1Y0-341 試験問題と解答 - 模擬練習 - 練習問題・模擬試験

Question No : 1
A review of purchases made at an online retailer shows that several orders were processed for items at an unpublished price.
Which protection can a Citrix Engineer implement to prevent a site visitor from modifying the unit price of a product on the shopping cart page?

A.Cross-Site Request Forgeries (CSRF)
B.Form Field Consistency
C.HTML Cross-Site Scripting (XSS)
D.HTML SQL Injection

正解:

Question No : 2
Which two protections ensure that the correct data is returned by the client? (Choose two.)

A.Form Field Consistency.
B.Field Formats
C.HTML Cross-Site Scripting (XSS)
D.Cross-Site Request Forgeries (CSRF)

正解:
Explanation:
Reference: https://docs.citrix.com/en-us/citrix-adc/citrix-adc-secure-deployment/secure-deployment-guide.html

Question No : 3
Which report can a Citrix Engineer review to ensure that the Citrix ADC meets all PCI-DSS requirements.

A.Generate Application Firewall Configuration
B.PCI-DSS Standards
C.Application Firewall Violations Summary
D.Generate PCI-DSS

正解:
Explanation:
Reference: https://docs.citrix.com/en-us/citrix-adc/current-release/application-firewall/stats-and-reports.html

Question No : 4
Scenario: A Citrix Engineer needs to forward the Citrix Web App Firewall log entries to a central management service. This central management service uses an open log file standard.
Which log file format should the engineer use in the Citrix Web App Firewall engine settings to designate the open log file standard?

A.CEF
B.IIS
C.W3C
D.TLA

正解:
Explanation:
Reference: https://support.citrix.com/article/CTX136146

Question No : 5
What should a Citrix Engineer do when using the Learn feature for Start URL relaxation?

A.Ensure that only valid or correct traffic is directed to the protected web application while in Learn mode.
B.Invite at least 10 test users to collect sufficient data for the Learn feature.
C.Create a Web App Firewall policy that blocks unwanted traffic.
D.Ensure that the /var file system has at least 10 MB free.

正解:

Question No : 6
Scenario: A Citrix Engineer is reviewing the log files for a protected application. The engineer discovers a lot of errors pertaining to invalid data being supplied by users.
Which protection can the engineer implement at the Citrix Web App Firewall to reduce these errors?

A.Field Format
B.Cross-Site Request Forgeries (CSRF)
C.Form Field Consistency
D.HTML SQL Injection

正解:

Question No : 7
Which Citrix Web App Firewall engine setting can a Citrix Engineer use to ensure that protections are applied in the event that an advanced policy expression cannot be evaluated as either 'True' or 'False'?

A.Undefined profile
B.Session Limit
C.Default profile
D.Entity Decoding

正解:

Question No : 8
Scenario: A Web Application Developer asked a Citrix Engineer to implement Citrix Web App Firewall protections. To provide consistency in branding, the developer asked that the web server provide a custom message when a violation occurs.
Which profile setting does the engineer need to configure to provide the custom message?

A.Redirect URL
B.HTML Error Object
C.RFC Profile
D.Content Type Default Response

正解:

Question No : 9
Which data populates the Events Dashboard?

A.Syslog messages
B.SNMP trap messages
C.API calls
D.AppFlow IPFIX records

正解:

Question No : 10
Scenario: A Citrix Engineer is asked to implement multi-factor authentication for Citrix Gateway. The engineer creates the authentication policies and binds the policies to the appropriate bind points. The engineer creates a custom form using Notepad++ to format the page which will capture the user's credentials. The engineer uploads the form and binds the form to the authentication policy.
When the engineer connects to the Citrix Gateway for validation testing, the form fields are NOT correctly displayed.
What is the most likely cause of this display issue?

A.The login schema contains invalid XML syntax.
B.The authentication policies are bound in the wrong order
C.The first authentication server is offline.
D.The policy bindings are NOT consistent with the login schema.

正解:

Question No : 11
Which build-in TCP profile can a Citrix Engineer assign to a virtual server to improve performance for users who access an application from a secondary campus building over a fiber optic connection?

A.nstcp_default_tcp_lfp
B.nstcp_default_tcp_lan
C.nstcp_default_tcp_interactive_stream
D.nstcp_default_tcp_lnp

正解:

Question No : 12
Scenario: A Citrix Engineer is implementing Citrix Web App Firewall to protect a new web application. The engineer has created a profile, configured the relaxation rules, and applied signature protections. Additionally, the engineer has assigned the profile to a policy and bound the policy to the application.
What is the next step for the engineer in protecting the web application?

A.Update the global default Citrix Wed App Firewall profile with the new signature file.
B.Enable the Signature Auto-Update feature.
C.Enable logging on key protections.
D.Test the web application protections with a group of trusted users.

正解:
Explanation:
Reference: https://docs.citrix.com/en-us/tech-zone/learn/poc-guides/citrix-waf-deployment.html

Question No : 13
A Citrix Engineer needs to create a configuration job to clone a configuration from an existing Citrix ADC to a new Citrix ADC.
Which configuration source can the engineer use to accomplish this?

A.Master Configuration
B.Inbuilt Template
C.Instance
D.Configuration Template

正解:
Explanation:
Reference: https://docs.citrix.com/en-us/citrix-application-delivery-management-software/current-release/stylebooks/migrate-citirx-adc-application-configuration-using-stylebooks.html

Question No : 14
A Citrix Engineer wants to quietly track attempts that cause a web application to display a list of all user accounts.
Which action should the engineer enable to achieve this?

A.Stats
B.Block
C.Log
D.Learn

正解:

Question No : 15
Which feature of Citrix Web App Firewall builds rules from known good traffic?

A.Sessionization
B.App Expert
C.Adaptive learning engineer
D.SNORT signatures

正解:

Citrix 1Y0-341 問題練習