NEW QUESTION 1
A Citrix Engineer needs to configure NetScaler Management and Analytics System (NMAS) in their network to retain network reporting data, events, audit logs, and task logs for 20 days.
Which settings can the engineer configure to meet the requirement?

• A. System Prune Settings
• B. System Backup Settings
• C. Instance Backup Settings
• D. Syslog Prune Settings

Answer: A

NEW QUESTION 2
A Citrix Engineer needs to prevent an attack against insecure operating-system or web-server software. The attack can cause the system to crash or behave unpredictably when it receives a data string that is larger than it can handle.
Which security check on the Application Firewall can the engineer enable to prevent such attacks?

• A. Start URL
• B. Deny URL
• C. Buffer Overflow
• D. Field Format

Answer: C

NEW QUESTION 3
An attacker inserting a malicious code that compromises the trust relationship between users and a web application is an example of a (n) attack. (Choose the correct option to complete the sentence.)

• A. Cookie Tampering
• B. SQL Injection
• C. Form Field Consistency
• D. Cross-site Scripting

Answer: D

NEW QUESTION 4
A Citrix Engineer has deployed Front-end Optimization on NetScaler. The following are the snippets of the content before and after optimization.
Before Optimization:

After Optimization:

Which optimization technique has been applied to the content?

• A. Combine CSS
• B. Minify CSS
• C. Inline CSS
• D. Linked JavaScript to inline JavaScript

Answer: A

NEW QUESTION 5
Which NetScaler Management and Analytics System (NMAS) feature will assist the Citrix Engineer in gathering the required data for issues with Endpoint Analysis?

• A. Security Insight
• B. Web Insight
• C. HDX Insight
• D. Gateway Insight

Answer: A

NEW QUESTION 6
Scenario: A Citrix Engineer has enabled learning on Application Firewall for all the Security checks on a basic profile that is configured in a production environment. However, after a few hours, the Application Firewall has stopped learning new data.
What is causing the issue?

• A. The learning database is limited to 20 MB in size and needs a reset.
• B. Application Firewall learning can only be enabled for an advanced profile.
• C. Application Firewall learning should only be enabled on Start URL.
• D. All the Security checks CANNOT be enabled simultaneously.

Answer: A

NEW QUESTION 7
A Citrix Engineer observes that after enabling the security checks in Learning mode only in an Application Firewall profile, the NetScaler is blocking the non-RFC compliant HTTP packets.
What can the engineer modify in the configuration to resolve this issue?

• A. Disable Drop Invalid Requests in the HTTP Profile settings.
• B. Set Default profile in application firewall settings as APPFW_BYPASS.
• C. Set Undefined Action in application firewall settings as APPFW_BYPASS.
• D. Enable Drop Invalid Requests in the HTTP Profile settings.

Answer: B

NEW QUESTION 8
Scenario: A Citrix Engineer observes that when going through NetScaler, user connections fail and users are unable to access Exchange server. However, users can connect directly to the Exchange server. After checking the logs, the engineer finds that the POST request is blocked through the NetScaler.
The log in/ var/log/ns.log is as follows:
Jul 20 11:00: 38 <local0.info>x.x.x. 1 07/20/2021:11:00:38 GMT ns 0-PPE-0:APPFW AF_400_RESP 29362
0: x.x.x.1 439800-PPEO- urlwdummy
https://test.abc.com/rpc/rpcproxy.dll?mail.sfmta.com:6004 Bad request headers. Content-length exceeds post body limit <blocked>
Which parameter can the engineer modify to resolve the issue while maintaining security?

• A. Increase the Maximum Header Length under nshttp_default_profile.
• B. Increase the POST body limit using the HTTP profile.
• C. Add an Application Firewall policy with the expression “HTTP.REQ.METHOD.EQ( “POST”)” with APPFW_BYPASS profile bound.
• D. Increase the POST body limit under common settings in Application Firewall profile settings.

