Scenario: A Citrix Engineer needs to configure an Application Firewall policy for an online shopping website called "mycompany.com". As a security measure, the shopping cart application is hosted on a separate directory "/mycart" on the backend server. The engineer configured a profile to secure the connections to this shopping cart and now needs to ensure that this profile is allied to all incoming connections to the shopping cart.
Which policy expression will accomplish this requirement?

• A.http.req.header ("url").contains ("/mycart") && http:req.url.contains ("mycompy.com")
• B.http.req.url.contains("/mycart") || http:req.url.hostname.eq("mycompany.com")
• C.http.req.url.contains("/mycart") & http:req.url.hostname.eq("mycompany.com")
• D.http.req.header ("url").contains ("/mycart") || http.req.url.contains ("mycompany.com")

Comment: *

Name: *

Email: *

Verification: *

A Citrix Engineer is notified that no traffic is reaching the protected web application. While investigating, the engineer notices that the Citrix Web App Firewall policy has 516,72 hits. What should the engineer check next?

• A.The HTML Error Object
• B.The policy expression
• C.The security checks in the global default profile
• D.The security checks in the assigned profile

Comment: *

Name: *

Email: *

Verification: *

A review of purchases made at an online retailer shows that several orders were processed for items at an unpublished price.
Which protection can a Citrix Engineer implement to prevent a site visitor from modifying the unit price of a product on the shopping cart page?

• A.HTML Cross-Site Scripting (XSS)
• B.Form Field Consistency
• C.Cross-Site Request Forgeries (CSRF)
• D.HTML SQL Injection

Comment: *

Name: *

Email: *

Verification: *

Scenario: A Citrix Engineer notices that a web page takes a long time to display. Upon further investigation, the engineer determines that the requested page consists of a table of high- resolution pictures which are being displayed in table cells measuring 320 by 180 pixels.
Which Front End Optimization technique can the engineer enable on the Citrix ADC to improve time to display?

• A.Shrink to Attributes
• B.Make Inline
• C.Extend Page Cache
• D.Minify

Comment: *

Name: *

Email: *

Verification: *

Which setting in the Cookie Consistency protection feature does a Citrix Engineer need to configure to ensure that all a cookie is sent using TLS only?

• A.Encrypt Server Cookies > Encrypt Session Only
• B.Flags to Add in Cookies > Secure
• C.Proxy Server Cookies > Session Only
• D.Encrypt Server Cookies > Encrypt All

Comment: *

Name: *

Email: *

Verification: *