Citrix Citrix Certifications 1Y0-340 Questions & Answers

• Question 11:

  A Citrix Engineer needs to protect a website that contains sensitive data such as employee ID numbers and customer ID numbers.

  Which security check can the engineer implement to protect the sensitive data?

  A. Content-type

  B. Safe Object Check

  C. Field Formats

  D. CSRF Form tagging

  Correct Answer: B

  The Safe Object check provides user-configurable protection for sensitive business information, such as customer numbers, order numbers, and country-specific or region- specific telephone numbers or postal codes.

• Question 12:

  A Citrix Engineer needs to optimize the Cascading Style Sheets (CSS) content sent from the backend server before being forwarded to the client.

  Which option can the engineer use to accomplish CSS optimization?

  A. Move to Head Tag

  B. Shrink to Attributes

  C. Lazy Load

  D. Convert to WebP

  Correct Answer: A

• Question 13:

  The NetScaler Management and Analytics System (NMAS) collects inventory from the instance by sending a(n) ____________ request. (Choose the correct option to complete the sentence.)

  A. AppFlow

  B. NITRO

  C. SNMP

  D. HTTP

  Correct Answer: B

• Question 14:

  A Citrix Engineer has deployed Front-end Optimization on NetScaler. The following are the snippets of the content before and after optimization.

  Before Optimization:

  

  After Optimization:

  

  Which optimization technique has been applied to the content?

  A. Combine CSS

  B. Minify CSS

  C. Inline CSS

  D. Linked JavaScript to inline JavaScript

  Correct Answer: A

• Question 15:

  A Citrix Engineer has configured SQL Injection security check to block all special characters.

  Which two requests will be blocked after enabling this check? (Choose two.)

  A. Citrix; Sqltest

  B. 175// OR 1//=1//

  C. Citrix" OR "1"="1

  D. Citrix OR 1=1

  E. 175' OR `1'= `1'

  Correct Answer: AB

• Question 16:

  A Citrix Engineer observes that after enabling the security checks in Learning mode only in an Application Firewall profile, the NetScaler is blocking the non-RFC compliant HTTP packets.

  What can the engineer modify in the configuration to resolve this issue?

  A. Disable Drop Invalid Requests in the HTTP Profile settings.

  B. Set Default profile in application firewall settings as APPFW_BYPASS.

  C. Set Undefined Action in application firewall settings as APPFW_BYPASS.

  D. Enable Drop Invalid Requests in the HTTP Profile settings.

  Correct Answer: B

• Question 17:

  Which meta-character can be used as a wildcard to match a single character in a given position?

  A. A forward slash (/)

  B. A period (.)

  C. An asterisk (*)

  D. A dollar Sign ($)

  Correct Answer: D

• Question 18:

  A company has experienced an outage of their mission-critical website. Upon investigation, the Citrix Engineer determines that the following command was executed on the website:

  DROP TABLE table_name

  Which security check would have prevented this issue?

  A. HTML SQL Injection

  B. Form Field Consistency

  C. HTML Cross-Site Scripting

  D. Field Formats

  Correct Answer: A

• Question 19:

  A Citrix Engineer is considered that malicious users could exploit a web system by sending a large cookie. Which security check can the engineer implement to address this concern?

  A. Field Formats

  B. Content-type

  C. Buffer Overflow

  D. Start URL

  Correct Answer: C

• Question 20:

  Which media-character can be used as an escape character and also can qualify a Meta- Character as literal when used before any character?

  A. A backslash (\)

  B. A pipe (|)

  C. A dollar sign ($)

  D. A forward slash (/)

  Correct Answer: A