Scenario: A Citrix Architect has set up Citrix ADC MPX devices in high availability mode with version 12.0.53.13 nc. These are placed behind a Cisco ASA 5505 firewall. The Cisco ASA firewall is configured to block traffic using access control lists. The network address translation (NAT) is also performed on the firewall. The following requirements were captured by the architect during the discussion held as part of the Citrix ADC security implementation project with the customer's security team: The Citrix ADC MPX device:
* should monitor the rate of traffic either on a specific virtual entity or on the device. It should be able to mitigate the attacks from a hostile client sending a flood of requests. The Citrix ADC device should be able to stop the HTTP, TOP, and DNS based requests.
* needs to protect backend servers from overloading.
* needs to queue all the incoming requests on the virtual server level instead of the service level.
* should provide access to resources on the basis of priority.
* should provide protection against well-known Windows exploits, virus-infected personal computers, centrally managed automated botnets. compromised webservers, known spammersThackers. and phishing proxies.
* should provide flexibility to enforce the desired level of security check inspections for the requests originating from a specific geolocation database.
* should block the traffic based on a predetermined header length, URL length, and cookie length.The device should ensure that characters such as a single straight quote (') backslash (): and semicolon (;) are either blocked, transformed, or dropped while being sent to the backend server.
Which security feature should the architect implement to meet these requirements?

• A. Configure HTML SQL Injection check on Application Firewall and enable Block SQLSplCharANDKeyword.
• B. Configure HTML cross-Site scripting and enable Check Request headers.
• C. Configure signatures manually and apply them to the Application Firewall profile.
• D. Configure HTML SQL injection check on Application Firewall and enable Transform SQL special characters.

Which format must a Citrix Architect utilize while importing the StyleBook in Citrix Application Delivery Management to compose the content of a StyleBook in the YAML editor?

• A. NITRO APl
• B. Raw
• C. File
• D. Bundle
• E. SGML
• F. HTML

Scenario: A Citrix Architect has configured two MPX devices in high availability mode with version 12.0.53.13 nc. After a discussion with the security teamf the architect enabled the Application Firewall feature for additional protection. In the initial deployment phase, the following security features were enabled:
* IP address reputation
* HTML SQL injection check
* Start URL
* HTML Cross-site scripting
* Form-Field consistency
After deployment in pre-production, the team identifies the following additional security features and changes as further requirements:
* Application Firewall should retain the response of form field in its memory. When a client submits the form in the next request Application Firewall should check for inconsistency in the request before sending it to the web server.
* All the requests dropped by Application Firewall should get a pre-configured HTML error page with appropriate information.
* The Application Firewall profile should be able to handle the data from an RSS feed and an ATOM-based site. Click the Exhibit button to view an excerpt of the existing configuration.

What should the architect do to meet these requirements?

• A. Modify existing profile settings, change HTML settings, and ensure to exclude uploaded files from security checks.
• B. Modify existing profile settings and disable the setting 'Enable Form Tagging'.
• C. Create a new basic profile and use pre-existing HTML settings.
• D. Modify existing profile settings and change HTML settings to use an HTML error object.

A Citrix Architect needs to configure advanced features of Citrix ADC by using StyleBooks as a resource in the Heat service.
What is the correct sequence of tasks to be completed for configuring Citrix ADC using the Heat stack?

• A. 1. Install Citrix ADC Bundle for OpenStack
  2. Deploy the Heat stack
  3. Register OpenStack with Citrix Application Delivery Management
  4. Add Citrix ADC instances (Optional)
  5. Prepare the HOT by using the Citrix ADC Heat resources and Citrix ADC Network Resource
  6. Create service packages (Add OpenStack tenants)
• B. 1. Install Citrix ADC Bundle for OpenStack
  2 Add Citrix ADC instances (Optional)
  3. Create service packages (Add OpenStack tenants)
  4. Prepare the HOT by using the Citrix ADC Heat resources and Citrix ADC Network Resource
  5. Register OpenStack with Citrix Application Delivery Management
  6. Deploy the Heat stack
• C. 1. Install Citrix ADC Bundle for OpenStack
  2 Register OpenStack with Citrix Application Delivery Management
  3. Add Citrix ADC instances (Optional)
  4. Create service packages (Add OpenStack tenants)
  5. Prepare the HOT by using the Citrix ADC Heat resources and Citrix ADC Network Resource
  6. Deploy the Heat stack
• D. 1. Install NetScaler Bundle for OpenStack
  2. Prepare the HOT by using the NetScaler heat resources and NetScaler Network Resource
  3. Register OpenStack with NMAS
  4. Deploy the Heat stack
  5. Add NetScaler instances (Optional)
  6. Create service packages (Add OpenStack tenants)

Scenario: A Citrix Architect needs to design a hybrid Citrix Virtual App and Citrix Virtual Desktop environment which will include Citrix Cloud as well as resource locations in on-premises datacenter and Microsoft Azure.
Organizational details and requirements are as follows:
Active Citrix Virtual App and Citrix Virtual Desktop Service subscription No existing NetScaler deployment About 3,000 remote users are expected to regularly access the environment Multi-factor authentication should be used for all external connections Solution must provide load balancing for backend application servers Load-balancing services must be in Location B Click the Exhibit button to view the conceptual environment architecture.

The architect should use ________ in Location A, and should use _________ in Location B. (Choose the correct option to complete the sentence.)

• A. No Citrix products, Citrix ICA Proxy (cloud-licensed)
• B. Citrix Gateway as a Service, Citrix ICA Proxy (cloud-licensed)
• C. No Citrix products; Citrix Gateway appliance
• D. Citrix Gateway as a Service, Citrix ADC (BYO)
• E. No Citrix products, Citrix ADC (BYO)
• F. Citrix Gateway as a Service, no Ctrix products