Exam 5: Citrix ADC Advanced Topics - Security, Management, and Optimization

Scenario: A Citrix Engineer created the policies in the attached exhibit. Click the Exhibit button to view the list of policies. HTTP Request: GET /resetpassword.htm HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:64.0) Gecko/20100101 Firefox/64.0 Host: www.citrix.com Accept-Language: en-us Accept-Encoding: gzip, deflate Connection: Keep-Alive Which profile will be applied to the above HTTP request?

Scenario: A Citrix Engineer notices that a web page takes a long time to display. Upon further investigation, the engineer determines that the requested page consists of a table of high-resolution pictures which are being displayed in table cells measuring 320 by 180 pixels. Which Front End Optimization technique can the engineer enable on the Citrix ADC to improve time to display?

Scenario : A Citrix Engineer is notified that improper requests are reacting the web application. While investigating, the engineer notices that the Citrix Web App Firewall policy has zero hits. What are two possible causes for this within the Citrix Web App Firewall policy? (Choose two.)

Which action ensures that content is retrieved from the server of origin?

Which feature of Learning should a Citrix Engineer configure to direct Citrix Web App Firewall to learn from specific sessions?

What should a Citrix Engineer do when using the Learn feature for Start URL relaxation?

Which build-in TCP profile can a Citrix Engineer assign to a virtual server to improve performance for users who access an application from a secondary campus building over a fiber optic connection?

A Citrix Engineer enabled Cookie Consistency protection on a web application and wants to verify that it is working. Which cookie name can the engineer look for in the HTTP headers sent from the client to verify the protection?

A manager for a hospital billing system wants to display the last four digits of a credit card number when printing invoices. Which credit card security action does this?

Which data populates the Events Dashboard?

A Citrix Engineer wants the Citrix Web App Firewall to respond with a page stored on the Citrix ADC when a violation is detected. Which profile setting accomplishes this?

Which security model should a Citrix Engineer implement to make sure that no known attack patterns pass through Citrix Web App Firewall?

Scenario: A Citrix Engineer manages Citrix Application Delivery Management (ADM) for a large holding company. Each division maintains its own ADC appliances. The engineer wants to make Citrix ADM features and benefits available to each group independently. What can the engineer create for each division to achieve this?

A Citrix Engineer is reviewing the log files for a sensitive web application and notices that someone accessed the application using the engineer's credentials while the engineer was out of the office for an extended period of time. Which production can the engineer implement to protect against this vulnerability?

Which Citrix Application Delivery Management (ADM) feature can a Citrix Engineer use to narrow a list of Citrix ADC devices based on pre-defined criteria?

Which protection can a Citrix Engineer implement to prevent a hacker from extracting a customer list from the company website?

Which Front End Optimization technique overcomes the parallel download limitation of web browsers?

Scenario: A Citrix Engineer is asked to implement multi-factor authentication for Citrix Gateway. The engineer creates the authentication policies and binds the policies to the appropriate bind points. The engineer creates a custom form using Notepad++ to format the page which will capture the user's credentials. What is the first step the engineer must perform to assign this form to the authentication process?

Which Citrix Application Delivery Management (ADM) Analytics page allows a Citrix Engineer to monitor web application traffic?

A review of purchases made at an online retailer shows that several orders were processed for items at an unpublished price. Which protection can a Citrix Engineer implement to prevent a site visitor from modifying the unit price of a product on the shopping cart page?