Citrix CCP-N 1Y0-341 Questions & Answers

• Question 11:

  Scenario: A Citrix Engineer wants to configure the Citrix ADC for OAuth authentication. The engineer uploads the required certificates, configure the actions, and creates all the necessary policies. After binding the authentication policy to the application, the engineer is unable to authenticate.

  What is the most likely cause of this failure?

  A. The log files are full.

  B. The Redirect URL is incorrect.

  C. The certificates have expired.

  D. The policy bindings were assigned incorrect priorities.

  Correct Answer: D

  Reference: https://docs.citrix.com/en-us/citrix-adc/current-release/aaa-tm/entities-of- authenticationauthorization-auditing/authentication-policies.html

• Question 12:

  Which syntax is used to write a StyleBook?

  A. JSON

  B. LISP

  C. YAML

  D. XML

  Correct Answer: C

  Reference: https://docs.citrix.com/en-us/citrix-application-delivery-management- service/stylebooks.html

• Question 13:

  Scenario: A Citrix Engineer configures Citrix Web App Firewall to protect an application. Upon reviewing the log files, the engineer notices a pattern of forceful browsing toward the configuration page for the application. To protect against this, the engineer enforces Start URL and enables Enforce URL Closure.

  What is the effect of enforcing Start URL and enabling Enforce URL Closure on the application?

  A. Access to the path /config.aspx is unblocked when a user clicks a referring link elsewhere on the website.

  B. Non-administrative users are blocked from the path /config.aspx. Administrative users are permitted to the path /config.aspx.

  C. External users are blocked from the path /config.aspx.

  Internal users are permitted to the path /config.aspx.

  D. Access to the path /config.aspx is blocked.

  Correct Answer: A

• Question 14:

  What can a Citrix Engineer implement to protect against the accidental disclosure of personally identifiable information (PII)?

  A. Form Field Consistency

  B. HTML Cross-Site Scripting

  C. Safe Object

  D. Cookie Consistency

  Correct Answer: C

  Reference: https://docs.citrix.com/en-us/citrix-adc/current-release/application-firewall/form- protections/ form- field-consistency-check.html

• Question 15:

  A Citrix Engineer observes that the servers hosting a critical application are crashing on a regular basis. Which protection could the engineer implement on a Citrix Web App Firewall in front of the application?

  A. Buffer Overflow Check

  B. HTML Cross-Site Scripting (XSS)

  C. Start URL

  D. HTML SQL Injection

  Correct Answer: A

• Question 16:

  Scenario: A Citrix Engineer has enabled the IP Reputation feature. The engineer wants to protect a critical web application from a distributed denial of service attack.

  Which advanced expression can the engineer write for a Responder policy?

  A. CLIENT.IP.SRC.IPREP_THREAT_CATEGORY(SPAM_SOURCES)

  B. CLIENT.IP.SRC.IPREP_THREAT_CATEGORY(BOTNETS)

  C. CLIENT.IP.SRC.IPREP_THREAT_CATEGORY(WEB_ATTACKS)

  D. CLIENT.IP.SRC.IPREP_THREAT_CATEGORY(WINDOWS_EXPLOITS)

  Correct Answer: C

• Question 17:

  Scenario: A Citrix Engineer is asked to implement multi-factor authentication for Citrix Gateway. The engineer creates the authentication policies and binds the policies to the appropriate bind points. The engineer creates a custom form using Notepad++ to format the page which will capture the user's credentials.

  What is the first step the engineer must perform to assign this form to the authentication process?

  A. Create a login schema policy and bind it to the authentication virtual server.

  B. Bind the authentication policy to the primary authentication bank of the Citrix Gateway

  C. Create a login schema profile and select the uploaded file.

  D. Create an authentication policy label and bind it to an authentication policy.

  Correct Answer: B

• Question 18:

  Scenario: A Citrix Engineer wants to configure the Citrix ADC for 0Auth Authentication. The engineer uploads the required certificates, configures the actions, and creates all the necessary policies. After binding the authentication policy to the application, the engineer is unable to authenticate.

  A. The log files are full

  B. The policy bindings were assigned incorrect priorities

  C. The Redirect URL is incorrect

  D. The certificates have expired

  Correct Answer: C

• Question 19:

  Scenario: A Citrix Engineer is using Citrix Application Delivery Management (ADM) to manage SSL certificates across all Citrix ADC instances. The engineer wants to distribute a new certificate to the devices.

  What, in addition to the certificate file, must the engineer provide when uploading the new certificate?

  A. Serial Number File

  B. Certificate Signing Request (CSR)

  C. Root Certificate

  D. Key File

  Correct Answer: D

• Question 20:

  Scenario: A Citrix Engineer has configured Integrated Caching to improve application performance. Within hours, the Citrix ADC appliance has run out of memory.

  Which Content Group setting can the engineer configure to show the caching process until a need is demonstrated?

  A. Maximum memory usage limit

  B. Quick Abort Size

  C. Do not cache ?if hits are less than

  D. Do not cache ?if size exceeds

  Correct Answer: A

  Reference: https://docs.citrix.com/en-us/citrix-adc/current-release/optimization/integrated- caching.html