Scenario: A Citrix Engineer needs to set up a NetScaler Web Logging (NSWL) client system for logging. The engineer attempted to start the NSWL service on the client system and found that the service is NOT starting.
What could be causing this issue?
A. TCP 3011 is NOT open between the NetScaler SNIP and the NSWL client.
B. log.conf file is NOT properly configured on the NSWL client.
C. Web Logging feature is NOT installed on the NetScaler.
D. "nswl-verify" command has NOT yet been run on the NSWL client.
A Citrix Engineer needs to ensure that all traffic to the virtual server is blocked if NONE of the bound Application Firewall policies are matched.
Which setting can the engineer configure to meet this requirement?
A. set appfw settings –undefAction APPFW_BLOCK
B. set ns httpProfile nshttp_default_profile-dropInvalReqs DISABLED
C. set ns httpProfie nshttp_default_profile –dropInvalReqs ENABLED
D. set appfw settings –defaultProfile APPFW_BLOCK
Which two threats can be prevented by using IP Reputation? (Choose two.)
A. Trojan horses
B. Phishing Proxies
C. Worm
D. Compromised IPv6 web-server
E. Compromised IPv4 web-server
Scenario: A Citrix Engineer has configured Security Insight on NetScaler Management and Analytics System (NMAS) with Firmware version 12.0.41.16 to monitor the Application Firewall.
The NetScaler ADC is running version 12.0.51.24 using Enterprise License with Application Firewall only License. However, after enabling Security insight, the engineer is NOT able to see any data under security insight.
What is causing this issue?
A. NetScaler should have a Standard License.
B. The NMAS version should be higher or equivalent to the NetScaler version.
C. NetScaler should have a Platinum license.
D. NMAS should be on Platinum license.
Which two security checks invoke sessionization? (Choose two.)
A. CSRF Form Tagging
B. Field Formats
C. Form Field Consistency
D. HTML Cross-Site Scripting
Which Markup Language is used along with NITRO API to create a StyleBook?
A. YAML
B. GML
C. XML
D. HTML
A Citrix Engineer needs to ensure that infrastructure is PCI DSS compliant.
Which two are prerequisite actions for PCI DSS compliance? (Choose two.)
A. Use only vendor-supplied defaults for system passwords and other security parameters.
B. Assign a unique ID to each person with computer access.
C. Track and monitor every transaction of the cardholder.
D. Regularly test security systems and processes.
E. Ensure that cardholder data is sent unencrypted over public networks.
Which aspect of NetScaler Management and Analytics System (NMAS) can be used to monitor end-to-end ICA traffic flowing through a NetScaler ADC?
A. Gateway Insight
B. HDX Insight
C. Security Insight
D. Web Insight
Scenario: A Citrix Engineer configured an HTTP Denial-of-Service (DoS) protection policy by setting the Surge Queue depth to 300. The surge queue reaches a size of 308, triggering the NetScaler "attack" mode. The HTTP DoS window mechanism is left at the default size which, when reached, will trigger "noattack" mode.
Which queue depth value must the Surge Queue be to trigger the "no-attack" mode?
A. size should be less than 280.
B. size should be 300.
C. size should be 290.
D. size should be between 280 and 300.
Scenario: A Citrix Engineer observes that when going through NetScaler, user connections fail and users are unable to access Exchange server. However, users can connect directly to the Exchange server. After checking the logs, the engineer finds that the POST request is blocked through the NetScaler.
The log in/ var/log/ns.log is as follows:
Jul 20 11:00: 38
https://test.abc.com/rpc/rpcproxy.dll?mail.sfmta.com:6004 Bad request headers. Content- length exceeds post body limit
Which parameter can the engineer modify to resolve the issue while maintaining security?
A. Increase the Maximum Header Length under nshttp_default_profile.
B. Increase the POST body limit using the HTTP profile.
C. Add an Application Firewall policy with the expression "HTTP.REQ.METHOD.EQ(\ "POST"\)" with APPFW_BYPASS profile bound.
D. Increase the POST body limit under common settings in Application Firewall profile settings.
Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Citrix exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 1Y0-340 exam preparations and Citrix certification application, do not hesitate to visit our Vcedump.com to find your solutions here.