Citrix CCP-AppDS-NetScaler Advance Features (Security and Management)

QUESTION NO: 1
Scenario: A Citrix Engineer wants to protect a web application using Citrix Web App Firewall. After the Web App Firewall policy afweb_protect is bound to the virtual server, the engineer notices that pages are displaying in plain text with graphics included.
What is the likely cause of this?

A. The policy expression allows for HTML files only. B. The Start URL list does NOT include CSS files. C. The Web App Firewall feature is disabled. D. The Safe Objects protection is NOT properly configured.

Correct Answer: B

QUESTION NO: 2
A Citrix Engineer needs to optimize the Cascading Style Sheets (CSS) content sent from the backend server before being forwarded to the client Which option can the engineer use to accomplish CSS optimization?

A. Convert to WebP B. Shrink to Attributes C. Lazy Load D. Move to Head Tag

Correct Answer: D

QUESTION NO: 3
Which Front End Optimization technique can a Citrix Engineer enable on the Citrix ADC to remove all excess whitespace from a file?

A. Inlining B. Minify C. Shrink to Attributes D. Lazy Load

Correct Answer: B

QUESTION NO: 4
Scenario: A Citrix Engineer has configured Security Insight on Citrix ADC Application Delivery Management with Firmware version 12.0.41.16 to monitor the Application Firewall.
The Citrix ADC is running version 12.0.51.24 using Enterprise License with Application Firewall only License. However, after enabling Security insight, the engineer is NOT able to see any data under security insight.
What is causing this issue?

A. Citrix ADC should have a Platinum license. B. The Application Delivery Management version should be higher or equivalent to the Citrix ADC version. C. Citrix ADC should have a Standard License. D. Application Delivery Management should be on Platinum license.

Correct Answer: B

QUESTION NO: 5
Scenario: A Citrix Engineer uses one StyleBook on a Citrix ADC Application Delivery Management to create multiple load-balanced virtual server configurations for Citrix ADC instances. The configuration is saved in a config pack.
In which two locations is the StyleBook config pack saved? (Choose two.)

A. NMAS B. Citrix ADC Instance C. Local network D. Citrix ADC SDX E. Syslog Server

Correct Answer: A,B

QUESTION NO: 6
A Citrix Engineer observes that when the application firewall policy is bound to the virtual server, some of the webpages are NOT loading correctly.
Which log file can the engineer use to view the application firewall-related logs in the native format?

A. /var/nslog/newnslog B. /var/log/ns.log C. /var/nslog/ns.log D. /var/log/iprep.log

Correct Answer: B

QUESTION NO: 7
Scenario: A Citrix Engineer configures Citrix Web App Firewall to protect an application. Users report that they are NOT able to log on. The engineer enables a Start URL relaxation for the path //login.aspx.
What is the effect of the Start URL relaxation on the application?

A. Access to the path /login.aspx is blocked. B. Non-administrative users are blocked from the path /login.aspx Administrative users are permitted to the path /lo C. External users are blocked from the path /login.aspx. Internal users are permitted to the path /login.aspx D. Access to the path /login.aspx is unblocked.

Correct Answer: D

QUESTION NO: 8
Scenario: A Citrix Engineer wants to configure the Citrix ADC for OAuth authentication. The engineer uploads the required certificates, configure the actions, and creates all the necessary policies. After binding the authentication policy to the application, the engineer is unable to authenticate.
What is the most likely cause of this failure?

A. The certificates have expired. B. The Redirect URL is incorrect. C. The policy bindings were assigned incorrect priorities. D. The log files are full.

Correct Answer: C

QUESTION NO: 9
A Citrix Engineer needs to ensure that infrastructure is PCI DSS compliant.
Which two are prerequisite actions for PCI DSS compliance? (Choose two.)

A. Use only vendor-supplied defaults for system passwords and other security parameters. B. Ensure that cardholder data is sent unencrypted over public networks. C. Track and monitor every transaction of the cardholder. D. Assign a unique ID to each person with computer access. E. Regularly test security systems and processes.

Correct Answer: C,E

QUESTION NO: 10
Scenario: A Citrix Engineer configures the Application Firewall for protecting a sensitive website. The security team captures traffic between a client and the website and notes the following cookie:
citrix_ns_id The security team is concerned that the cookie name is a risk, as it can be easily determined that the Citrix ADC is protecting the website.
Where can the engineer change the cookie name?

A. Application Firewall Default Signatures B. Application Firewall Policy C. Application Firewall Profile D. Application Firewall Engine Settings

Correct Answer: D

QUESTION NO: 11
A Citrix Engineer needs to ensure that all traffic to the virtual server is blocked if NONE of the bound Application Firewall policies are matched.
Which setting can the engineer configure to meet this requirement?

A. set ns httpProfile nshttp_default_profile-dropInvalReqs DISABLED B. set appfw settings -defaultProfile APPFW_BLOCK C. set appfw settings -undefAction APPFW_BLOCK D. set ns httpProfie nshttp_default_profile -dropInvalReqs ENABLED

Correct Answer: B

QUESTION NO: 12
Scenario: A Citrix Engineer has a pair of Citrix ADC VPX appliances configured as a High-Availability (HA) pair and hosted on a Citrix Hypervisor. The engineer wants to use Citrix Application Delivery Management (ADM) to monitor and manage the 35 web applications on the appliances. The engineer has imported Citrix ADM virtual appliance to Citrix Hypervisor.
The engineer has also configured the management IP address settings and has added the 35 instances. However, some of the instances are NOT reporting any data.
Which two areas can the engineer check to determine the cause of the issue? (Choose two.)

A. A Premium platform license must be configured on each instance. B. AppFlow must be enabled on each instance. C. The Citrix ADM license must be installed. D. An SSL certificate must be installed on the Citrix ADM appliance.

Correct Answer: C,D

QUESTION NO: 13
If an organization wants to ensure that only specific URLs are accessible, they should configure:

A. Start URL protection B. Content-type protection C. Denial of Service protection D. Cross-site scripting protection

Correct Answer: A

QUESTION NO: 14
Which build-in TCP profile can a Citrix Engineer assign to a virtual server to improve performance for users who access an application from a secondary campus building over a fiber optic connection?

A. nstcp_default_tcp_lnp B. nstcp_default_tcp_interactive_stream C. nstcp_default_tcp_lfp D. nstcp_default_tcp_lan

Correct Answer: B

QUESTION NO: 15
Which of the following is essential for understanding the traffic patterns and potential threats detected by Citrix Web App Firewall?

A. Setting up VPN access B. Managing user profiles C. Optimizing application delivery D. Implementing logging and reporting

Correct Answer: D

Citrix CCP-AppDS-NetScaler Advance Features (Security and Management) - 1Y0-342 Exam Questions