A Citrix Engineer is considered that malicious users could exploit a web system by sending a large cookie. Which security check can the engineer implement to address this concern?

• A.Field Formats
• B.Buffer Overflow
• C.Content-type
• D.Start URL

Comment: *

Name: *

Email: *

Verification: *

Scenario: A Citrix Engineer wants to protect a web application using Citrix Web App Firewall. After the Web App Firewall policy afweb_protect is bound to the virtual server, the engineer notices that pages are displaying in plain text with graphics included.
What is the likely cause of this?

• A.The Safe Objects protection is NOT properly configured.
• B.The Web App Firewall feature is disabled.
• C.The policy expression allows for HTML files only.
• D.The Start URL list does NOT include CSS files.

Comment: *

Name: *

Email: *

Verification: *

Scenario: A Citrix Engineer configures Citrix Web App Firewall to protect an application. Users report that they are NOT able to log on. The engineer enables a Start URL relaxation for the path //login.aspx.
What is the effect of the Start URL relaxation on the application?

• A.Non-administrative users are blocked from the path /login.aspx Administrative users are permitted to the path /login.aspx.
• B.Access to the path /login.aspx is unblocked.
• C.External users are blocked from the path /login.aspx.
  Internal users are permitted to the path /login.aspx.
• D.Access to the path /login.aspx is blocked.

Comment: *

Name: *

Email: *

Verification: *

Scenario: A Citrix Engineer configures the Application Firewall for protecting a sensitive website. The security team captures traffic between a client and the website and notes the following cookie:
citrix_ns_id
The security team is concerned that the cookie name is a risk, as it can be easily determined that the NetScaler is protecting the website.
Where can the engineer change the cookie name?

• A.Application Firewall Profile
• B.Application Firewall Engine Settings
• C.Application Firewall Policy
• D.Application Firewall Default Signatures

Comment: *

Name: *

Email: *

Verification: *

The NetScaler logging client server can be installed and configured to store the log for ___________.
(Choose the correct option to complete the sentence.)

• A.status of all the HTTP and HTTPS backend web servers
• B.HTTP and HTTPS active connections on the NetScaler
• C.HTTP and HTTPS requests processed by the NetScaler
• D.statistics of the HTTP and HTTPS web sites load balanced on NetScaler

Comment: *

Name: *

Email: *

Verification: *