Exam 5: Citrix ADC Advanced Topics - Security, Management, and Optimization

Scenario: A Citrix Engineer configures Citrix Web App Firewall to protect an application. Upon reviewing the log files, the engineer notices a pattern of forceful browsing toward the configuration page for the application. To protect against this, the engineer enforces Start URL and enables Enforce URL Closure. What is the effect of enforcing Start URL and enabling Enforce URL Closure on the application?

Scenario: A Citrix Engineer is monitoring the environment with Citrix Application Delivery Management (ADM). Management has asked for a report of high-risk traffic to protected internal websites. Which dashboard can the engineer use to generate the requested report?

Scenario: A Citrix Engineer is asked to help improve the performance of a web application. After capturing and analyzing a typical session, the engineer notices a large number of user requests for the stock price of the company. Which action can the engineer take to improve web application performance for the stock quote?

Which Front End Optimization technique can a Citrix Engineer enable on the Citrix ADC to remove all excess whitespace from a file?

Scenario: A Citrix Engineer wants to use Citrix Application Delivery Management (ADM) to monitor a single Citrix ADC VPX with eight web applications and one Citrix Gateway. It is important that the collected data be protected. Which deployment will satisfy the requirements?

Scenario: A Citrix Engineer is asked to implement multi-factor authentication for Citrix Gateway. The engineer creates the authentication policies and binds the policies to the appropriate bind points. The engineer creates a custom form using Notepad++ to format the page which will capture the user's credentials. To which folder on the Citrix ADC will the engineer need to upload this form?

Which syntax is used to write a StyleBook?

Which two protections ensure that the correct data is returned by the client? (Choose two.)

What can a Citrix Engineer implement to protect against the accidental disclosure of personally identifiable information (PII)?

Which Front End Optimization technique causes the Citrix ADC to resize images before sending them to the client?

Which report can a Citrix Engineer review to ensure that the Citrix ADC meets all PCI-DSS requirements.

Which Citrix Web App Firewall profile setting can a Citrix Engineer configure to provide a response when a violation occurs?

Scenario: A Citrix Engineer configures Citrix Web App Firewall to protect an application. Users report that they are NOT able to log on. The engineer enables a Start URL relaxation for the path //login.aspx. What is the effect of the Start URL relaxation on the application?

Statistics for which three types of violations are presented on the App Security Dashboard? (Choose three.)

Which three items does Citrix Application Delivery Management (ADM) require when adding an instances? (Choose three.)

A Citrix Engineer has defined an HTTP Callout, hc_authorized_location, to return the value "Authorized" if client's IP address is on a list of authorized external locations. Which advanced expression should the engineer use in a policy for testing this condition?

Scenario: A Citrix Engineer needs to forward the Citrix Web App Firewall log entries to a central management service. This central management service uses an open log file standard. Which log file format should the engineer use in the Citrix Web App Firewall engine settings to designate the open log file standard?

A Citrix Engineer wants to delegate management of Citrix Application Delivery Management (ADM) to a junior team member. Which assigned role will limit the team member to view all application-related data?

Which license must be present on the Citrix ADC for the Citrix Application Delivery Management (ADM) Service to generate HDX Insight reports that present one year's worth of data?

Scenario: A Citrix Engineer wants to configure the Citrix ADC for OAuth authentication. The engineer uploads the required certificates, configure the actions, and creates all the necessary policies. After binding the authentication policy to the application, the engineer is unable to authenticate. What is the most likely cause of this failure?