1Y0-341試験無料問題集「Citrix ADC Advanced Topics - Security, Management and Optimization 認定」
Scenario: A Citrix Engineer wants to protect a web application using Citrix Web App Firewall.
After the Web App Firewall policy afweb_protect is bound to the virtual server, the engineer notices that Citrix Web App Firewall is NOT properly displaying the page.
A positive number for the Policy Hits counter for afweb_protect, tells the engineer the number of times Citrix Web App Firewall ___________. (Choose the correct option to complete the sentence.)
After the Web App Firewall policy afweb_protect is bound to the virtual server, the engineer notices that Citrix Web App Firewall is NOT properly displaying the page.
A positive number for the Policy Hits counter for afweb_protect, tells the engineer the number of times Citrix Web App Firewall ___________. (Choose the correct option to complete the sentence.)
正解:B
解答を投票する
解説: (GoShiken メンバーにのみ表示されます)
Scenario: During application troubleshooting, a Citrix Engineer notices that response traffic received from a protected web application is NOT matching what the web server is sending out.
The engineer is concerned that someone is trying to disrupt caching behavior.
Which action is the Citrix Web App Firewall performing that would trigger this false positive?
The engineer is concerned that someone is trying to disrupt caching behavior.
Which action is the Citrix Web App Firewall performing that would trigger this false positive?
正解:A
解答を投票する
解説: (GoShiken メンバーにのみ表示されます)
A Citrix Engineer needs to implement Application Firewall to prevent the following tampering and vulnerabilities:
- If web server does NOT send a field to the user, the check should NOT allow the user to add that field and return data in the field.
- If a field is a read-only or hidden field, the check verifies that data has NOT changed.
- If a field is a list box or radio button field, the check verifies that data in the response corresponds to one of the values in that field.
Which security check can the engineer enable to meet this requirement?
- If web server does NOT send a field to the user, the check should NOT allow the user to add that field and return data in the field.
- If a field is a read-only or hidden field, the check verifies that data has NOT changed.
- If a field is a list box or radio button field, the check verifies that data in the response corresponds to one of the values in that field.
Which security check can the engineer enable to meet this requirement?
正解:B
解答を投票する