NEW QUESTION 1
A Citrix Engineer needs to ensure that clients always receive a fresh answer from the integrated cache for positive responses (response of 200).
Which two settings can the engineer configure to make sure that clients receive a fresh response when it is needed? (Choose two.)

• A. –flashCache NO
• B. - pollEveryTime YES
• C. –prefetch YES
• D. –quickAbortSize

Answer: AB

NEW QUESTION 2
Scenario: A Citrix Engineer needs to configure Application Firewall to handle SQL injection issues. However, after enabling SQL injection check, the backend server started dropping user requests.
The Application Firewall configuration is as follows:
add appfw profile Test123 –startURLAction none- denyURLAction none-crossSiteScriptingAction none
–SQLInjectionAction log stats- SQLInjection TransformSpecialChars ON
–SQLInjectionCheckSQLWildChars ON- fieldFormatAction none- bufferOverflowAction none- responseContentType “application/octet-stream” –XMLSQLInjectionAction none- XMLXSSAction none-XMLWSIAction none- XMLValidationAction none
What does the engineer need to change in the Application Firewall configuration?

• A. Enable-XMLSQLInjectionAction none
• B. Enable-XMLValidationAction none
• C. Disable- SQLInjectionCheckSQLWildChars ON
• D. Disable- SQLInjectionTransformSpecialChars ON

Answer: C

NEW QUESTION 3
Which requirement must be addressed to implement the IP Reputation feature on a NetScaler MPX appliance?

• A. The NetScaler appliance must be able to connect to api.bcti.brightcloud.com on port 443.
• B. The NetScaler appliance must be able to connect to wiprep-rtu.s3-us-west-2.amazonaws.com on port 80.
• C. The NetScaler appliance must be able to connect to api.bcss.brightcloud.com on port 80.
• D. The NetScaler appliance must be able to connect to wiprep-rtu.s3-us-west-2.amazonaws.com on port 443.

Answer: A

NEW QUESTION 4
Which Markup Language is used along with NITRO API to create a StyleBook?

• A. YAML
• B. GML
• C. XML
• D. HTML

Answer: A

NEW QUESTION 5
A Citrix Engineer needs to prevent an attack against insecure operating-system or web-server software. The attack can cause the system to crash or behave unpredictably when it receives a data string that is larger than it can handle.
Which security check on the Application Firewall can the engineer enable to prevent such attacks?

• A. Start URL
• B. Deny URL
• C. Buffer Overflow
• D. Field Format

Answer: C

NEW QUESTION 6
A website hosts highly dynamic content that is frequently requested in bursts of high user access. Which configuration will reduce traffic to the origin server while optimizing client performance?

• A. –pollEveryTime NO
• B. –expireAtLastByte YES
• C. –flashCache YES
• D. –heurExpiryParam 0

Answer: A

NEW QUESTION 7
A Citrix Engineer needs to configure NetScaler Management and Analytics System (NMAS) in their network to retain network reporting data, events, audit logs, and task logs for 20 days.
Which settings can the engineer configure to meet the requirement?

• A. System Prune Settings
• B. System Backup Settings
• C. Instance Backup Settings
• D. Syslog Prune Settings

Answer: A

NEW QUESTION 8
The NetScaler processes HTTP/2 web client connections to the backend web servers by . (Choose the correct option to complete the sentence.)

• A. Converting the HTTP/2 headers to HTTP/1.1 headers and forwarding them to the web servers.
• B. Dropping HTTP/2 requests as it is NOT supported by web servers.
• C. Passing- through all HTTP/2 traffic to the web servers.
• D. Converting HTTP/2 to HTTP 0.9 and forwarding the packets to the web servers.

Answer: A

NEW QUESTION 9
Which meta-character can be used as a wildcard to match a single character in a given position?

