[Sep 28, 2021] Latest 1Y0-341 Exam with Accurate Citrix ADC Advanced Topics – Security, Management and Optimization PDF Questions
Practice To 1Y0-341 - VCEPrep Remarkable Practice On your Citrix ADC Advanced Topics – Security, Management and Optimization Exam
NEW QUESTION 15
Scenario: During application troubleshooting, a Citrix Engineer notices that response traffic received from a protected web application is NOT matching what the web server is sending out. The auditor is concerned that Man-In-The-Middle attack is in progress.
Which action is the Citrix Web App Firewall performing that would trigger this false positive?
- A. Inserting a hidden form field
- B. Removing the Last-Modified header
- C. Modifying and adding cookies in the response
- D. Removing the Accept-Encoding header
Answer: C
NEW QUESTION 16
Scenario: A Citrix Engineer needs to configure the Application Firewall to do a credit card check using the command-line interface (CLI) and configure the profile to obscure the credit card number. Which parameter will the engineer add in the CLI to encrypt the credit card numbers in the logs?
- A. -creditCardXOut ON
- B. doSecureCreditCardLogging ON
- C. -creditCardMaxAllowed
- D. creditCardAction BLOCK
Answer: B
NEW QUESTION 17
A Citrix Engineer needs to migrate the NetScaler Insight Center virtual appliance to NetScaler Management and Analytics System (NMAS).
Which two actions should be met before migrating the NetScaler Insight Center virtual appliance to NMAS? (Choose two.)
- A. Download the NetScaler MAS build to the /var/mps/mps_images.
- B. Migrate the NMAS virtual machine to XenServer.
- C. Install NetScaler Insight Center 11.1 Build 47.14 or later.
- D. Install NetScaler MAS License on the NMAS.
- E. Remove the NetScaler instances added to the Insight Center.
Answer: A,C
NEW QUESTION 18
Which Front End Optimization technique overcomes the parallel download limitation of web browsers?
- A. Lazy Load
- B. Domain Sharding
- C. Extend Page Cache
- D. Minify
Answer: B
Explanation:
https://docs.citrix.com/en-us/citrix-adc/current-release/optimization/front-end-optimization.html
NEW QUESTION 19
Scenario: A Citrix Engineer has configured an IP Reputation policy and Profile in Application Firewall.
However, the engineer is NOT able to see any hits on the policy during testing. Which logs can the engineer check to ensure that IP Reputation is configured correctly?
- A. iprep.log
- B. snmpd.log
- C. httpaccess.log
- D. websocketd.log
Answer: A
NEW QUESTION 20
A Citrix Engineer needs to optimize the Cascading Style Sheets (CSS) content sent from the backend server before being forwarded to the client.
Which option can the engineer use to accomplish CSS optimization?
- A. Move to Head Tag
- B. Lazy Load
- C. Shrink to Attributes
- D. Convert to WebP
Answer: A
NEW QUESTION 21
Which TCP flag will the NetScaler Application Firewall module send in response to a malformed/non- RFC complaint request from a client?
- A. FIN+ACK packet with a window size set to 9845
- B. FIN packet with a window size set to 0
- C. RST packet with a window size set to 9845
- D. RST +ACK packet with a window size set to 0
Answer: C
NEW QUESTION 22
What is required for connecting a data center to the Citrix Application Delivery Management (ADM) Service?
- A. Instance
- B. Syslog
- C. Configuration Job
- D. Agent
Answer: D
Explanation:
https://docs.citrix.com/en-us/citrix-application-delivery-management-service/citrix-application- delivery-management-service.html
NEW QUESTION 23
Which Front End Optimization technique overcomes the parallel download limitation of web browsers?
- A. Lazy Load
- B. Domain Sharding
- C. Extend Page Cache
- D. Minify
Answer: B
Explanation:
Explanation/Reference: https://docs.citrix.com/en-us/citrix-adc/current-release/optimization/front-end-optimization.html
NEW QUESTION 24
Scenario: A Citrix Engineer has configured Application Firewall and enabled it in learning mode. However, the Application Firewall database is reaching full capacity due to excessive requests. What can the engineer configure to mitigate this issue?
- A. Configure Trusted Learning Clients.
- B. Enable learning only on XML based profiles.
- C. Configure caching policies.
- D. Increase NetScaler hard drive capacity.
Answer: A
NEW QUESTION 25
Scenario: A Citrix Engineer has configured a NetScaler Management Analytics System (NMAS) policy mandating that all certificates must have minimum key strengths of 2048 bits and must be authorized by trusted CA/Issuers.
How does NMAS alert the engineer about non-compliance?
- A. NMAS disables any non-compliant policies.
- B. NMAS does NOT alert the engineer.
- C. NMAS disables any non-compliant certificates.
- D. NMAS highlights any non-compliance with the `Non-Recommended' tag.
Answer: D
NEW QUESTION 26
Scenario: A Citrix Engineer wants to configure the Citrix ADC for OAuth authentication. The engineer uploads the required certificates, configure the actions, and creates all the necessary policies. After binding the authentication policy to the application, the engineer is unable to authenticate.
What is the most likely cause of this failure?
