Scenario: A Citrix Engineer wants to protect a web application using Citrix Web App Firewall. After the Web App Firewall policy afweb_protect is bound to the virtual server, the engineer notices that Citrix Web App Firewall is NOT properly displaying the page.
A positive number for the Policy Hits counter for afweb_protect, tells the engineer the number of times Citrix Web App Firewall__________. (Choose the correct option to complete the sentence.)

• A.forwarded users to the Redirect URL specified in the profile assigned to afweb_protect
• B.logged a request matching the expression defined in the afweb_protect policy
• C.received a request that matched the policy expression for afweb_protect
• D.blocked traffic for web applications assigned the afweb_protect policy

Comment: *

Name: *

Email: *

Verification: *

Which three protocols in a NetScaler Management and Analytics System (NMAS) can be used to back up the current state of the managed NetScaler instances? (Choose three.)

• A.Telnet
• B.Secure Shell (SSH)
• C.NITRO calls
• D.HTTP
• E.Secure Copy (SCP)

Comment: *

Name: *

Email: *

Verification: *

Scenario: A Citrix Engineer needs to ensure that the flow of traffic to a web application does NOT overwhelm the server. After thorough testing, the engineer determines that the application can handle a maximum of 3,000 requests per minute. The engineer builds a limit identifier, rl_maxrequests, to enforce this limitation.
Which advanced expression can the engineer write in the Responder policy to invoke rate limiting?

• A.SYS.CHECK_LIMIT("rl_maxrequests")
• B.SYS.CHECK_LIMIT("rl_maxrequests").GE(3000)
• C.SYS.CHECK_LIMIT("rl_maxrequests").CONTAINS("Busy")
• D.SYS.CHECK_LIMIT("rl_maxrequests").IS_VALID

Comment: *

Name: *

Email: *

Verification: *

Scenario: A Citrix Engineer observes that when going through NetScaler, user connections fail and users are unable to access Exchange server. However, users can connect directly to the Exchange server. After checking the logs, the engineer finds that the POST request is blocked through the NetScaler.
The log in/ var/log/ns.log is as follows:
Jul 20 11:00: 38 <local0.info>x.x.x. 1 07/20/2017:11:00:38 GMT ns 0-PPE-0:APPFW AF_400_RESP 29362 0: x.x.x.1 439800-PPEO- urlwdummy
https://test.abc.com/rpc/rpcproxy.dll?mail.sfmta.com:6004 Bad request headers. Content-length exceeds post body limit <blocked> Which parameter can the engineer modify to resolve the issue while maintaining security?

• A.Increase the POST body limit under common settings in Application Firewall profile settings.
• B.Increase the POST body limit using the HTTP profile.
• C.Increase the Maximum Header Length under nshttp_default_profile.
• D.Add an Application Firewall policy with the expression "HTTP.REQ.METHOD.EQ(\ "POST"\)" with APPFW_BYPASS profile bound.

Comment: *

Name: *

Email: *

Verification: *

A Citrix Engineer needs to configure Relaxation Rules using the learned data for SQL Injection. Which setting can the engineer enable in order to avoid false-positive learned rules?

• A.Increase database size for Learned data.
• B.Decrease Minthreshold value to Default in Learning settings.
• C.Remove all unreviewed data from Learning settings.
• D.Increase Minthreshold value in Learning settings.

Comment: *

Name: *

Email: *

Verification: *