Citrix Endpoint Management Administration — Question 18

Scenario: During application troubleshooting, a Citrix Engineer notices that response traffic received from a protected web application is NOT matching what the web server is sending out. The engineer is concerned that someone is trying to disrupt caching behavior.
Which action is the Citrix Web App Firewall performing that would trigger this false positive?

Answer options

• A. Removing the Last-Modified header
• B. Inserting a hidden form field
• C. Removing the Accept-Encoding header
• D. Modifying and adding cookies in the response

Correct answer: A

Explanation

The correct answer is A, as removing the Last-Modified header can lead to discrepancies in caching behavior, causing the response not to align with the server's output. The other options, while they may alter the response, do not directly affect the fundamental caching mechanisms that rely on the Last-Modified header.