Citrix 1Y0-340 Online Practice Questions and Exam Preparation

Citrix 1Y0-340 Online Questions & Answers

• Question 81:

  Scenario: A Citrix Engineer is configuring a Buffer Overflow Security Check. When configuring the options, the engineer notices that the Learn Mode is unavailable. Why is the Learn Mode unavailable in this configuration?

  A. The NetScaler License is at Enterprise.
  B. The Application Firewall database is at 20 MB.
  C. The Application Firewall feature is disabled.
  D. The Learn Mode is NOT available for Buffer Overflow.
  A. The NetScaler License is at Enterprise.

• Question 82:

  Scenario: A Citrix Engineer must enable a cookie consistency security check and ensure that all the session cookies get encrypted during the transaction. The engineer needs to ensure that none of the persistent coolies are encrypted and decrypted and decrypt any encrypted cookies during the transaction.

  Which cookie consistency security feature will the engineer configure in the following configuration to achieve the desired results?

  add appfw profile Test123 –startURLAction none- denyURLAction nonecookieConsistencyAction log –cookieTransforms ON –cookieEncryption ecryptSessionOnly–addCookieFlags httpOnly –crossSiteScriptingAction none-SQLInjectionAction log stats–SQLInjectionTransfrormSpecialChars ON- SQLInjectionCheckSQLWildChars ON–fieldFormatAction none –bufferOverflowAction none –responseContentType “application/octet-stream”- XMLSQLInjectionAction none –XMLXSSAction none-XMLWSIAction none- XMLValidationAction none

  A. Configure Encrypt Server cookies to "Encrypt All"
  B. Configure Encrypt Server cookies to "None"
  C. Configure Encrypt Server cookies to "Encrypt Session Only"
  D. Configure Encrypt Server cookies to "Encrypt only"
  B. Configure Encrypt Server cookies to "None"

• Question 83:

  A Citrix Engineer needs to configure NetScaler Management and Analytics System (NMAS) in their network to retain network reporting data, events, audit logs, and task logs for 20 days. Which settings can the engineer configure to meet the requirement?

  A. System Prune Settings
  B. System Backup Settings
  C. Instance Backup Settings
  D. Syslog Prune Settings
  A. System Prune Settings

• Question 84:

  Scenario: A Citrix Engineer has configured a Denial-of-Service (DoS) protection on the NetScaler and found that client TCP connections are failing. After taking a packet trace, the engineer notices that the first packet was dropped and that the NetScaler terminated the connection due to DoS protection being enabled.

  What step can the engineer take to resolve the client connection failure?

  A. Enable the SYN COOKIE mechanism.
  B. Enable Denial-of-Service TCP connections.
  C. Disable the SYN COOKIE mechanism.
  D. Change the services from TCP to HTTP.
  A. Enable the SYN COOKIE mechanism.

• Question 85:

  Scenario: A Citrix Engineer has configured an IP Reputation policy and Profile in Application Firewall. However, the engineer is NOT able to see any hits on the policy during testing. Which logs can the engineer check to ensure that IP Reputation is configured correctly?

  A. websocketd.log
  B. snmpd.log
  C. iprep.log
  D. httpaccess.log
  C. iprep.log

• Question 86:

  Scenario: A Citrix Engineer needs to set up a NetScaler Web Logging (NSWL) client system for logging. The engineer attempted to start the NSWL service on the client system and found that the service is NOT starting. What could be causing this issue?

  A. TCP 3011 is NOT open between the NetScaler SNIP and the NSWL client.
  B. log.conf file is NOT properly configured on the NSWL client.
  C. Web Logging feature is NOT installed on the NetScaler.
  D. "nswl-verify" command has NOT yet been run on the NSWL client.
  D. "nswl-verify" command has NOT yet been run on the NSWL client.

• Question 87:

  A Citrix Engineer is configuring an Application Firewall Policy to protect a website. Which expression will the engineer use in the policy?

  A. HTTP.RES.IS_VALID
  B. HTTP.REQ.HOSTNAME.EQ ("true")
  C. HTTP.RES.HEADER ("hostname").EQ ("true")
  D. HTTP.REQ.IS_VALID
  B. HTTP.REQ.HOSTNAME.EQ ("true")

• Question 88:

  A Citrix Engineer needs to prevent an attack against insecure operating-system or web- server software. The attack can cause the system to crash or behave unpredictably when it receives a data string that is larger than it can handle. Which security check on the Application Firewall can the engineer enable to prevent such attacks?

  A. Start URL
  B. Deny URL
  C. Buffer Overflow
  D. Field Format
  C. Buffer Overflow

• Question 89:

  The NetScaler logging client server can be installed and configured to store the log for ___________. (Choose the correct option to complete the sentence.)

  A. HTTP and HTTPS active connections on the NetScaler
  B. HTTP and HTTPS requests processed by the NetScaler
  C. statistics of the HTTP and HTTPS web sites load balanced on NetScaler
  D. status of all the HTTP and HTTPS backend web servers
  B. HTTP and HTTPS requests processed by the NetScaler

• Question 90:

  A Citrix Engineer needs to migrate the NetScaler Insight Center virtual appliance to NetScaler Management and Analytics System (NMAS). Which two actions should be met before migrating the NetScaler Insight Center virtual appliance to NMAS? (Choose two.)

  A. Install NetScaler Insight Center 11.1 Build 47.14 or later.
  B. Install NetScaler MAS License on the NMAS.
  C. Download the NetScaler MAS build to the /var/mps/mps_images.
  D. Remove the NetScaler instances added to the Insight Center.
  E. Migrate the NMAS virtual machine to XenServer.
  A. Install NetScaler Insight Center 11.1 Build 47.14 or later.
  C. Download the NetScaler MAS build to the /var/mps/mps_images.