Citrix 1Y0-341 Exam - Topic 5 Question 42 Discussion

Actual exam question for Citrix's 1Y0-341 exam

Question #: 42
Topic #: 5

Scenario: During application troubleshooting, a Citrix Engineer notices that response traffic received from a protected web application is NOT matching what the web server is sending out. The auditor is concerned that Man-In-The-Middle attack is in progress.

Which action is the Citrix Web App Firewall performing that would trigger this false positive?

ARemoving the Last-Modified header

BInserting a hidden form field

CRemoving the Accept-Encoding header

DModifying and adding cookies in the response

Show Suggested Answer

Suggested Answer: D

by Beatriz at May 10, 2022, 02:53 AM

Limited Time Offer

25%

Off

Get Premium 1Y0-341 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Arthur

4 months ago

Surprised this is even a question, thought everyone knew about cookie modifications!

upvoted 0 times

...

Jerry

4 months ago

Totally agree with D, that’s a classic sign of a firewall interference.

upvoted 0 times

...

Tamesha

4 months ago

Wait, are we sure it's not C? That seems like a common issue.

upvoted 0 times

...

Ceola

4 months ago

I think it's A, removing headers can cause mismatches too.

upvoted 0 times

...

Bulah

5 months ago

It's definitely D, modifying cookies can mess with response validation.

upvoted 0 times

...

Shawnna

5 months ago

Okay, let's think this through. The question says the security of the data is a high priority, so I don't think we can just store them in the source tree or a hidden file. I'm leaning towards changing them periodically as the best option.

upvoted 0 times

...

Edda

5 months ago

This seems like a straightforward question about improving upload speeds for a geographically distributed user base. I think the key is to look at the options that can help reduce latency for users.

upvoted 0 times

...

Sabrina

5 months ago

I think the key here is to focus on where the post-processing scripts are added. The options mention the automation, playbooks, Incident Type editor, and Post-Process Rules editor, so I'll need to carefully consider each one.

upvoted 0 times

...

Shayne

5 months ago

Ah, I remember learning about this in class. I think the issue might be that the GoldenGate Manager wasn't started first.

upvoted 0 times

...