1Y0-341 Practice Test practice questions, page 2 of 5, with answer review and explanations.
Question 6
Scenario: A Citrix Engineer wants to protect a web application using Citrix Web App Firewall. After the Web App Firewall policy afweb_protect is bound to the virtual server, the engineer notices that pages are displaying in plain text with graphics included. What is the likely cause of this?
The Safe Objects protection is NOT properly configured.
The Start URL list does NOT include CSS files.
The Web App Firewall feature is disabled.
The policy expression allows for HTML files only.
Question 7
Which two protections ensure that the correct data is returned by the client? (Choose two.)
Form Field Consistency.
Field Formats
HTML Cross-Site Scripting (XSS)
Cross-Site Request Forgeries (CSRF)
Question 8
Scenario: A Citrix Engineer is asked to implement multi-factor authentication for Citrix Gateway. The engineer creates the authentication policies and binds the policies to the appropriate bind points. The engineer creates a custom form using Notepad++ to format the page which will capture the user’s credentials. To which folder on the Citrix ADC will the engineer need to upload this form?
/flash/nsconfig/loginschema/LoginSchema
/var/netscaler
/flash/nsconfig/loginschema
/var
Question 9
Scenario: A Citrix Engineer used Learning to establish the HTML SQL Injection relaxations for a critical web application. The engineer now wishes to begin working on the protections for a different web application. The name of the Web App Profile is appfw_prof_customercare. Which CLI command can the engineer use to empty the Learn database?
set appfw learningsettings appfw_prof_customercare -SQLInjectionMinThreshold 0
set appfw learningsettings appfw_prof_customercare -startURLMinThreshold 0
reset appfw learningdata
export appfw learningdata appfw_prof_customercare
Question 10
Which Citrix Application Delivery Management (ADM) Analytics page allows a Citrix Engineer to monitor web application traffic?