Citrix DaaS Advanced Configuration and Management — Question 1

Scenario: A Citrix Engineer is performing a health check of the NetScaler Web App Firewall. The engineer notes that the /var file system is nearing capacity.
What can the engineer do to reduce use of the /var file system while maintaining good security?

Answer options

• A. Disable the Learn action on all NetScaler Web App Firewall profiles.
• B. Create a syslog action to send NetScaler Web App Firewall logs to a syslog server.
• C. Create a NetScaler Web App Firewall Audit policy to redirect log file entries to a syslog server.
• D. Disable the Log action on all NetScaler Web App Firewall profiles.

Correct answer: B

Explanation

The correct answer, B, is effective because it offloads log data to a syslog server, reducing the storage burden on the /var file system while still retaining logs for security purposes. Option A and D would disable important logging functionalities and could compromise security. Option C, while it also redirects logs, does not directly address the capacity issue as effectively as option B.