Citrix Endpoint Management Administration — Question 13

Scenario: A Citrix Engineer wants to protect a web application using Citrix Web App Firewall. The engineer enables the Learn action for the Start URL, HTML, Cross-Site Scripting, and HTML SQL Injection protections. The engineer assigns this profile to a policy, which is then bound to the virtual server.
Which two items can the engineer check to determine that the Learn action is NOT capturing any rules? (Choose two.)

Answer options

• A. The HTML Error Object is configured for the profile.
• B. Enough space is left on the /flash file system.
• C. The aslearn process is running on the Citrix ADC appliance.
• D. The Learn database is less than 20 MB.

Correct answer: C, D

Explanation

The correct answers are C and D because if the aslearn process is not running, the Learn action cannot capture rules, indicating a failure in the learning process. Additionally, if the Learn database is less than 20 MB, it suggests that the learning has not recorded enough data, which could also prevent effective rule capture. Options A and B do not directly relate to the Learn action's ability to capture rules.