Which syntax is used to write a StyleBook?

• A.JSON
• B.LISP
• C.YAML
• D.XML

Comment: *

Name: *

Email: *

Verification: *

Scenario: A Citrix Engineer has configured Application Firewall and enabled it in learning mode. However, the Application Firewall database is reaching full capacity due to excessive requests. What can the engineer configure to mitigate this issue?

• A.Configure Trusted Learning Clients.
• B.Enable learning only on XML based profiles.
• C.Configure caching policies.
• D.Increase NetScaler hard drive capacity.

Comment: *

Name: *

Email: *

Verification: *

Scenario: A Citrix Engineer creates a Responder policy to redirect users attempting to access an application protected with Citrix Web App Firewall. Instead of being redirected, users are seeing an `Access Denied' page.
This is happening because Citrix Web App Firewall is processed ___________. (Choose the correct option to complete the sentence.)

• A.after Responder, and the redirection is invalid
• B.before Responder, and a violation is occurring
• C.after Responder, but the violation is applied to prevent access
• D.before Responder, and the redirection is invalid

Comment: *

Name: *

Email: *

Verification: *

Scenario: A Citrix Engineer needs to configure an Application Firewall policy for an online shopping website called "mycompany.com". As a security measure, the shopping cart application is hosted on a separate directory "/mycart" on the backend server. The engineer configured a profile to secure the connections to this shopping cart and now needs to ensure that this profile is allied to all incoming connections to the shopping cart.
Which policy expression will accomplish this requirement?

• A.http.req.header ("url").contains ("/mycart") || http.req.url.contains ("mycompany.com")
• B.http.req.header ("url").contains ("/mycart") && http:req.url.contains ("mycompy.com")
• C.http.req.url.contains("/mycart") || http:req.url.hostname.eq("mycompany.com")
• D.http.req.url.contains("/mycart") & http:req.url.hostname.eq("mycompany.com")

Comment: *

Name: *

Email: *

Verification: *

Scenario: A Citrix Engineer discovers a security vulnerability in one of its websites. The engineer takes a header trace and checks the Application Firewall logs.
The following was found in part of the logs:
method=GET request = http://my.companysite.net/FFC/sc11.html msg=URL length (39) is greater than maximum allowed (20).cn1=707 cn2=402 cs1=owa_profile cs2=PPE0 cs3=kW49GcKbnwKByByi3
+jeNzfgWa80000 cs4=ALERT cs5=2015 Which type of Application Firewall security check can the engineer configure to block this type of attack?

• A.Start URL
• B.Cross-site Scripting
• C.Buffer Overflow
• D.Cookie Consistency

Comment: *

Name: *

Email: *

Verification: *