Unique Top-selling 1Y0-341 Exams - New 2021 Citrix Pratice Exam [Q61-Q81]

Unique Top-selling 1Y0-341 Exams - New 2021 Citrix Pratice Exam

CCP-N Dumps 1Y0-341 Exam for Full Questions - Exam Study Guide

The Citrix 1Y0-341 or the Citrix ADC Advanced Topics - Security, Management, and Optimization exam is here to make you an app delivery and security specialist in no time. As apps have now become an indispensable part of our lives and business, obtaining expertise in this domain will turn you into an industry asset instantly.

NEW QUESTION 61
Scenario: A Citrix Engineer manages Citrix Application Delivery Management (ADM) for a large holding company. Each division maintains its own ADC appliances. The engineer wants to make Citrix ADM features and benefits available to each group independently.
What can the engineer create for each division to achieve this?

A. A role
B. A site
C. A group
D. A tenant
E. A dashboard

Answer: B

NEW QUESTION 62
A Citrix Engineer needs to set the rate at which connections are proxied from the NetScaler to the server.
Which values should the engineer configure for Surge Protection?

A. UDP Threshold and Start Port
B. Base Threshold and Throttle
C. Grant Quota and Buffer Size
D. TCP Threshold and Reset Threshold

Answer: B

NEW QUESTION 63
Scenario: A Citrix Engineer needs to configure Application Firewall to handle SQL injection issues.
However, after enabling SQL injection check, the backend server started dropping user requests.
The Application Firewall configuration is as follows:
add appfw profile Test123 startURLAction none- denyURLAction none-crossSiteScriptingAction none - SQLInjectionAction log stats- SQLInjectionTransformSpecialChars ON SQLInjectionCheckSQLWildChars ON- fieldFormatAction none- bufferOverflowAction none- responseContentType "application/octet-stream" XMLSQLInjectionAction none- XMLXSSAction none-XMLWSIAction none- XMLValidationAction none What does the engineer need to change in the Application Firewall configuration?

A. Disable- SQLInjectionCheckSQLWildChars ON
B. Enable-XMLValidationAction none
C. Disable- SQLInjectionTransformSpecialChars ON
D. Enable-XMLSQLInjectionAction none

Answer: A

NEW QUESTION 64
Scenario: A Citrix Engineer needs to ensure that the flow of traffic to a web application does NOT overwhelm the server. After thorough testing, the engineer determines that the application can handle a maximum of 3,000 requests per minute. The engineer builds a limit identifier, rl_maxrequests, to enforce this limitation.
Which advanced expression can the engineer write in the Responder policy to invoke rate limiting?

A. SYS.CHECK_LIMIT("rl_maxrequests")
B. SYS.CHECK_LIMIT("rl_maxrequests").IS_VALID
C. SYS.CHECK_LIMIT("rl_maxrequests").CONTAINS("Busy")
D. SYS.CHECK_LIMIT("rl_maxrequests").GE(3000)

Answer: A

Explanation:
https://support.citrix.com/article/CTX134009

NEW QUESTION 65
A Citrix Engineer needs to set up access to an internal application for external partners.
Which two entities must the engineer configure on the Citrix ADC to support this? (Choose two.)

A. SAML IdP Policy
B. SAML Policy
C. SAML IdP Profile
D. SAML Action

Answer: A,B

Explanation:
https://www.citrix.com/blogs/2015/04/09/how-to-use-saml-authentication-with-storefront-2-6/

NEW QUESTION 66
A Citrix Engineer needs to protect a website that contains sensitive data such as employee ID numbers and customer ID numbers.
Which security check can the engineer implement to protect the sensitive data?

A. CSRF Form tagging
B. Content-type
C. Safe Object Check
D. Field Formats

Answer: C

Explanation:
The Safe Object check provides user-configurable protection for sensitive business information, such as customer numbers, order numbers, and country-specific or region-specific telephone numbers or postal codes.

NEW QUESTION 67
What can a Citrix Engineer use in NetScaler Management and Analytics System (NMAS) to troubleshoot an issue in which users report long response times when accessing a virtual desktop?

A. HDX Insight
B. Web Insight
C. Gateway Insight
D. WAN Insight

Answer: B

NEW QUESTION 68
Which Citrix Application Delivery Management (ADM) Analytics page allows a Citrix Engineer to monitor web application traffic?

