NEW QUESTION 1
Scenario: A Citrix Engineer has a project to enable Integrated Caching on a NetScaler for a Financial Consulting company whose clients monitor their stocks in real time. Clients are reporting a delay in the displaying of the stock values.
What can the engineer configure on the NetScaler to enable data to be presented to the clients in real time?

• A. Dynamic Content Groups
• B. Basic Content Group
• C. Add another NetScaler
• D. Static Content Group

Answer: A

NEW QUESTION 2
Which security option falls under the Negative Security Model for Citrix Application Firewall?

• A. Start URL
• B. HTML Cross-Site Scripting
• C. Content-type
• D. Signature

Answer: D

NEW QUESTION 3
The NetScaler Management and Analytics System (NMAS) needs to communicate with NetScaler instances on the Microsoft Azure and Amazon Web Services (AWS) clouds.
Which configuration must a Citrix Engineer make to meet this requirement?

• A. Layer 2 tunnel between NetScaler MAS and the NetScaler VPX instances.
• B. Layer 3 tunnel between NetScaler MAS and the NetScaler VPX instances.
• C. Layer 2 Tunneling Protocol (L2TP) connection to the NetScaler VPX instances.
• D. NetScaler MAS in the cloud.

Answer: B

NEW QUESTION 4
Which requirement must be addressed to implement the IP Reputation feature on a NetScaler MPX appliance?

• A. The NetScaler appliance must be able to connect to api.bcti.brightcloud.com on port 443.
• B. The NetScaler appliance must be able to connect to wiprep-rtu.s3-us-west-2.amazonaws.com on port 80.
• C. The NetScaler appliance must be able to connect to api.bcss.brightcloud.com on port 80.
• D. The NetScaler appliance must be able to connect to wiprep-rtu.s3-us-west-2.amazonaws.com on port 443.

Answer: A

NEW QUESTION 5
A Citrix Engineer has found issues in the websites after enabling Application Firewall.
Which logs on the NetScaler can the engineer check to verify that the issues are NOT caused by Application Firewall?

• A. newnslog
• B. ns.log
• C. nslog
• D. aaad.debug

Answer: B

NEW QUESTION 6
A Citrix Engineer needs to implement Application Firewall to prevent the following tampering and vulnerabilities:
-If web server does NOT send a field to the user, the check should NOT allow the user to add that field and return data in the field.
-If a field is a read-only or hidden field, the check verifies that data has NOT changed.
-If a field is a list box or radio button field, the check verifies that data in the response corresponds to one of the values in that field.
Which security check can the engineer enable to meet this requirement?

• A. Field Formats
• B. Form Field Consistency
• C. HTML Cross-Site Scripting
• D. CSRF Form Tagging

Answer: B

NEW QUESTION 7
Which type of Application Profile type can be configured to protect the application which supports both HTML and XML data?

• A. Web 2.0 Application Profile
• B. Web Application Profile
• C. XML Application Profile
• D. Advanced Profile

Answer: A

Explanation: Reference https://docs.citrix.com/zh-cn/netscaler/11/security/application-firewall/DeploymentGuide.html

NEW QUESTION 8
Which three protocols in a NetScaler Management and Analytics System (NMAS) can be used to back up the current state of the managed NetScaler instances? (Choose three.)

• A. Telnet
• B. Secure Shell (SSH)
• C. NITRO calls
• D. HTTP
• E. Secure Copy (SCP)

Answer: BCE

Explanation: ou can manually backup and restore NetScaler configurations using the GUI, CLI, or you can use NetScaler MAS to perform automatic backups and manual restores. NetScaler MAS backs up the current state of your managed NetScaler instances by using NITRO calls and the Secure Shell (SSH) and Secure Copy (SCP) protocols.

NEW QUESTION 9
Which Markup Language is used along with NITRO API to create a StyleBook?

• A. YAML
• B. GML
• C. XML
• D. HTML

Answer: A

NEW QUESTION 10
Scenario: A Citrix Engineer has configured Application Firewall and enabled it in learning mode. However, the Application Firewall database is reaching full capacity due to excessive requests.
What can the engineer configure to mitigate this issue?

• A. Enable learning only on XML based profiles.
• B. Increase NetScaler hard drive capacity.
• C. Configure caching policies.
• D. Configure Trusted Learning Clients.

Answer: D

NEW QUESTION 11
Which TCP flag will the NetScaler Application Firewall module send in response to a malformed/non-RFC complaint request from a client?

• A. FIN+ACK packet with a window size set to 9845
• B. RST packet with a window size set to 9845
• C. RST +ACK packet with a window size set to 0
• D. FIN packet with a window size set to 0

Answer: B

NEW QUESTION 12
A Citrix Engineer needs to protect a website that contains sensitive data such as employee ID numbers and customer ID numbers.
Which security check can the engineer implement to protect the sensitive data?

• A. Content-type
• B. Safe Object Check
• C. Field Formats
• D. CSRF Form tagging

Answer: B

Explanation: The Safe Object check provides user-configurable protection for sensitive business information, such as customer numbers, order numbers, and country-specific or region-specific telephone numbers or postal codes.

NEW QUESTION 13
A Citrix Engineer is configuring an Application Firewall Policy to protect a website. Which expression will the engineer use in the policy?

• A. HTTP.RES.IS_VALID
• B. HTTP.REQ.HOSTNAME.EQ (“true”)
• C. HTTP.RES.HEADER (“hostname”).EQ (“true”)
• D. HTTP.REQ.IS_VALID

Answer: B

NEW QUESTION 14
Which content type takes the maximum advantage of web caching mechanisms to boost performance?

• A. Pseudo-Dynamic Content
• B. Pseudo-Static Content
• C. Static Content
• D. Dynamic Content

Answer: D

NEW QUESTION 15
A Citrix Engineer observes that when the application firewall policy is bound to the virtual server, some of the webpages are NOT loading correctly.
Which log file can the engineer use to view the application firewall-related logs in the native format?

• A. /var/log/iprep.log
• B. /var/nslog/newnslog
• C. /var/nslog/ns.log
• D. /var/log/ns.log

Answer: D

NEW QUESTION 16
Scenario: A Citrix Engineer has configured a Denial-of-Service (DoS) protection on the NetScaler and found that client TCP connections are failing. After taking a packet trace, the engineer notices that the first packet was dropped and that the NetScaler terminated the connection due to DoS protection being enabled.
What step can the engineer take to resolve the client connection failure?

• A. Enable the SYN COOKIE mechanism.
• B. Enable Denial-of-Service TCP connections.
• C. Disable the SYN COOKIE mechanism.
• D. Change the services from TCP to HTTP.

Answer: A