Exam Overview

1Y0-340

1Y0-340 Citrix ADC Advanced

Topics: Security, Management, and
Preparation

Optimization

Exam Preparation Guide 2.0

Contributors & Marks

October 22, 2018

1
Exam Overview

Disclaimer

This exam preparation guide is designed to provide

candidates with necessary information about the 1Y0-340
exam, including study resources and ways to interpret the
exam objectives to better enable candidates to assess the
types of questions that may be asked during the exam. Please
be aware that the content of this guide in no way ensures a
passing score on the certification exam.
Preparation
Contributors & Marks

2
 Table of Contents
Exam Overview

Exam Overview Contributors & Marks

Number of Items 4 Prep Guide Author 25
Passing Score 4 Subject Matter Experts (SMEs) 25
Time Limit 4 Notice 26
Intended Audience 4 Marks 26
Registration and Administration 4
Retake Policies 5
Preparation

Preparing for the Exam

Recommended Knowledge and Skills 6
Recommended Product Experience 6
Recommended Training 7
Unauthorized Preparation Materials 7
Section Titles and Weights 8
Contributors & Marks

Interpretation of Objectives 9
Sections, Objectives and References 10
Appendix: Practice 22

3
 Exam Overview
Number of Items Intended Audience
Exam Overview

The 1Y0-340 exam is a 62-question exam written in English. Some of the items
on this exam will not be scored and thus will not affect your final result in any
way. The unscored items are included in this exam solely for research purposes.
Passing Score
The 1Y0-340 exam was developed for candidates who have demonstrated the minimum
requisite knowledge and skills required for a Citrix networking professional who can
deploy and/or manage Citrix Web App Firewall to secure application access in a Citrix
ADC 12 environment, as well as Citrix Application Delivery Management to administer a
Citrix ADC environment or optimize Citrix ADC-managed application delivery traffic.

The passing score for this exam is 62%. The tasks tested in this exam will represent those skills, which are deemed as advanced
topics such as Security, Management, and Optimization
Time Limit
Preparation

Primary Audience:
Type of Candidate Time Limits* Notes • Network Administrators
• Network Engineers
Native English speakers 90 minutes • Network Architects
• Citrix Administrators
• Systems Engineers /Systems Administrators

Non-native English speakers 90 minutes Time extension granted automatically

Registration and Administration
Contributors & Marks

that take the exam in

countries where English is a +30 minutes
foreign language (time extension) This exam is administered at Pearson VUE testing centers worldwide. To learn more
Non-native English speakers 90 minutes Must request time extension from
about the rules and process of taking an exam, please visit
that take the exam in Citrix. Submit your request here: Time http://training.citrix.com/exams.
countries where English is +30 minutes Extension Request
NOT a foreign language (time extension) Worldwide, visit the Pearson VUE website (http://www.pearsonvue.com/citrix) to locate
a testing center in your area and register for an exam. You may also register in person at
The time limit for this exam is 90 minutes. The total seat time is 90 + 35 minutes.
any Pearson VUE testing center. If you reside in the United States or Canada, you may
The total seat time includes times allotted for the NDA and surveys. also register by calling 1-800-931-4084.

Note: A $7 USD surcharge will be added to phone registrations.

4
 Retake Policy
Overview
ExamOverview

Candidates must wait 24 hours from their original appointment time before they
can register to retake an exam. After a second attempt, and any attempt
Exam

thereafter, the candidate must wait 14 calendar days to retake the exam.

Breach of this policy can result in sanctions up to and including a ban from
taking Citrix exams and/or decertification.

For more information about our policies, including the Citrix Exam Retake Policy
Preparation

and the Candidate Conduct Policy, please visit http://training.citrix.com/exams

Contributors & Marks

5
 Prepping for the Exam
Exam Overview

Recommended Knowledge and Skills Recommended Product Experience

Candidates should have knowledge of the following prior to taking this exam:
o Identify common web attacks and vulnerabilities.
o Understand how to utilize the adaptive learning engine.
o Configure Citrix Web App Firewall to protect web applications.
o Utilize Citrix ADC Secure Insight to monitor, manage and report on application
Preparation
Preparation
We recommend that candidates have at least six months of experience with the
following topics in a Citrix ADC 12 solution:
o Citrix Web App Firewall Overview
o Citrix Web App Firewall Profiles and Policies
o Regular Expression