Answer: D

NEW QUESTION 9
Scenario: A hacker accessed the HTML code from a product page and manipulated the HTML code as shown: Original Value: <input type=hidden name=price value=2379.73>
Manipulated Value: <input type=hidden name=price value=9.24>
Which security check can the engineer configure to counter the manipulation?

• A. Content-type
• B. Field Formats
• C. Form Field consistency
• D. HTML Cross-Site Scripting

Answer: C

NEW QUESTION 10
Which method is used by NetScaler Management and Analytics System (NMAS) to gather licensing information from NetScaler?

• A. CFLOW
• B. APPFLOW
• C. NITRO
• D. IPFLOW

Answer: C

NEW QUESTION 11
A Citrix Engineer needs to configure an Application Firewall policy. According to company policies, the engineer needs to ensure that all the requests made to the website are originating from North America.
Which policy expressions will help the engineer accomplish the requirement?

• A. CLIENT.IP.SRC.MATCHES_LOCATION (“North America.US.*.*.*.*”)
• B. CLIENT.IP.SRC.MATCHES_LOCATION (“North America.US.*.*.*.*”). NOT
• C. CLIENT.IP.DST.MATCHES (“North America.US.*.*.*.*”)
• D. CLIENT.IP.SRC.MATCHES (“North America.US.*.*.*.*”)

Answer: A

NEW QUESTION 12
A Citrix Engineer enabled Credit Card Security check in the Application Firewall Profile. Which response header will be dropped by Application Firewall after this check is enabled?

• A. Content-Encoding
• B. Content-Location
• C. Content-Type
• D. Content-Length

Answer: D

NEW QUESTION 13
A Citrix Engineer has configured SQL Injection security check to block all special characters. Which two requests will be blocked after enabling this check? (Choose two.)

• A. Citrix; Sqltest
• B. 175// OR 1//=1//
• C. Citrix” OR “1”=”1
• D. Citrix OR 1=1
• E. 175’ OR ‘1’= ‘1’

Answer: AB

NEW QUESTION 14
A Citrix Engineer needs to migrate the NetScaler Insight Center virtual appliance to NetScaler Management and Analytics System (NMAS).
Which two actions should be met before migrating the NetScaler Insight Center virtual appliance to NMAS? (Choose two.)

• A. Install NetScaler Insight Center 11.1 Build 47.14 or later.
• B. Install NetScaler MAS License on the NMAS.
• C. Download the NetScaler MAS build to the /var/mps/mps_images.
• D. Remove the NetScaler instances added to the Insight Center.
• E. Migrate the NMAS virtual machine to XenServer.

Answer: AC

NEW QUESTION 15
A Citrix Engineer configures the integrated caching feature to cache both static and dynamic content, but the integrated cache feature does NOT work as expected.
Which two resources can the engineer use to troubleshoot this integrated cache issue? (Choose two.)

• A. core dump
• B. dmesg
• C. nstrace
• D. ns.conf
• E. sysctl-a

Answer: CD

Explanation: Reference
https://docs.citrix.com/en-us/netscaler/11/optimization/integrated-caching/troubleshooting-integrated-caching.ht

NEW QUESTION 16
Which NetScaler Management Analytics System (NMAS) feature can the Citrix Engineer use to convert configuration tasks performed using the GUI to CLI commands?

• A. Master Configuration
• B. Inbuilt Template
• C. Record-and-Play
• D. Configuration Template

Answer: C

NEW QUESTION 17
The NetScaler Management and Analytics System (NMAS) needs to communicate with NetScaler instances on the Microsoft Azure and Amazon Web Services (AWS) clouds.
Which configuration must a Citrix Engineer make to meet this requirement?

• A. Layer 2 tunnel between NetScaler MAS and the NetScaler VPX instances.
• B. Layer 3 tunnel between NetScaler MAS and the NetScaler VPX instances.
• C. Layer 2 Tunneling Protocol (L2TP) connection to the NetScaler VPX instances.
• D. NetScaler MAS in the cloud.

Answer: B