Scenario: A Citrix Engineer configures the Application Firewall for protecting a sensitive website. The security team captures traffic between a client and the website and notes the following cookie:
citrix_ns_id
The security team is concerned that the cookie name is a risk, as it can be easily determined that the NetScaler is protecting the website.
Where can the engineer change the cookie name?

• A.Application Firewall Profile
• B.Application Firewall Default Signatures
• C.Application Firewall Engine Settings
• D.Application Firewall Policy

Comment: *

Name: *

Email: *

Verification: *

A Citrix Engineer needs to protect a website that contains sensitive data such as employee ID numbers and customer ID numbers.
Which security check can the engineer implement to protect the sensitive data?

• A.Content-type
• B.Safe Object Check
• C.Field Formats
• D.CSRF Form tagging

Comment: *

Name: *

Email: *

Verification: *

What criteria must be met in order to create a certificate bundle by linking multiple certificates in NetScaler Management and Analytics System (NMAS)?

• A.The certificates must be issued by an external Certificate Authority.
• B.The issuer if the first certificate must NOT have issued the second certificate.
• C.The issuer of the first certificate must match the domain of the second certificate.
• D.The certificates must be created on the NetScaler.

Comment: *

Name: *

Email: *

Verification: *

Scenario: A Citrix Engineer is asked to implement multi-factor authentication for Citrix Gateway.
The engineer creates the authentication policies and binds the policies to the appropriate bind points. The engineer creates a custom form using Notepad++ to format the page which will capture the user's credentials.
What is the first step the engineer must perform to assign this form to the authentication process?

• A.Create a login schema profile and select the uploaded file.
• B.Create an authentication policy label and bind it to an authentication policy.
• C.Bind the authentication policy to the primary authentication bank of the Citrix Gateway
• D.Create a login schema policy and bind it to the authentication virtual server.

Comment: *

Name: *

Email: *

Verification: *

Which Citrix Web App Firewall profile setting can a Citrix Engineer configure to provide a response when a violation occurs?

• A.Default Request
• B.Redirect URL
• C.Return URL
• D.Default Response

Comment: *

Name: *

Email: *

Verification: *