Citrix Citrix Certifications 1Y0-340 Questions & Answers

• Question 41:

  Which two response headers are added by Application Firewall? (Choose two.)

  A. Transfer-Encoding

  B. Accept-Language

  C. Accept-Encoding

  D. Set-Cookie

  E. Range

  Correct Answer: AD

• Question 42:

  Scenario: A Citrix Engineer is trying to optimize a website that is load balanced on a NetScaler and is accessed by mobile users. The web application is complex and made up of hundreds of embedded images, scripts, and other objects per page. This limitation is creating a significant bottleneck, resulting in excessive load times.

  Which NetScaler feature can the engineer use to optimize the web application?

  A. Domain Sharding

  B. SPDY (Speedy)

  C. Multipath TCP

  D. Minification

  Correct Answer: A

  The leading capability in this category is domain sharding. By default, browsers restrict the number of parallel connections that can be open to any one domain. Typically, fewer than ten are allowed. For complex web applications with hundreds of embedded images, scripts and other objects per page, this limitation can create a significant bottleneck resulting in excessive load times. With domain sharding, NetScaler MobileStream modifies administrator-selected URLs by breaking them into sub-domains to allow client web browsers to open multiple groups of parallel connections. As a result, object-heavy pages are downloaded and can be rendered up to 10 times faster. Also included in this category is cache extension, a capability that leverages advanced browser settings and NetScaler AppCache functionality to further improve performance by maximizing the practice of locally caching static content.

• Question 43:

  A Citrix Engineer enabled Credit Card Security check in the Application Firewall Profile. Which response header will be dropped by Application Firewall after this check is enabled?

  A. Content-Encoding

  B. Content-Location

  C. Content-Type

  D. Content-Length

  Correct Answer: D

• Question 44:

  A Citrix Engineer has found issues in the websites after enabling Application Firewall.

  Which logs on the NetScaler can the engineer check to verify that the issues are NOT caused by Application Firewall?

  A. newnslog

  B. ns.log

  C. nslog

  D. aaad.debug

  Correct Answer: B

• Question 45:

  A Citrix Engineer needs generate and present a NetScaler PCI-DSS report to management. The report should include a PCI-DSS summary of the required security measures for PCI-DSS compliance.

  Where can the engineer generate the report from?

  A. Documentation > Nitro API

  B. Reporting> System

  C. Dashboard>System Overview

  D. Configuration>System>Reports

  Correct Answer: D

• Question 46:

  Scenario: A Citrix Engineer needs to configure an external SNMP server in a High Availability setup. The engineer configured the load-balancing virtual server to access the NetScaler Management and Analytics System (NMAS) HA pair.

  Which IP address will be configured on the external SNMP Manager to add the NMAS devices?

  A. IP Address of the LB VIP

  B. IP Address of the Primary node

  C. IP Address of the active mode

  D. IP Address of both the NMAS nodes

  Correct Answer: D

• Question 47:

  Which requirement must be addressed to implement the IP Reputation feature on a NetScaler MPX appliance?

  A. The NetScaler appliance must be able to connect to api.bcti.brightcloud.com on port 443.

  B. The NetScaler appliance must be able to connect to wiprep-rtu.s3-us-west- 2.amazonaws.com on port

  80.

  C. The NetScaler appliance must be able to connect to api.bcss.brightcloud.com on port 80.

  D. The NetScaler appliance must be able to connect to wiprep-rtu.s3-us-west- 2.amazonaws.com on port

  443.

  Correct Answer: A

• Question 48:

  Which security option falls under the Negative Security Model for Citrix Application Firewall?

  A. Start URL

  B. HTML Cross-Site Scripting

  C. Content-type

  D. Signature

  Correct Answer: D

• Question 49:

  Scenario: A Citrix Engineer has deployed four NetScaler MPXs with the following network configuration:

  -Management traffic is on VLAN 5 (NSIP).

  -Application and server traffic is on VLAN 10 (SNIP).

  The engineer added the NetScaler Management and Analytics System (NMAS) interface to VLAN 10 to deploy a NMAS High Availability (HA) pair to manage and monitor the applications and virtual servers. After doing so, the engineer is NOT able to see the NetScaler or applications that need to be managed.

  How can the engineer resolve the issue?

  A. Configure VLAN 5 as NSVLAN 5

  B. Move the NMAS interface to VLAN 5

  C. Configure VLAN 5 as NSSYNC VLAN

  D. Bind SNIP to VLAN 5

  Correct Answer: A

• Question 50:

  Which NetScaler owned IP address is used by NetScaler Management and Analytics System (NMAS) to communicate with NetScaler Instances?

  A. VIP (Virtual IP)

  B. NSIP (NetScaler IP)

  C. CLIP (Cluster IP)

  D. SNIP (Subnet IP)

  Correct Answer: B