A. HDX Insight
B. Web Insight
C. Gateway Insight
D. WAN Insight

Answer: B

NEW QUESTION 69
Statistics for which three types of violations are presented on the App Security Dashboard? (Choose three.)

A. Signature
B. SSL Enterprise Policy
C. Web App Firewall protection
D. AAA
E. IP Reputation

Answer: A,C,E

Explanation:
Explanation/Reference: https://docs.citrix.com/en-us/citrix-application-delivery-management-service/analytics/security/ security-violations.html

NEW QUESTION 70
A Citrix Engineer is configuring an Application Firewall Policy to protect a website.
Which expression will the engineer use in the policy?

A. HTTP.REQ.IS_VALID
B. HTTP.RES.HEADER ("hostname").EQ ("true")
C. HTTP.RES.IS_VALID
D. HTTP.REQ.HOSTNAME.EQ ("true")

Answer: D

NEW QUESTION 71
Scenario: A Citrix Engineer has configured Integrated Caching to improve application performance. Within hours, the Citrix ADC appliance has run out of memory.
Which Content Group setting can the engineer configure to show the caching process until a need is demonstrated?

A. Maximum memory usage limit
B. Quick Abort Size
C. Do not cache - if size exceeds
D. Do not cache - if hits are less than

Answer: A

Explanation:
https://docs.citrix.com/en-us/citrix-adc/current-release/optimization/integrated-caching.html

NEW QUESTION 72
A manager for a hospital billing system wants to display the last four digits of a credit card number when printing invoices.
Which credit card security action does this?

A. X-Out
B. Log
C. Block
D. Transform

Answer: A

NEW QUESTION 73
Which font end Optimization technique overcomes the parallel download limitation of web browsers?

A. Extend Page Cache
B. Minify
C. Domain Sharing
D. Lazy Load

Answer: C

NEW QUESTION 74
Which action ensures that content is retrieved from the server of origin?

A. NOCACHE
B. CACHE
C. MAY_NOCACHE
D. MAY_CACHE

Answer: A

Explanation:
https://docs.citrix.com/en-us/citrix-adc/current-release/optimization/integrated-caching/configure- cookies-headers-and-polling.html

NEW QUESTION 75
Scenario: A Citrix Engineer wants to protect a web application using Citrix Web App Firewall. The engineer enables the Learn action for the Start URL, HTML, Cross-Site Scripting, and HTML SQL Injection protections. The engineer assigns this profile to a policy, which is then bound to the virtual server.
Which two items can the engineer check to determine that the Learn action is NOT capturing any rules? (Choose two.)

A. The Learn database is less than 20 MB.
B. Enough space is left on the /flash file system.
C. The HTML Error Object is configured for the profile.
D. The aslearn process is running on the Citrix ADC appliance.

Answer: C,D

NEW QUESTION 76
Scenario: A Citrix Engineer has enabled Security insight and Web insight on NetScaler Management and Analytics System (NMAS). The engineer is NOT able to see data under the Analytics on NMAS, in spite of seeing hits on the APPFLOW policy.
Which log should the engineer check on NMAS to ensure that the information is sent from NetScaler?

A. mps_perf.log
B. mps_afanalytics.log
C. mps_afdecoder.log
D. nstriton.log

Answer: C

NEW QUESTION 77
Which build-in TCP profile can a Citrix Engineer assign to a virtual server to improve performance for users who access an application from a secondary campus building over a fiber optic connection?

A. nstcp_default_tcp_lfp
B. nstcp_default_tcp_lan
C. nstcp_default_tcp_lnp
D. nstcp_default_tcp_interactive_stream

Answer: D

NEW QUESTION 78
Which protection can a Citrix Engineer implement to prevent a hacker from extracting a customer list from the company website?

A. Cross-Site Request Forgeries (CSRF)
B. HTML Cross-Site Scripting (XSS)
C. HTML SQL Injection
D. Form Field Consistency

Answer: D

NEW QUESTION 79
A Citrix Engineer needs to configure an AppQoE action to deliver content from an alternate service. Which three parameters should the engineer configure to meet this requirement?
(Choose three.)

A. Alternate Content Path
B. TCP Profile
C. Action Type
D. Header Name
E. Maximum Connections

Answer: C,D,E

NEW QUESTION 80
Which action can be used to place the rule on the relaxation list without being deployed and ensuring that the rule is NOT learned again?