Citrix 1Y0-340 Online Practice Questions and Exam Preparation

Citrix 1Y0-340 Online Questions & Answers

• Question 1:

  A Citrix Engineer has received the following message after setting up Application Firewall in Learning mode.

  August 28 6 03:14:27 XXX.0.0.2.08/28/2017:03:14:27 GMT VPXExtProd01 0- PPE-0: default GUI CMD_EXECUTED 1670370 0: User CitrixAdmin- Remote_ip XXX.19.XXX.XXX-Command "show appfw learningdata

  WebPub_vs_af_1 startURL"- Status "ERROR: Communication error with aslearn"

  What can the engineer perform to resolve the issue?

  A. Reinstall the Application Firewall license.
  B. Reboot the NetScaler appliance.
  C. Disable the Application Firewall feature.
  D. Delete the Profile database and restart the aslearn process.
  B. Reboot the NetScaler appliance.

• Question 2:

  A Citrix Engineer needs to implement a rate limiting policy to permit an average of one request in 40 ms using NetScaler. Which Limit Identifier will meet this requirement?

  A. adds ns limitIdentifier limit_req-threshold 40 –mode CONNECTION
  B. set limitidentifier limit_req –mode request_rate –timeslice 2000 –Threshold 50 –limitType smooth
  C. add ns limitIdentifier limit_req –threshold 1 –mode CONNECTION
  D. set limitidentifier limit_req –mode request_rate –timeslice 2000 –Threshold 50 –limitType Bursty
  B. set limitidentifier limit_req –mode request_rate –timeslice 2000 –Threshold 50 –limitType smooth

• Question 3:

  Scenario: A Citrix Engineer configures an Application Firewall HTML SQL Injection Check and sets it to BLOCK and to use SQLSplCharANDKeyword as the SQL injection type. The engineer checks the logs and finds that nothing is being blocked.

  What can be the cause of the Application Firewall failing to block the attack?

  A. The request contains SQL Wildcard Characters.
  B. The request neither contains SQL Special Characters nor keywords.
  C. The request only contains SQL Special Characters.
  D. The request only contains SQL keywords.
  B. The request neither contains SQL Special Characters nor keywords.

• Question 4:

  A website hosts highly dynamic content that is frequently requested in bursts of high user access. Which configuration will reduce traffic to the origin server while optimizing client performance?

  A. –pollEveryTime NO
  B. –expireAtLastByte YES
  C. –flashCache YES
  D. –heurExpiryParam 0
  A. –pollEveryTime NO

• Question 5:

  The NetScaler Management and Analytics System (NMAS) needs to communicate with NetScaler instances on the Microsoft Azure and Amazon Web Services (AWS) clouds. Which configuration must a Citrix Engineer make to meet this requirement?

  A. Layer 2 tunnel between NetScaler MAS and the NetScaler VPX instances.
  B. Layer 3 tunnel between NetScaler MAS and the NetScaler VPX instances.
  C. Layer 2 Tunneling Protocol (L2TP) connection to the NetScaler VPX instances.
  D. NetScaler MAS in the cloud.
  B. Layer 3 tunnel between NetScaler MAS and the NetScaler VPX instances.

• Question 6:

  The NetScaler Management and Analytics System (NMAS) collects inventory from the instance by sending a(n) ____________ request. (Choose the correct option to complete the sentence.)

  A. AppFlow
  B. NITRO
  C. SNMP
  D. HTTP
  B. NITRO

• Question 7:

  A Citrix Engineer needs to configure Relaxation Rules using the learned data for SQL Injection. Which setting can the engineer enable in order to avoid false-positive learned rules?

  A. Increase database size for Learned data.
  B. Decrease Minthreshold value to Default in Learning settings.
  C. Increase Minthreshold value in Learning settings.
  D. Remove all unreviewed data from Learning settings.
  D. Remove all unreviewed data from Learning settings.

• Question 8:

  Scenario: A Citrix Engineer has migrated an application to NetScaler to secure it from application layer attacks. The engineer receives a complaint that the application is timing out while users are actively accessing the page. Those users are forced to reestablish the connection.

  What can be the cause of this issue?

  A. The maximum session lifetime is NOT configured.
  B. The session time out is configured to a low value.
  C. The application is configured with a low session timeout.
  D. The maximum session lifetime is less than the session timeout.
  B. The session time out is configured to a low value.

• Question 9:

  Scenario: A Citrix Engineer has created a default admin user with username Admin1 and password `nsroot' for the tenant example-online. However, the tenant administrator is unable to log in as username Admin1 and password `nsroot'. Which action resolves this problem?

  A. User should use the system administrator credentials to login.
  B. The user BIND DN should be specified.
  C. The default password must be change before login.
  D. User should enter username as example-online\Admin1.
  B. The user BIND DN should be specified.

• Question 10:

  A Citrix Engineer has found issues in the websites after enabling Application Firewall.

  Which logs on the NetScaler can the engineer check to verify that the issues are NOT caused by Application Firewall?

  A. newnslog
  B. ns.log
  C. nslog
  D. aaad.debug
  B. ns.log