Scenario: A Citrix Engineer configures Citrix Web App Firewall to protect an application. Upon reviewing the log files, the engineer notices a pattern of forceful browsing toward the configuration page for the application. To protect against this, the engineer enforces Start URL and enables Enforce URL Closure.
What is the effect of enforcing Start URL and enabling Enforce URL Closure on the application?

• A.Access to the path /config.aspx is unblocked when a user clicks a referring link elsewhere on the website.
• B.Access to the path /config.aspx is blocked.
• C.External users are blocked from the path /config.aspx.
  Internal users are permitted to the path /config.aspx.
• D.Non-administrative users are blocked from the path /config.aspx.
  Administrative users are permitted to the path /config.aspx.

Comment: *

Name: *

Email: *

Verification: *

Which setting should be enabled to convert the content-length form submission requests to chunked requests, when HTML SQL Injection protection is enabled?

• A.Streaming
• B.Percentage Recursive Decoding
• C.Enable form tagging
• D.Optimize Partial Requests

Comment: *

Name: *

Email: *

Verification: *

A Citrix Engineer needs to configure an Application Firewall policy. According to company policies, the engineer needs to ensure that all the requests made to the website are originating from North America. Which policy expressions will help the engineer accomplish the requirement?

• A.CLIENT.IP.SRC.MATCHES_LOCATION ("North America.US.*.*.*.*")
• B.CLIENT.IP.SRC.MATCHES_LOCATION ("North America.US.*.*.*.*"). NOT
• C.CLIENT.IP.SRC.MATCHES ("North America.US.*.*.*.*")
• D.CLIENT.IP.DST.MATCHES ("North America.US.*.*.*.*")

Comment: *

Name: *

Email: *

Verification: *

A Citrix Engineer for an online retailer wants to ensure that customer address information is NOT stolen. Which protection can the engineer implement to prevent this?

• A.Cross-Site Request Forgeries (CSFR)
• B.Credit Card Check
• C.For Field Consistency
• D.HTML SQL Injection

Comment: *

Name: *

Email: *

Verification: *

A Citrix Engineer has defined an HTTP Callout, hc_authorized_location, to return the value
"Authorized" if client's IP address is on a list of authorized external locations.
Which advanced expression should the engineer use in a policy for testing this condition?

• A.SYS.HTTP_CALLOUT(hc_authorized_location).IS_TRUE
• B.SYS.HTTP_CALLOUT(hc_authorized_location).IS_VALID
• C.SYS.HTTP_CALLOUT(hc_authorized_location).EQUALS_ANY("Authorized")
• D.SYS.HTTP_CALLOUT(hc_authorized_location).EQ("Authorized")

Comment: *

Name: *

Email: *

Verification: *