- A. The certificates have expired.
- B. The policy bindings were assigned incorrect priorities.
- C. The Redirect URL is incorrect.
- D. The log files are full.
Answer: B
Explanation:
https://docs.citrix.com/en-us/citrix-adc/current-release/aaa-tm/entities-of-authentication- authorization-auditing/authentication-policies.html
NEW QUESTION 27
Scenario: A Citrix Engineer has configured Security Insight on NetScaler Management and Analytics System (NMAS) with Firmware version 12.0.41.16 to monitor the Application Firewall. The NetScaler ADC is running version 12.0.51.24 using Enterprise License with Application Firewall only License. However, after enabling Security insight, the engineer is NOT able to see any data under security insight.
What is causing this issue?
- A. NMAS should be on Platinum license.
- B. NetScaler should have a Platinum license.
- C. NetScaler should have a Standard License.
- D. The NMAS version should be higher or equivalent to the NetScaler version.
Answer: D
NEW QUESTION 28
Which requirement must be addressed to implement the IP Reputation feature on a NetScaler MPX appliance?
- A. TheNetScaler appliance must be able to connect to wiprep-rtu.s3-us-west-2.amazonaws.com on port
443. - B. TheNetScaler appliance must be able to connect to api.bcti.brightcloud.com on port 443.
- C. TheNetScaler appliance must be able to connect to api.bcss.brightcloud.com on port 80.
- D. TheNetScaler appliance must be able to connect to wiprep-rtu.s3-us-west-2.amazonaws.com on port
80.
Answer: B
NEW QUESTION 29
Which NetScaler Management and Analytics System (NMAS) feature will assist the Citrix Engineer in gathering the required data for issues with Endpoint Analysis?
- A. Security Insight
- B. Gateway Insight
- C. Web Insight
- D. HDX Insight
Answer: A
NEW QUESTION 30
In PCRE, the only characters assumed to be literals are ___________ (Choose the correct option to complete the sentence.)
- A. a-z, A-Z
- B. A-Z
- C. 0-9
- D. a-z, A-Z, 0-9
Answer: A
NEW QUESTION 31
Which mechanism does the NetScaler use to enable a safe and speedy data exchange between a client/ server initial TCP handshake?
- A. TCP Burst Rate Control
- B. TCP Time Stamp
- C. TCP Hystart
- D. TCP Fast Open (TFO)
Answer: D
NEW QUESTION 32
Which NetScaler owned IP address is used by NetScaler Management and Analytics System (NMAS) to communicate with NetScaler Instances?
- A. VIP (Virtual IP)
- B. NSIP (NetScaler IP)
- C. CLIP (Cluster IP)
- D. SNIP (Subnet IP)
Answer: B
NEW QUESTION 33
Which requirement must be addressed to implement the IP Reputation feature on a NetScaler MPX appliance?
- A. TheNetScaler appliance must be able to connect to wiprep-rtu.s3-us-west-2.amazonaws.com on port 80.
- B. TheNetScaler appliance must be able to connect to wiprep-rtu.s3-us-west-2.amazonaws.com on port 443.
- C. TheNetScaler appliance must be able to connect to api.bcti.brightcloud.com on port 443.
- D. TheNetScaler appliance must be able to connect to api.bcss.brightcloud.com on port 80.
Answer: C
NEW QUESTION 34
Scenario: A Citrix Engineer needs to configure an external SNMP server in a High Availability setup. The engineer configured the load-balancing virtual server to access the NetScaler Management and Analytics System (NMAS) HA pair.
Which IP address will be configured on the external SNMP Manager to add the NMAS devices?
- A. IP Address of the Primary node
- B. IP Address of the LB VIP
- C. IP Address of both the NMAS nodes
- D. IP Address of the active mode
Answer: C
NEW QUESTION 35
Which two protections ensure that the correct data is returned by the client? (Choose two.)
- A. Form Field Consistency.
- B. Field Formats
- C. HTML Cross-Site Scripting (XSS)
- D. Cross-Site Request Forgeries (CSRF)
Answer: A,D
NEW QUESTION 36
What can a Citrix Engineer use in NetScaler Management and Analytics System (NMAS) to troubleshoot an issue in which users report long response times when accessing a virtual desktop?
- A. WAN Insight
- B. Gateway Insight
- C. Web Insight
- D. HDX Insight
Answer: C
NEW QUESTION 37
Which three options can be used to specify the destination of an HTTP Callout? (Choose three.)
- A. Load balancing Virtual server
- B. Content switching Virtual server
- C. Citrix ADC Gateway Virtual server
- D. Global server load balancing Virtual server
- E. Cache redirection Virtual server
Answer: A,B,E
NEW QUESTION 38
......
Exam Questions and Answers for 1Y0-341 Study Guide Questions and Answers!: https://www.vceprep.com/1Y0-341-latest-vce-prep.html
Practice To 1Y0-341 - VCEPrep Remarkable Practice On your Citrix ADC Advanced Topics – Security, Management and Optimization Exam: https://drive.google.com/open?id=13R9YYSMS-W9ZOcGOO6vuPO0ff8n0R2Br