Which report can a Citrix Engineer review to ensure that the Citrix ADC meets all PCI-DSS requirements.

• A.Generate Application Firewall Configuration
• B.PCI-DSS Standards
• C.Application Firewall Violations Summary
• D.Generate PCI-DSS

Comment: *

Name: *

Email: *

Verification: *

Scenario: A Citrix Engineer needs to configure an Application Firewall policy for an online shopping website called "mycompany.com". As a security measure, the shopping cart application is hosted on a separate directory "/mycart" on the backend server. The engineer configured a profile to secure the connections to this shopping cart and now needs to ensure that this profile is allied to all incoming connections to the shopping cart.
Which policy expression will accomplish this requirement?

• A.http.req.header ("url").contains ("/mycart") && http:req.url.contains ("mycompy.com")
• B.http.req.url.contains("/mycart") & http:req.url.hostname.eq("mycompany.com")
• C.http.req.url.contains("/mycart") || http:req.url.hostname.eq("mycompany.com")
• D.http.req.header ("url").contains ("/mycart") || http.req.url.contains ("mycompany.com")

Comment: *

Name: *

Email: *

Verification: *

A Citrix Engineer needs to create a configuration job to clone a configuration from an existing Citrix ADC to a new Citrix ADC.
Which configuration source can the engineer use to accomplish this?

• A.Master Configuration
• B.Inbuilt Template
• C.Instance
• D.Configuration Template

Comment: *

Name: *

Email: *

Verification: *

A Citrix Engineer needs to implement Application Firewall to prevent the following tampering and vulnerabilities:
- If web server does NOT send a field to the user, the check should NOT allow the user to add that field and return data in the field.
- If a field is a read-only or hidden field, the check verifies that data has NOT changed.
- If a field is a list box or radio button field, the check verifies that data in the response corresponds to one of the values in that field.
Which security check can the engineer enable to meet this requirement?

• A.Field Formats
• B.Form Field Consistency
• C.CSRF Form Tagging
• D.HTML Cross-Site Scripting

Comment: *

Name: *

Email: *

Verification: *

Scenario: A Citrix Engineer has enabled the IP Reputation feature. The engineer wants to protect a critical web application from a distributed denial of service attack.
Which advanced expression can the engineer write for a Responder policy?

• A.CLIENT.IP.SRC.IPREP_THREAT_CATEGORY(SPAM_SOURCES)
• B.CLIENT.IP.SRC.IPREP_THREAT_CATEGORY(BOTNETS)
• C.CLIENT.IP.SRC.IPREP_THREAT_CATEGORY(WEB_ATTACKS)
• D.CLIENT.IP.SRC.IPREP_THREAT_CATEGORY(WINDOWS_EXPLOITS)

Comment: *

Name: *

Email: *

Verification: *