Citrix CCP-N 1Y0-340 Questions & Answers

• Question 1:

  A Citrix Engineer executed the below commands on the NetScaler command-line interface (CLI): add stream selector cacheStreamSelector http.req.url add ns limitidentifier cacheRateLimitIdentifier –threshold 5 –timeSlice 2000 –selectorName

  cacheStreamSelector

  add cache policy cacheRateLimitPolicy –rule “http.req.method.eq(get) andand sys.check_limit (\“cacheRateLimitIdentifier\”)” –action cache bind cache global cacheRateLimitPolicy- priority 10 What will be the effect of executing these commands?

  A. NetScaler will cache a response if the request URL rate exceeds 5 per 2000 milliseconds.

  B. NetScaler will cache a request if the request URL rate exceeds 5 per 2000 seconds.

  C. NetScaler will NOT cache a request if the request URL rate exceeds 5 per 2000 milliseconds.

  D. NetScaler will cache a response if the request URL rate exceeds 5 per 2000 seconds.

  Correct Answer: B

• Question 2:

  Scenario: A Citrix Engineer has a project to enable Integrated Caching on a NetScaler for a Financial Consulting company whose clients monitor their stocks in real time. Clients are reporting a delay in the displaying of the stock values.

  What can the engineer configure on the NetScaler to enable data to be presented to the clients in real time?

  A. Dynamic Content Groups

  B. Basic Content Group

  C. Add another NetScaler

  D. Static Content Group

  Correct Answer: A

• Question 3:

  Scenario: A Citrix Engineer has configured an IP Reputation policy and Profile in Application Firewall. However, the engineer is NOT able to see any hits on the policy during testing.

  Which logs can the engineer check to ensure that IP Reputation is configured correctly?

  A. websocketd.log

  B. snmpd.log

  C. iprep.log

  D. httpaccess.log

  Correct Answer: C

• Question 4:

  Which mechanism does the NetScaler use to enable a safe and speedy data exchange between a client/ server initial TCP handshake?

  A. TCP Fast Open (TFO)

  B. TCP Burst Rate Control

  C. TCP Hystart

  D. TCP Time Stamp

  Correct Answer: A

• Question 5:

  Scenario: A Citrix Engineer discovers a security vulnerability in one of its websites. The engineer takes a header trace and checks the Application Firewall logs.

  The following was found in part of the logs:

  method=GET request = http://my.companysite.net/FFC/sc11.html msg=URL length (39) is greater than maximum allowed (20).cn1=707 cn2=402 cs1=owa_profile cs2=PPE0 cs3=kW49GcKbnwKByByi3 +jeNzfgWa80000 cs4=ALERT cs5=2015

  Which type of Application Firewall security check can the engineer configure to block this type of attack?

  A. Buffer Overflow

  B. Start URL

  C. Cross-site Scripting

  D. Cookie Consistency

  Correct Answer: C

• Question 6:

  In PCRE, the only characters assumed to be literals are ___________ (Choose the correct option to complete the sentence.)

  A. A-Z

  B. a-z, A-Z

  C. a-z, A-Z, 0-9

  D. 0-9

  Correct Answer: B

• Question 7:

  A Citrix Engineer needs to configure an AppQoE action to deliver content from an alternate service. Which three parameters should the engineer configure to meet this requirement? (Choose three.)

  A. TCP Profile

  B. Header Name

  C. Action Type

  D. Maximum Connections

  E. Alternate Content Path

  Correct Answer: BCD

• Question 8:

  What criteria must be met in order to create a certificate bundle by linking multiple certificates in NetScaler Management and Analytics System (NMAS)?

  A. The issuer of the first certificate must match the domain of the second certificate.

  B. The issuer if the first certificate must NOT have issued the second certificate.

  C. The certificates must be created on the NetScaler.

  D. The certificates must be issued by an external Certificate Authority.

  Correct Answer: A

• Question 9:

  Scenario: A Citrix Engineer is configuring a Buffer Overflow Security Check. When configuring the options, the engineer notices that the Learn Mode is unavailable.

  Why is the Learn Mode unavailable in this configuration?

  A. The NetScaler License is at Enterprise.

  B. The Application Firewall database is at 20 MB.

  C. The Application Firewall feature is disabled.

  D. The Learn Mode is NOT available for Buffer Overflow.

  Correct Answer: A

• Question 10:

  Scenario: A Citrix Engineer needs to configure Application Firewall to handle SQL injection issues. However, after enabling SQL injection check, the backend server started dropping user requests.

  The Application Firewall configuration is as follows:

  add appfw profile Test123 –startURLAction none- denyURLAction nonecrossSiteScriptingAction none – SQLInjectionAction log stats- SQLInjection TransformSpecialChars ON – SQLInjectionCheckSQLWildChars ON- fieldFormatAction none- bufferOverflowAction noneresponseContentType “application/octet-stream”–XMLSQLInjectionAction none- XMLXSSAction none-XMLWSIAction none-XMLValidationAction none

  What does the engineer need to change in the Application Firewall configuration?

  A. Enable-XMLSQLInjectionAction none

  B. Enable-XMLValidationAction none

  C. Disable- SQLInjectionCheckSQLWildChars ON

  D. Disable- SQLInjectionTransformSpecialChars ON

  Correct Answer: C