Which Citrix Web App Firewall profile setting can a Citrix Engineer configure to provide a response when a violation occurs?

• A.Redirect URL
• B.Default Request
• C.Default Response
• D.Return URL

Comment: *

Name: *

Email: *

Verification: *

Scenario: A Citrix Engineer wants to protect a web application using Citrix Web App Firewall. After the Web App Firewall policy afweb_protect is bound to the virtual server, the engineer notices that Citrix Web App Firewall is NOT properly displaying the page.
A positive number for the Policy Hits counter for afweb_protect, tells the engineer the number of times Citrix Web App Firewall__________. (Choose the correct option to complete the sentence.)

• A.forwarded users to the Redirect URL specified in the profile assigned to afweb_protect
• B.blocked traffic for web applications assigned the afweb_protect policy
• C.received a request that matched the policy expression for afweb_protect
• D.logged a request matching the expression defined in the afweb_protect policy

Comment: *

Name: *

Email: *

Verification: *

A Citrix Engineer has defined an HTTP Callout, hc_authorized_location, to return the value "Authorized" if client's IP address is on a list of authorized external locations.
Which advanced expression should the engineer use in a policy for testing this condition?

• A.SYS.HTTP_CALLOUT(hc_authorized_location).EQ("Authorized")
• B.SYS.HTTP_CALLOUT(hc_authorized_location).EQUALS_ANY("Authorized")
• C.SYS.HTTP_CALLOUT(hc_authorized_location).IS_VALID
• D.SYS.HTTP_CALLOUT(hc_authorized_location).IS_TRUE

Comment: *

Name: *

Email: *

Verification: *

How can a Citrix Engineer monitor the Citrix ADC appliances to check that all SSL certificates have a key strength of at least 2048 bits from the SSL Dashboard Settings?

• A.Delete 512, 1024, and 4096 on the Enterprise Policy tab.
• B.Delete 512 and 1024 on the Enterprise Policy tab.
• C.Select 2048 and 4096 on the Enterprise Policy tab.
• D.Select 2048 on the Enterprise Policy tab.

Comment: *

Name: *

Email: *

Verification: *

Scenario: A Citrix Engineer must enable a cookie consistency security check and ensure that all the session cookies get encrypted during the transaction. The engineer needs to ensure that none of the persistent coolies are encrypted and decrypted and decrypt any encrypted cookies during the transaction. Which cookie consistency security feature will the engineer configure in the following configuration to achieve the desired results?
add appfw profile Test123 startURLAction none- denyURLAction none- cookieConsistencyAction log - cookieTransforms ON cookieEncryptionecryptSessionOnly addCookieFlagshttpOnly - crossSiteScriptingAction none- SQLInjectionAction log stats SQLInjectionTransfrormSpecialChars ON- SQLInjectionCheckSQLWildChars ON fieldFormatAction none bufferOverflowAction none - responseContentType "application/octet- stream"- XMLSQLInjectionAction none XMLXSSAction none- XMLWSIAction none- XMLValidationAction none

• A.Configure Encrypt Server cookies to "None"
• B.Configure Encrypt Server cookies to "Encrypt Session Only"
• C.Configure Encrypt Server cookies to "Encrypt only"
• D.Configure Encrypt Server cookies to "Encrypt All"

Comment: *

Name: *

Email: *

Verification: *