Citrix CCP-N 1Y0-341 Questions & Answers

• Question 1:

  Which security model should a Citrix Engineer implement to ensure that only appropriate traffic that matches the expected application behavior is permitted to pass through to the web application?

  A. Dynamic

  B. Hybrid

  C. Positive

  D. Negative

  Correct Answer: C

• Question 2:

  Which setting in the Cookie Consistency protection feature does a Citrix Engineer need to configure to ensure that all a cookie is sent using TLS only?

  A. Encrypt Server Cookies > Encrypt All

  B. Flags to Add in Cookies > Secure

  C. Encrypt Server Cookies > Encrypt Session Only

  D. Proxy Server Cookies > Session Only

  Correct Answer: B

  Reference: https://docs.citrix.com/en-us/citrix-adc/current-release/application- firewall/cookie-protection/ cookie- consistency-check.html

• Question 3:

  Which Citrix Application Delivery Management (ADtv1) Analytics page allows a Citrix Engineer to monitor Citrix Virtual Apps and Desktop traffic?

  A. Web Insight

  B. WAN Insight

  C. HDX Insight

  D. Gateway Insight

  Correct Answer: C

• Question 4:

  Scenario: A Citrix Engineer is asked to implement multi-factor authentication for Citrix Gateway. The engineer creates the authentication policies and binds the policies to the appropriate bind points. The engineer creates a custom form using Notepad++ to format the page which will capture the user's credentials.

  To which folder on the Citrix ADC will the engineer need to upload this form?

  A. /flash/nsconfig/loginschema/LoginSchema

  B. /var/netscaler

  C. /flash/nsconfig/loginschema

  D. /var

  Correct Answer: A

  Reference: https://docs.citrix.com/en-us/citrix-adc/current-release/system/authentication- andauthorization-for- system-user/two-factor-authentication-for-system-users-and- external-users.html

• Question 5:

  Scenario: A Citrix Engineer manages Citrix Application Delivery Management (ADM) for a large holding company. Each division maintains its own ADC appliances. The engineer wants to make Citrix ADM features and benefits available to each group independently.

  What can the engineer create for each division to achieve this?

  A. A site

  B. A role

  C. A tenant

  D. A dashboard

  E. A group

  Correct Answer: C

• Question 6:

  Statistics for which three types of violations are presented on the App Security Dashboard? (Choose three.)

  A. Web App Firewall protection

  B. IP Reputation

  C. SSL Enterprise Policy

  D. Signature

  E. AAA

  Correct Answer: ABD

  Reference: https://docs.citrix.com/en-us/citrix-application-delivery-management- service/analytics/security/ security-violations.html

• Question 7:

  Scenario: A Citrix Engineer used Learning to establish the HTML SQL Injection relaxations for a critical web application. The engineer now wishes to begin working on the protections for a different web application. The name of the Web App Profile is appfw_prof_customercare.

  Which CLI command can the engineer use to empty the Learn database?

  A. set appfw learningsettings appfw_prof_customercare -SQLInjectionMinThreshold 0

  B. set appfw learningsettings appfw_prof_customercare -startURLMinThreshold 0

  C. reset appfw learningdata

  D. export appfw learningdata appfw_prof_customercare

  Correct Answer: C

• Question 8:

  Which Citrix Application Delivery Management (ADM) Analytics page allows an engineer to measure the ICA Round Trip Time for user connections?

  A. Security Insight

  B. Gateway Insight

  C. TCP Insight

  D. HDX Insight

  E. Web Insight

  Correct Answer: B

• Question 9:

  A Web Application Engineer is reviewing log files and finds that a large number of bad HTTP requests are being sent to the web application servers.

  What can the Citrix ADC Engineer to do prevent bad HTTP requests from getting to the web application?

  A. Create an HTTP profile and select 'Drop invalid HTTP requests'. Assign the HTTP profile to the virtual server.

  B. Create an HTTP profile and select 'Drop invalid HTTP requests'. Assign the HTTP profile to the Web App Firewall policy.

  C. Modify the default HTTP profile and select 'Drop invalid HTTP requests'. Bind the default HTTP profile globally.

  D. Select `Change HTTP Parameters' under System > Settings. Select 'Drop invalid HTTP requests'.

  Correct Answer: C

  Reference: https://support.citrix.com/article/CTX121149

• Question 10:

  Scenario: A Citrix Engineer implements Application-level Quality of Experience (AppQoE) to protect a web application. The engineer configures the AppQoE action to deliver a custom response from a backup server once the maximum number of concurrent connection is reached.

  To achieve this, the engineer should set the Acton Type to________and specify the_______. (Choose the correct option to complete the sentence.)

  A. NS; Alternate Content Server Name

  B. ACS; Custom File

  C. ACS; Alternate Content Server Name

  D. NS; Custom File

  Correct Answer: C