services security. o Attacks and Protections

o Troubleshoot Citrix Web App Firewall. o Monitoring and Troubleshooting
o Manage multiple Citrix ADC platforms centrally. o Security and Filtering
o Orchestrate configuration changes. o Citrix Application Delivery Management: Introduction and Configuration
o Report on transactions passing through the Citrix ADC environment. o Managing and Monitoring Citrix ADC Instances
o Visualize infrastructure and plan expansion. o Managing Citrix ADC Configurations
o Citrix ADC Web Logging
Contributors & Marks

o Integrated Caching
o Front-End Optimization
o Tuning and Optimizations

6
 Recommended Training
Exam Overview
Citrix Education recommends that candidates have hands-on experience with Citrix
NetScaler 11 and above, prior to taking this exam. One of the best ways to do this is by
taking a formal Citrix training course. The following course provides training on Citrix
ADC 12 Essentials and Citrix ADC Traffic Management solutions.
• CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization
As with all Citrix exams, it is recommended that candidates get hands-on experience
by working directly with products covered on the exam.
Preparation
Contributors & Marks
Unauthorized Preparation Materials
Citrix Education monitors exam results to ensure that candidates are not using
unauthorized materials to prepare for exams. If it is determined that a candidate
used unauthorized materials to prepare for an exam, the candidate’s score will be
invalidated and his or her certification will be revoked.
When looking for materials in addition to authorized Citrix training to prepare for
certification, Citrix Education recommends that you visit
http://www.certguard.com to ensure that a site is indeed legitimate. This site flags
websites that are acting as brain dumps, which have unauthorized materials.
7
 Section Titles and Weights

Section Weight
Exam Overview

Section 1: Citrix Web App Firewall Overview

8%
Section 2: Citrix Web App Firewall Profiles and Policies
6%
Section 3: Regular Expression
5%
Section 4: Attacks and Protections
21%
Section 5: Monitoring and Troubleshooting
8%
Preparation

Section 6: Security and Filtering

6%
Section 7: Citrix Application Delivery
Management: Introduction and Configuration 8%
Section 8: Managing and Monitoring Citrix ADC Instances
11%
The section weights included in this guide are intended to help you in understanding how
Section 9: Managing Citrix ADC Configurations much of the exam is devoted to the topics listed. In fact, the percentages directly map to
5%
Contributors & Marks

the number of questions on the exam. For example, if an exam has 60 questions, and
Section 10: Citrix ADC Web Logging Section 1 is weighted at 50%, then 30 of the questions on the exam will relate to Section
3%
1 (60*50% = 30).
Section 11: Integrated Caching
6% Please be warned that section weights are NOT used to calculate your score. Scoring is far
Section 12: Front-End Optimization more complicated as exam questions may be given different weights based on their
5% overall importance. Because some questions may have different point values assigned to
Section 13: Tuning and Optimizations
them, section weights and exam scores do not always have a one-to-one correlation.
6%
TOTAL
100%
For more information on how scoring works in Citrix exams read the blog The Scoring
Secrets for Citrix Exams - Divulged.

8
 Interpretation of Objectives
Exam Overview

Candidates should refer to the objectives and examples listed in this guide in order Note: The examples listed in the “Sections, Objectives, Examples and References”
to determine which topics will be on the exam, as well as examples of the topics section of this guide do NOT encompass all potential topics that could be tested. The
that could be tested. examples are only provided as guidance.

For example, if the objective reads “Configure monitors” and one of the examples The objectives and examples for this exam were developed by Exam Project Managers
reads, “determine when to use which type of monitor,” exam-takers could expect to and Subject Matter Experts (SMEs) based on identified tasks that related to Citrix ADC
see: 12 in enterprise environments.
Preparation

• A question that requires determining which type of monitor to configure… The number of questions written for each objective relates directly to the importance
o Which type of monitor should a Citrix Administrator configure… of that objective and is proportional to how frequently that task is performed.
• …based on given requirement(s)
o …to validate that a specific text string is returned in a web server
response?
Contributors & Marks