• A. A forward slash (/)
• B. A period (.)
• C. An asterisk (*)
• D. A dollar Sign ($)

Answer: D

NEW QUESTION 10
A Citrix Engineer observes the following event in the ns.log:
Aug 3 11:55:58 <local0.info> 10.248.64.10 08/03/2015:15:55:58 GMT ATL0NS01 0-PPE-1: default APPFW APPFW_STARTURL 406856 0: 10.248.13.13 11152-PPE1
LG+hd4LkcYiOyQVWvOTsCtSyiv00001 SPI Disallow illegal URL: https://training.citrix.com/login
<blocked>
Which Application Firewall profile has blocked the URL?

• A. SPI
• B. APPFW_STARTURL
• C. ATL0NS01
• D. SPI Disallow illegal URL

Answer: C

NEW QUESTION 11
How can a Citrix Engineer configure a specific LDAP attribute in the nFactor implementation?

• A. Specify the attribute in the LDAP server attributes field.
• B. Change the order of the policies.
• C. Add the attribute on the nFactor traffic policy.
• D. Change the login schema and add the new attribute.

Answer: D

NEW QUESTION 12
Scenario: A Citrix Engineer observes that when going through NetScaler, user connections fail and users are unable to access Exchange server. However, users can connect directly to the Exchange server. After checking the logs, the engineer finds that the POST request is blocked through the NetScaler.
The log in/ var/log/ns.log is as follows:
Jul 20 11:00: 38 <local0.info>x.x.x. 1 07/20/2021:11:00:38 GMT ns 0-PPE-0:APPFW AF_400_RESP 29362
0: x.x.x.1 439800-PPEO- urlwdummy
https://test.abc.com/rpc/rpcproxy.dll?mail.sfmta.com:6004 Bad request headers. Content-length exceeds post body limit <blocked>
Which parameter can the engineer modify to resolve the issue while maintaining security?

• A. Increase the Maximum Header Length under nshttp_default_profile.
• B. Increase the POST body limit using the HTTP profile.
• C. Add an Application Firewall policy with the expression “HTTP.REQ.METHOD.EQ( “POST”)” with APPFW_BYPASS profile bound.
• D. Increase the POST body limit under common settings in Application Firewall profile settings.

Answer: D

NEW QUESTION 13
Which reason can cause fail over in a NetScaler Management and Analytics System (NMAS) High Availability pair?

• A. A secondary server loses connectivity in the LAN.
• B. The engineer manually forces the secondary server to shut down.
• C. A primary server encounters a critical software issue.
• D. A primary server does NOT receive the SNMP traps from the instances connected.

Answer: C

NEW QUESTION 14
A Citrix Engineer has configured NetScaler Web Logging on a Linux client machine. The engineer needs to verify if the log.conf file has been configured correctly and that there are NO syntax errors.
Which command can the engineer use to accomplish this?

• A. nswl -verify –f/ns/etc/log.conf
• B. nswl -verify –f/usr/local/netscaler/etc/log.conf
• C. nswl –verify –f/usr/local/netscaler/bin/log.conf
• D. nswl –verify –f/ns/bin/log.conf

Answer: B

NEW QUESTION 15
Which three options can be used to specify the destination of an HTTP Callout? (Choose three.)

• A. Load balancing Virtual server
• B. Global server load balancing Virtual server
• C. NetScaler Gateway Virtual server
• D. Content switching Virtual server
• E. Cache redirection Virtual server

Answer: ADE

NEW QUESTION 16
A Citrix Engineer needs to implement a rate limiting policy to permit an average of one request in 40 ms using NetScaler.
Which Limit Identifier will meet this requirement?

• A. adds ns limitIdentifier limit_req-threshold 40 –mode CONNECTION
• B. set limitidentifier limit_req –mode request_rate –timeslice 2000 –Threshold 50 –limitType smooth
• C. add ns limitIdentifier limit_req –threshold 1 –mode CONNECTION
• D. set limitidentifier limit_req –mode request_rate –timeslice 2000 –Threshold 50 –limitType Bursty

Answer: B

NEW QUESTION 17
A Citrix Engineer enabled Credit Card Security check in the Application Firewall Profile. Which response header will be dropped by Application Firewall after this check is enabled?

• A. Content-Encoding
• B. Content-Location
• C. Content-Type
• D. Content-Length

Answer: D