Citrix CCP-AppDS-NetScaler Advance Features (Security and Management) - 1Y0-342 Exam Practice Test
Scenario: A hacker accessed the HTML code from a product page and manipulated the HTML code as shown:
Original Value: <input type=hidden name=price value=2379.73>
Manipulated Value: <input type=hidden name=price value=9.24>
Which security check can the engineer configure to counter the manipulation?
Original Value: <input type=hidden name=price value=2379.73>
Manipulated Value: <input type=hidden name=price value=9.24>
Which security check can the engineer configure to counter the manipulation?
Correct Answer: C
If an organization wants to deploy Citrix Application Delivery Management in a cloud environment, they should.
Correct Answer: A
Scenario: A Citrix Engineer needs to configure Application Firewall to handle SQL injection issues. However, after enabling SQL injection check, the backend server started dropping user requests.
The Application Firewall configuration is as follows:
add appfw profile Test123 -startURLAction none- de yURLAction none-crossSiteScriptingAction none -SQLInjectionAction log stats- SQLInjection TransformSpecialChars ON -SQLInjectionCheckSQLWildChars ON- fieldFormatAction none- bufferOverflowAction none- responseContentType -application/octet-stream- -XMLSQLI njectionAction none- XMLXSSAction none-XMLWSIAction none- XMLValidationAction none What does the engineer need to change in the Application Firewall configuration?
The Application Firewall configuration is as follows:
add appfw profile Test123 -startURLAction none- de yURLAction none-crossSiteScriptingAction none -SQLInjectionAction log stats- SQLInjection TransformSpecialChars ON -SQLInjectionCheckSQLWildChars ON- fieldFormatAction none- bufferOverflowAction none- responseContentType -application/octet-stream- -XMLSQLI njectionAction none- XMLXSSAction none-XMLWSIAction none- XMLValidationAction none What does the engineer need to change in the Application Firewall configuration?
Correct Answer: C
The NetScaler logging client server can be installed and configured to store the log for ___________.
Correct Answer: A
Scenario: A Citrix Engineer is implementing Citrix Web App Firewall to protect a new web application. The engineer has created a profile, configured the relaxation rules, and applied signature protections.
Additionally, the engineer has assigned the profile to a policy and bound the policy to the application.
What is the next step for the engineer in protecting the web application?
Additionally, the engineer has assigned the profile to a policy and bound the policy to the application.
What is the next step for the engineer in protecting the web application?
Correct Answer: A,C
Scenario: A Citrix Engineer has a project to enable Integrated Caching on a Citrix ADC for a Financial Consulting company whose clients monitor their stocks in real time. Clients are reporting a delay in the displaying of the stock values.
What can the engineer configure on the Citrix ADC to enable data to be presented to the clients in real time?
What can the engineer configure on the Citrix ADC to enable data to be presented to the clients in real time?
Correct Answer: A
Which Citrix ADC pplication Delivery Management feature can the Citrix Engineer use to convert configuration tasks performed using the GUI to CLI commands?
Correct Answer: B
Scenario: A Citrix Engineer configures the Application Firewall for protecting a sensitive website. The security team captures traffic between a client and the website and notes the following cookie:
citrix_ns_id The security team is concerned that the cookie name is a risk, as it can be easily determined that the Citrix ADC is protecting the website.
Where can the engineer change the cookie name?
citrix_ns_id The security team is concerned that the cookie name is a risk, as it can be easily determined that the Citrix ADC is protecting the website.
Where can the engineer change the cookie name?
Correct Answer: B
Which license must be present on the Citrix ADC for the Citrix Application Delivery Management (ADM) Service to generate HDX Insight reports that present one year's worth of data?
Correct Answer: D
A review of purchases made at an online retailer shows that several orders were processed for items at an unpublished price.
Which protection can a Citrix Engineer implement to prevent a site visitor from modifying the unit price of a product on the shopping cart page?
Which protection can a Citrix Engineer implement to prevent a site visitor from modifying the unit price of a product on the shopping cart page?
Correct Answer: A
Which option matches the following regular expression?
r.n 10\.10\.0\..
r.n 10\.10\.0\..
Correct Answer: C