9
 Sections, Objectives and References
• Citrix Product Documentation: http://docs.citrix.com
• Citrix Support: http://www.citrix.com/support
• Citrix Blogs: http://blogs.citrix.com/
Exam Overview

Objective Objective References

Number
Section 1: Citrix Web App Firewall Overview
CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization (Module-1, 4)

http://docs.citrix.com/en-us/netscaler/12/application-firewall/top-level-protections.html
1.01 Identify common web application attacks.
http://docs.citrix.com/en-us/netscaler/12/application-firewall/top-level-protections/buffer-over-flow-
check.html
Preparation

CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization (Module-4)

http://docs.citrix.com/en-us/netscaler/12/application-firewall/top-level-protections/buffer-over-flow-
check.html

http://docs.citrix.com/en-us/netscaler/12/application-firewall/top-level-protections/html-sql-injection-
check.html
1.02 Determine the Functionality of Citrix Web App Firewall, given a scenario.
Contributors & Marks

http://docs.citrix.com/en-us/netscaler/12/application-firewall/top-level-protections/cookie-consistency-
check.html

http://docs.citrix.com/en-us/netscaler/12/application-firewall/dataleak-prevention/creditcard-check.html

http://docs.citrix.com/en-us/netscaler/12/application-firewall/DeploymentGuide.html

CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization (Module-1)

http://docs.citrix.com/en-us/netscaler/12/application-firewall/stats-and-reports.html
1.03 Understand the audit for PCI-DSS compliance.
https://www.citrix.com/products/netscaler-appfirewall/platforms.html

10
 Objective Objective References
Number
Section 2: Citrix Web App Firewall Profiles and Policies
Exam Overview

CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization (Module-2)

Determine how to create (or implement) Citrix Web App Firewall https://www.citrix.com/blogs/2011/11/23/netscaler-application-firewall-profiles-basic-vs-advanced-check-it-out/
2.01
profiles.
https://support.citrix.com/article/CTX130546

CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization (Module-2)

http://docs.citrix.com/en-us/netscaler/12/appexpert/policies-and-expressions/ns-pi-tut-exmp-classic-pol-wrapper-
con.html
Preparation

http://docs.citrix.com/en-us/netscaler/12/application-firewall/policies/firewall-policies/configuring_policies.html
2.02 Determine how to configure Citrix Web App Firewall Policies.
http://docs.citrix.com/en-us/netscaler/12/application-firewall/policies/firewall-policies/binding_policies.html

http://docs.citrix.com/en-us/netscaler/12/appexpert/policies-and-expressions/ns-pi-tut-exmp-classic-pol-wrapper-
con.html

CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization (Module-2)
2.03 Determine how to analyze application firewall settings.
Contributors & Marks

Section 3: Regular Expression

3.01 CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization (Module-3)

Identify PCRE metacharacters.

3.02 CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization (Module-3)
Determine how to apply regular expressions for Citrix ADC.

11
 Objective Objective References
Number

Section 4: Attacks and Protections

Exam Overview

CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization (Module-4)

Determine how to configure security checks to meet given

4.01
requirements.

CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization (Module-4)

https://support.citrix.com/article/CTX131488

4.02 Identify various attacks and protections. https://docs.citrix.com/en-us/netscaler/11-1/application-firewall/form-protections/form-field-consistency-check.html

Preparation

http://docs.citrix.com/en-us/netscaler/11-1/application-firewall/form-protections/cross-site-request-forgery-
check.html

CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization (Module-4)

https://docs.citrix.com/en-us/netscaler/12-1/ns-gen-appsec-wrapper-10-con/appfw-wrapper-con-10/appfw-profiles-
Determine how to configure the generation of simple and
4.03 con/appfw-profiles-learning-tsk.html
generalized rules based on given requirements.
Contributors & Marks

CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization (Module-4)

https://support.citrix.com/article/CTX138858
4.04 Determine learned rules per security check.
https://support.citrix.com/article/CTX219267

CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization (Module-4)

4.05 Determine how to deploy, skip and edit learned rules. https://docs.citrix.com/en-us/netscaler/10-1/ns-gen-appsec-wrapper-10-con/appfw-wrapper-con-10/appfw-profiles-
con/appfw-profiles-learning-tsk.html

