Citrix Citrix Certifications 1Y0-341 Questions & Answers

• Question 71:

  Scenario: A Citrix Engineer needs to forward the Citrix Web App Firewall log entries to a central management service. This central management service uses an open log file standard.

  Which log file format should the engineer use in the Citrix Web App Firewall engine settings to designate the open log file standard?

  A. CEF

  B. IIS

  C. W3C

  D. TLA

  Correct Answer: A

  Reference: https://support.citrix.com/article/CTX136146

• Question 72:

  What should a Citrix Engineer do when using the Learn feature for Start URL relaxation?

  A. Ensure that only valid or correct traffic is directed to the protected web application while in Learn mode.

  B. Invite at least 10 test users to collect sufficient data for the Learn feature.

  C. Create a Web App Firewall policy that blocks unwanted traffic.

  D. Ensure that the /var file system has at least 10 MB free.

  Correct Answer: B

• Question 73:

  Scenario: A Citrix Engineer is reviewing the log files for a protected application. The engineer discovers a lot of errors pertaining to invalid data being supplied by users.

  Which protection can the engineer implement at the Citrix Web App Firewall to reduce these errors?

  A. Field Format

  B. Cross-Site Request Forgeries (CSRF)

  C. Form Field Consistency

  D. HTML SQL Injection

  Correct Answer: C

• Question 74:

  Which Citrix Web App Firewall engine setting can a Citrix Engineer use to ensure that protections are applied in the event that an advanced policy expression cannot be evaluated as either 'True' or 'False'?

  A. Undefined profile

  B. Session Limit

  C. Default profile

  D. Entity Decoding

  Correct Answer: B

• Question 75:

  Which data populates the Events Dashboard?

  A. Syslog messages

  B. SNMP trap messages

  C. API calls

  D. AppFlow IPFIX records

  Correct Answer: A

• Question 76:

  Scenario: A Web Application Developer asked a Citrix Engineer to implement Citrix Web App Firewall protections. To provide consistency in branding, the developer asked that the web server provide a custom message when a violation occurs.

  Which profile setting does the engineer need to configure to provide the custom message?

  A. Redirect URL

  B. HTML Error Object

  C. RFC Profile

  D. Content Type Default Response

  Correct Answer: B

• Question 77:

  Scenario: A Citrix Engineer is asked to implement multi-factor authentication for Citrix Gateway. The engineer creates the authentication policies and binds the policies to the appropriate bind points. The engineer creates a custom form using Notepad++ to format the page which will capture the user's credentials. The engineer uploads the form and binds the form to the authentication policy.

  When the engineer connects to the Citrix Gateway for validation testing, the form fields are NOT correctly displayed. What is the most likely cause of this display issue?

  A. The login schema contains invalid XML syntax.

  B. The authentication policies are bound in the wrong order

  C. The first authentication server is offline.

  D. The policy bindings are NOT consistent with the login schema.

  Correct Answer: A

• Question 78:

  Which build-in TCP profile can a Citrix Engineer assign to a virtual server to improve performance for users who access an application from a secondary campus building over a fiber optic connection?

  A. nstcp_default_tcp_lfp

  B. nstcp_default_tcp_lan

  C. nstcp_default_tcp_interactive_stream

  D. nstcp_default_tcp_lnp

  Correct Answer: A

• Question 79:

  Scenario: A Citrix Engineer is implementing Citrix Web App Firewall to protect a new web application. The engineer has created a profile, configured the relaxation rules, and applied signature protections. Additionally, the engineer has assigned the profile to a policy and bound the policy to the application.

  What is the next step for the engineer in protecting the web application?

  A. Update the global default Citrix Wed App Firewall profile with the new signature file.

  B. Enable the Signature Auto-Update feature.

  C. Enable logging on key protections.

  D. Test the web application protections with a group of trusted users.

  Correct Answer: B

  Reference: https://docs.citrix.com/en-us/tech-zone/learn/poc-guides/citrix-waf- deployment.html

• Question 80:

  A Citrix Engineer needs to create a configuration job to clone a configuration from an existing Citrix ADC to a new Citrix ADC.

  Which configuration source can the engineer use to accomplish this?

  A. Master Configuration

  B. Inbuilt Template

  C. Instance

  D. Configuration Template

  Correct Answer: C

  Reference: https://docs.citrix.com/en-us/citrix-application-delivery-management- software/current-release/ stylebooks/migrate-citirx-adc-application-configuration-using- stylebooks.html