScaler will cache a request if the request URL rate exceeds 5 per 2000 seconds.
- C. NetScaler will NOT cache a request if the request URL rate exceeds 5 per 2000 milliseconds.
- D. NetScaler will cache a response if the request URL rate exceeds 5 per 2000 seconds.
Answer: B
NEW QUESTION 20
Scenario: A Citrix Engineer has configured a NetScaler Management Analytics System (NMAS) policy mandating that all certificates must have minimum key strengths of 2048 bits and must be authorized by trusted CA/Issuers.
How does NMAS alert the engineer about non-compliance?
- A. NMAS highlights any non-compliance with the ‘Non-Recommended’ tag.
- B. NMAS disables any non-compliant policies.
- C. NMAS does NOT alert the engineer.
- D. NMAS disables any non-compliant certificates.
Answer: A
NEW QUESTION 21
Scenario: A Citrix Engineer has configured Application Firewall and enabled it in learning mode. However, the Application Firewall database is reaching full capacity due to excessive requests.
What can the engineer configure to mitigate this issue?
- A. Enable learning only on XML based profiles.
- B. Increase NetScaler hard drive capacity.
- C. Configure caching policies.
- D. Configure Trusted Learning Clients.
Answer: D
NEW QUESTION 22
A website hosts highly dynamic content that is frequently requested in bursts of high user access. Which configuration will reduce traffic to the origin server while optimizing client performance?
- A. –pollEveryTime NO
- B. –expireAtLastByte YES
- C. –flashCache YES
- D. –heurExpiryParam 0
Answer: A
NEW QUESTION 23
......
P.S. Certleader now are offering 100% pass ensure 1y0-340 dumps! All 1y0-340 exam questions have been updated with correct answers: https://www.certleader.com/1y0-340-dumps.html (106 New Questions)