12
 Objective Objective References
Number
Exam Overview

Section 5: Monitoring and Troubleshooting

CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization

(Module-5)
5.01 Determine how Citrix Web App Firewall interacts with applications in a given environment.
https://support.citrix.com/article/CTX131488

CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization

(Module-5)
Preparation

https://docs.citrix.com/en-us/netscaler/11-1/application-firewall/logs.html

http://docs.citrix.com/en-us/netscaler-mas/11-1/security-insight.html
5.02 Determine how to Implement logging and monitoring.
http://docs.citrix.com/en-us/netscaler-mas/11-1/security-
insight.html#par_richtext_841a
Contributors & Marks

CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization

(Module-5)

http://docs.citrix.com/en-us/netscaler/12/application-firewall.html
5.03 Identify troubleshooting methods for Citrix Web App Firewall.
http://docs.citrix.com/en-us/netscaler/12/application-firewall/debugging-
troubleshooting/miscellaneous.html

13
 Objective Objective References
Number
Exam Overview

Section 6: Security and Filtering

CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization (Module-6)

http://docs.citrix.com/zh-cn/netscaler/12/reputation/ip-reputation.html
6.01 Determine how to implement IP reputation.
http://docs.citrix.com/zh-cn/netscaler/12/reputation.html

CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization (Module-6)
Preparation

http://docs.citrix.com/en-us/netscaler/12/appexpert/rate-limiting.html

http://docs.citrix.com/en-us/netscaler/12/appexpert/rate-limiting/rate-limiting-for-traffic-domains.html
6.02 Determine how to implement IP rate-limiting.
http://docs.citrix.com/en-us/netscaler/12/appexpert/action-analytics/configuring-selector.html

http://docs.citrix.com/en-us/netscaler/12/appexpert/rate-limiting/rate-based-policies-examples.html
Contributors & Marks

CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization (Module-6)
6.03 Determine how to Implement AppQoE. http://docs.citrix.com/en-us/netscaler/12/appexpert/appqoe/appqoe-actions.html

CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization (Module-6)

http://docs.citrix.com/en-us/netscaler/12/appexpert/http-callout/configuring-http-callouts.html
6.04 Determine how to implement HTTP Callout.
http://docs.citrix.com/en-us/netscaler/12/appexpert/http-callout/caching-http-callout-responses.html

14
 Objective Objective References
Number
Exam Overview

Section 7: Citrix Application Delivery Management: Introduction and Configuration

http://docs.citrix.com/en-us/netscaler-mas/12.html

Determine how to perform the initial configuration of Citrix https://docs.citrix.com/en-us/netscaler-mas/12/setting-up-netscaler-mas/configure-system-settings-for-optimal-

7.01
Application Delivery Management. netscaler-mas-performance.html

http://docs.citrix.com/en-us/netscaler-mas/12/deploy-netscaler-mas.html
Preparation

Determine how to deploy Citrix Application Delivery http://docs.citrix.com/en-us/netscaler-mas/12/deploy-netscaler-mas/ha-deployment.html

7.02
Management based on a given scenario.
https://docs.citrix.com/en-us/netscaler-mas/12/setting-up-netscaler-mas/configure-system-settings-for-optimal-
netscaler-mas-performance.html

CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization (Module-6)
Contributors & Marks

http://docs.citrix.com/en-us/netscaler-mas/12/deploy-netscaler-mas/how-to-migrate-netscaler-mas-single-server-to-
ha.html

Determine how to create additional instances of Citrix

7.03
Application Delivery Management.

15
 Objective Objective References
Number

Section 8: Managing and Monitoring Citrix ADC Instances

Exam Overview

CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization (Module-1 and 2)

http://docs.citrix.com/en-us/netscaler-mas/12/instance-management/how-to-backup-and-restore-using-
Determine how to manage multiple instances in a single Citrix Application mas.html
8.01 Delivery Management deployment with Inventory Management.
http://docs.citrix.com/en-us/netscaler-mas/12/setting-up-netscaler-mas/adding-an-instance.html

CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization (Module-1 and 2)
Preparation

http://docs.citrix.com/en-us/netscaler-mas/12/authentication-how-to-articles/how-to-extract-authentication-
server-group-in-mas.html

http://docs.citrix.com/en-us/netscaler-mas/12/authentication-how-to-articles/how-to-enable-fallback-local-
authentication.html

http://docs.citrix.com/en-us/netscaler-mas/12/authentication-and-rbac/role-based-access-control.html

http://docs.citrix.com/en-us/netscaler-mas/12/stylebooks.html
Contributors & Marks

Determine how to manage and monitor the aspects of Authentication,

8.02 http://docs.citrix.com/en-us/netscaler-mas/12/authentication-and-rbac/role-based-access-control/rbac-
Authorization, and Logging with User Management. configuring-access-policies.html

http://docs.citrix.com/en-us/netscaler-mas/12/analytics/HDX-Insight.html

http://docs.citrix.com/en-us/netscaler/12/aaa-tm/multi-factor-nfactor-authentication.html

https://support.citrix.com/article/CTX200342

http://docs.citrix.com/en-us/netscaler-mas/12/multi-tenancy-in-netscaler-mas.html

http://docs.citrix.com/en-us/netscaler-mas/12/authentication-and-rbac/role-based-access-control.html

16
 CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization (Module-1, 2 and Lab Guide)

http://docs.citrix.com/en-us/netscaler-mas/12/application-analytics-and-management.html
Exam Overview

http://docs.citrix.com/en-us/netscaler-mas/12/analytics/mas-gateway-insight.html

http://docs.citrix.com/en-us/netscaler-mas/12/analytics/HDX-Insight.html
Identify what data is captured and utilized with Analytics and
8.03
Automation. http://docs.citrix.com/en-us/netscaler-mas/12/analytics/ssl-insight.html

http://docs.citrix.com/en-us/netscaler-mas/12/configuration-management/configuration-jobs-record-and-play.html

https://docs.citrix.com/en-us/netscaler-mas/12/application-analytics-and-management/application-security-
analytics.html
Preparation

CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization (Module-1 and 2)
Determine how to configure and install SSL Certificates on Citrix
8.04 http://docs.citrix.com/en-us/netscaler-mas/12/certificate-management.html
Application Delivery Management.

Objective Objective References

Number
Contributors & Marks

Section 9: Managing Citrix ADC Configurations

CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization (Module-3)

http://docs.citrix.com/en-us/netscaler-mas/12/stylebooks/how-to-create-your-own-stylebooks.html
9.01 Determine how to create, manage, and configure StyleBooks.
http://docs.citrix.com/en-us/netscaler-mas/12/stylebooks.html

17
 CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization (Module-1)

http://docs.citrix.com/en-us/netscaler-mas/12/application-analytics-and-management.html
Exam Overview

Determine how to utilize Citrix Application Delivery Management
9.02
recommendations to assist in resource delivery.
http://docs.citrix.com/en-us/netscaler-mas/12/authentication-how-to-articles/how-to-cascade-external-
authentication-servers.html
http://docs.citrix.com/en-us/netscaler-mas/12/setting-up-netscaler-mas/add-netscaler-vpx-instances-
deployed-in-cloud-to-netscaler-mas.html

http://docs.citrix.com/en-us/netscaler-mas/12/netscaler-mas-licensing.html

http://docs.citrix.com/en-us/netscaler-mas/12/system-requirements.html#par_anchortitle_6496
Preparation

Objective Objective References

Number

Section 10: Citrix ADC Web Logging

CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization (Module-4)
Contributors & Marks

http://docs.citrix.com/en-us/netscaler/12/system/web-server-logging.html
10.01 Determine how to install and configure Citrix ADC Web Logging.
http://docs.citrix.com/en-us/netscaler/11/system/web-server-logging/configuring-nswl-client.html

CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization (Module-4)

http://docs.citrix.com/en-us/netscaler/12/system/web-server-logging/configuring-nswl-client.html
10.02 Determine how to troubleshoot issues using Citrix ADC Web Logging.
http://docs.citrix.com/en-us/netscaler/12/system/web-server-logging/installing-netscaler-web-logging-
client.html

