Download the 1Y0-342 PDF from DumpsBase to Learn the 1Y0-342 Dumps (V8.02) – Start with 1Y0-342 Free Dumps (Part 1, Q1-Q40)

1. Which of the following is NOT a primary function of Citrix Web App Firewall's additional protections?

2. Scenario: A Citrix Engineer is asked to help improve the performance of a web application. After capturing and analyzing a typical session, the engineer notices a large number of user requests for the stock price of the company.

Which action can the engineer take to improve web application performance for the stock quote?

3. A Citrix Engineer needs to prevent an attack against insecure operating-system or web-server software. The attack can cause the system to crash or behave unpredictably when it receives a data string that is larger than it can handle.

Which security check on the Application Firewall can the engineer enable to prevent such attacks?

4. Scenario: A Citrix Engineer wants to protect a web application using Citrix Web App Firewall. After the Web App Firewall policy is bound to the virtual server, the engineer notices that Citrix Web App Firewall Is NOT blocking bad requests from clients.

Which tool can help the engineer view the traffic that is passing lo and from the client?

5. Which Front End Optimization technique can a Citrix Engineer enable on the Citrix ADC to remove all excess whitespace from a file?

6. Which three items does Citrix Application Delivery Management (ADM) require when adding an instances? (Choose three.)

7. Which syntax is used to write a StyleBook?

8. Which of the following troubleshooting methods is NOT typically used for resolving Citrix Web App Firewall issues?

9. Which setting in the Cookie Consistency protection feature does a Citrix Engineer need to configure to ensure that all a cookie is sent using TLS only?

10. A Citrix Engineer is considered that malicious users could exploit a web system by sending a large cookie.

Which security check can the engineer implement to address this concern?

11. Which Citrix ADC Application Delivery Management feature will assist the Citrix Engineer in gathering the required data for issues with Endpoint Analysis?

12. A Citrix Engineer needs to configure an Application Firewall policy. According to company policies, the engineer needs to ensure that all the requests made to the website are originating from North America.

Which policy expressions will help the engineer accomplish the requirement?

13. A Citrix Engineer has determined that users are able to access random URLs on a web site through bookmarks and by manually typing in the URLs to skip the pages required to reach that part of the website.

Which two checks can the engineer enable to prevent this attack? (Choose two.)

14. An organization wants to display a custom message to users when a request is blocked by Citrix Web App Firewall.

Which of the following should they configure?

15. A Citrix Engineer is reviewing the log files for a sensitive web application and notices that someone accessed the application using the engineer’s credentials while the engineer was out of the office for an extended period of time.

Which production can the engineer implement to protect against this vulnerability?

16. If an organization wants to ensure that only specific URLs are accessible, they should configure:

17. Which two actions can a Citrix Engineer use to provide Denial of Service (DoS) protection with the AppQoE feature? (Choose two.)

18. Which methodology is best suited for a scenario where the primary concern is preventing SQL injection attacks?

19. In which scenario would you NOT use Citrix Web App Firewall?

20. Scenario: A Citrix Engineer created the policies in the attached exhibit.

Click the Exhibit button to view the list of policies.

HTTP Request:

GET /resetpassword.htm HTTP/1.1

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:64.0) Gecko/20100101 Firefox/64.0

Host: www.citrix.com

Accept-Language: en-us

Accept-Encoding: gzip, deflate

Connection: Keep-Alive

Which profile will be applied to the above HTTP request?

21. In which scenario would you primarily use Citrix Web App Firewall learning?

22. Which Citrix ADC owned IP address is used by Citrix ADC Application Delivery Management to communicate with Citrix ADC Instances?

23. A Citrix Engineer has enabled transform action in SQL injection check.

What would the following parameter be transformed into?

Citrix; OR '1' ='1

24. A Citrix Engineer for an online retailer wants to ensure that customer address information is NOT stolen.

Which protection can the engineer implement to prevent this?

25. A Citrix Engineer has configured Citrix ADC Web Logging on a Linux client machine. The engineer needs to verify if the log.conf file has been configured correctly and that there are NO syntax errors.

Which command can the engineer use to accomplish this?

26. Which variable will display the client's source IP address when added to an HTML Error Object page?

27. A Citrix Engineer has found issues in the websites after enabling Application Firewall.

Which logs on the Citrix ADC can the engineer check to verify that the issues are NOT caused by Application Firewall?

28. A Citrix Engineer reviews the App Dashboard and notices that three of the monitored applications have an App Score of less than 50. The engineer can interpret the App Score as a metric of application ___________. (Choose the correct option to complete the sentence.)

29. In a scenario where specific content needs to be refreshed in the cache at regular intervals, which content group setting should be configured?

30. Which action ensures that content is retrieved from the server of origin?

31. What can a Citrix Engineer implement to protect against the accidental disclosure of personally identifiable information (PII)?

32. Scenario: A Citrix Engineer observes that when going through Citrix ADC, user connections fail and users are unable to access Exchange server.

However, users can connect directly to the Exchange server. After checking the logs, the engineer finds that the POST request is blocked through the Citrix ADC.

The log in/ var/log/ns.log is as follows:

Jul 20 11:00: 38 x.x.x. 1 07/20/2017:11:00:38 GMT ns 0-PPE-0:APPFW AF_400_RESP 29362 0: x.x.x.1 439800-PPEO- urlwdummy https://test.abc.com/rpc/rpcproxy.dll?mail.sfmta.com:6004 Bad request headers. Content-length exceeds post body limit

Which parameter can the engineer modify to resolve the issue while maintaining security?

33. Scenario: A Citrix Engineer uses one StyleBook on a Citrix ADC Application Delivery Management to create multiple load-balanced virtual server configurations for Citrix ADC instances. The configuration is saved in a config pack.

In which two locations is the StyleBook config pack saved? (Choose two.)

34. Which action can be used to place the rule on the relaxation list without being deployed and ensuring that the rule is NOT learned again?

35. Which of the following is essential for ensuring that cookies are not tampered with during a session?

36. Scenario: A Citrix Engineer needs to configure the Application Firewall to do a credit card check using the command-line interface (CLI) and configure the profile to obscure the credit card number.

Which parameter will the engineer add in the CLI to encrypt the credit card numbers in the logs?

37. Scenario: A Citrix Engineer has configured Application Firewall and enabled it in learning mode. However, the Application Firewall database is reaching full capacity due to excessive requests.

What can the engineer configure to mitigate this issue?

38. A Citrix Engineer wants to delegate management of Citrix Application Delivery Management (ADM) to a junior team member.

Which assigned role will limit the team member to view all application-related data?

39. Which two security checks invoke sessionization?

40. Scenario: A Citrix Engineer is implementing Citrix Web App Firewall to protect a new web application. The engineer has created a profile, configured the relaxation rules, and applied signature protections.

Additionally, the engineer has assigned the profile to a policy and bound the policy to the application.

What is the next step for the engineer in protecting the web application?