18
 Objective Objective References
Number
Exam Overview

Section 11: Integrated Caching

CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization (Module-5)

http://docs.citrix.com/en-us/netscaler/12/optimization/integrated-caching/how-integrated-caching-
works.html
11.01 Determine when to use static or dynamic content requests.
http://docs.citrix.com/en-us/netscaler/12/optimization/integrated-caching/configuring-selectors-basic-
content-groups/about-content-groups.html
Preparation

CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization (Module-5)

https://support.citrix.com/article/CTX124553
11.02 Determine how to configure cache policies.
http://docs.citrix.com/en-us/netscaler/12/optimization/integrated-caching/configuring-policies-caching-
invalidation.html
Contributors & Marks

CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization (Module-3 and 5)

http://docs.citrix.com/en-us/netscaler/12/optimization/integrated-caching/improving-cache-
performance.html
11.03 Determine which content group settings to configure based on a given scenario.
https://developer-docs.citrix.com/projects/netscaler-command-reference/en/12.0/cache/cache-object/cache-
object/#show-cache-object

19
 Objective Objective References
Exam Overview

Number

Section 12: Front-End Optimization

CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization (Module-
6)
12.01 Determine how content is currently handled by browsers based on a given environment. http://docs.citrix.com/en-us/netscaler/12/optimization/front-end-optimization.html
Preparation

CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization (Module-
6)

http://docs.citrix.com/ja-jp/netscaler/12/optimization/front-end-optimization.html
12.02 Determine how to utilize front-end optimizations based on a given scenario. http://docs.citrix.com/ko-kr/netscaler/12/optimization/front-end-optimization/front-
end-optimization-samples.html
Contributors & Marks

20
Objective Objective References
Number

Section 13: Tuning and Optimizations

CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization (Module-7)
Determine how the Citrix ADC system uses HTTP connections based on a given
13.01
description. http://docs.citrix.com/en-us/netscaler/12/system/http-configurations/configuring-http2.html

CNS-320 Citrix ADC Advanced Topics – Security, Management, and Optimization (Module-7)

http://docs.citrix.com/en-us/netscaler/12/security/surge-protection.html

http://docs.citrix.com/en-us/netscaler/12/security/priority-queuing.html
13.02 Determine how to configure Surge Protection and Priority Queuing.
http://docs.citrix.com/en-us/netscaler/12/security/surge-protection/ns-sp-set-thresholdssp-tsk.html

http://docs.citrix.com/en-us/netscaler/12/system/tcp-configurations.html

http://docs.citrix.com/en-
13.03 Determine how to Tune HTTP and TCP behaviors in Connection Profiles. us/netscaler/12/system/TCP_Congestion_Control_and_Optimization_General.html

http://docs.citrix.com/en-us/netscaler/12/security/http-denial-of-service-protection/ns-syn-dos-
protection-con.html

http://docs.citrix.com/en-us/netscaler/12/security/http-denial-of-service-protection/ns-httpdosp-tune-
Determine how to utilize HTTP DoS protection deployment guidelines to meet clnt-dtct-js-chlng-res-rate-con.html
13.04
the needs of a given environment.
http://docs.citrix.com/en-us/netscaler/12/security/http-denial-of-service-protection/ns-httpdosp-tune-
clnt-dtct-js-chlng-res-rate-con.html

21
 Appendix: Practice
Exam Overview

Introduction Sample Question 1

Exam-takers should refer to the objectives listed in the “Sections, Objectives, A Citrix Engineer needs to create an Citrix Web App Firewall Profile.
Examples and References” section of this guide in order to determine which topics
will be on the exam and examples of topics for each objective. Which statement is applicable when using Signatures for creating an Citrix Web App
Firewall Profile?
For example, if the objective reads, "Troubleshoot high availability" and one of the
examples reads, “determine how to resolve a given issue”, exam-takers could A. No Signatures are bound to the profile.
expect to see: B. No Custom Signatures can be used.
Preparation

C. Only external format Signatures can be used.

A scenario describing an issue with high availability - D. The Default Signatures are bound to the profile.
Scenario: A Citrix Administrator is attempting to configure high availability
for a Citrix ADC MPX pair. Each Citrix ADC appliance resides in a different Correct Answer: A
subnet. The administrator noticed that network connectivity between the
appliances was lost once the high availability pair was established. Objective: Determine how to analyze application firewall settings.

A question that requires determining how to resolve the given issue - Source: CNS-320 Course, Module-4
Contributors & Marks

What must the administrator enable to correct this issue?

The objectives for this exam were developed by Exam Project Managers and
Subject matter experts based on identified tasks that relate to installing,
configuring and/or operating Citrix ADC 12 in enterprise environments.

22
 Appendix: Practice
Exam Overview

Sample Question 2 Sample Question 3

A Citrix Engineer has enabled transform action in SQL injection check. Which option matches the following regular expression?

What would the following parameter be transformed into? r.n 10\.10\.0\..

Citrix; OR '1' ='1 A. run 10.100.10.99

B. run 10.10.0.9
A. Citrix\ OR "1"="1 C. RUN 10.10.0.9
Preparation

B. Citrix OR "1"="1 D. r.n 10.10.10.99

C. Citrix OR "1"=/1
D. Citrix/ OR "1"="1 Correct Answer: B

Correct Answer: B Objective: Determine how to apply regular expressions for Citrix ADC.

Objective: Determine how to configure the generation of simple and generalized Source: CNS-320 Course, Module-4
rules based on given requirements.
Contributors & Marks

Source: CNS-320 Course, Module-4

23
 Appendix: Practice
Exam Overview

Sample Question 4
Which logging does an engineer need to enable as a pre-requisite to geolocation-
based logging?

A. CEF (Common Even Format)

B. Syslog
C. Audit
D. AppFlow
Preparation

Correct Answer: A

Objective: Determine how to implement traffic compression in a Citrix ADC

environment

Source:
Contributors & Marks

CNS-320 Course, Module-5

Citrix Docs
https://docs.citrix.com/en-us/netscaler/11-1/application-firewall/logs.html

24
 Contributors & Marks
Exam Overview

Author

Premkumar Mekara

Subject Matter Experts

Preparation

Akhilesh Kumar Pandey Jesse Wilson Marcelo Oguma de Souza Ravindra G Hunashimarad
Aman Sharma Jo Harder Markus Heinrich Shruti V Dhamale
Anton Mayers Jorge Luis Matthew R Jones Rick Bloss
Arnd Kagelmacher Justin Weldon Parveen Kumar Sam Jacobs
Contributors & Marks

Dave Gunn Khalaf Haddad Paul Blitz Tim O’Brien

Contributors &

Ian Gutierrez Lemay Marquinez Puneet Seth Tony Zhang

Jessica Biesel Liz Jimenez Rashmi Kolipura Nagaraj Victor Fuenmayor
Marks

25
 Exam Overview

Notice Marks

Citrix® Systems, Inc. (Citrix) makes no representations or warranties with respect The following marks are service marks, trademarks, or registered trademarks of
to the content or use of this publication. Citrix specifically disclaims any their respective owners in the United States or other countries:
expressed or implied warranties, merchantability, or fitness for any particular
purpose. Citrix reserves the right to make any changes in specifications and other Mark Owner
information contained in this publication without prior notice and without
Citrix®, Citrix ADC®, HDX Insight™, Citrix Application Delivery Citrix Systems, Inc.
obligation to notify any person or entity of such revisions or changes. Management™, Citrix ADC MPX™, Citrix ADC SDX™, Citrix ADC VPX™,
TriScale Clustering™
Preparation

© Copyright 2017 Citrix Systems, Inc.

All Rights Reserved. No part of this publication may be reproduced or transmitted
in any form or by any means, electronic or mechanical, including photocopying,
recording, or information storage and retrieval systems, for any purpose other
than the purchaser’s personal use, without express written permission of:
Active Directory®, Microsoft®, SQL Server®, SQL Express™, Windows®, Microsoft Corporation
Windows Server®, Windows Server 2008™, Windows Server 2008
R2™, Windows Server 2012™, Windows Server 2012 R2™, Windows
7™, Windows 8™, Windows 10™

Citrix Systems, Inc.

Contributors & Marks

851 W. Cypress Creek Road

Ft. Lauderdale, FL 33309
Contributors &

http://www.citrix.com
Marks

26