1Y0-340 · Question #102
Scenario: A Citrix Engineer has configured Application Firewall and enabled it in learning mode. However, the Application Firewall database is reaching full capacity due to excessive requests. What…
The correct answer is D. Configure Trusted Learning Clients. See the full explanation below for the reasoning.
Question
Scenario: A Citrix Engineer has configured Application Firewall and enabled it in learning mode. However, the Application Firewall database is reaching full capacity due to excessive requests. What can the engineer configure to mitigate this issue?
Options
- AEnable learning only on XML based profiles.
- BIncrease NetScaler hard drive capacity.
- CConfigure caching policies.
- DConfigure Trusted Learning Clients.
How the community answered
(39 responses)- A18% (7)
- B8% (3)
- C3% (1)
- D72% (28)
Community Discussion
5D is correct. Trusted Learning Clients lets you restrict which client IPs the firewall actually learns from, so instead of logging relaxation rules for every random request hitting your site, it only processes traffic from known, trusted sources, which keeps the learning database from bloating out of control.
Right, and the exam loves to test that Trusted Learning Clients is specifically about who generates learning suggestions, not who gets blocked or allowed, so if you see an answer choice mixing it up with IP exception lists or whitelisting, that is a trap.
D is right. Configuring Trusted Learning Clients scopes the learning engine to traffic from known-good source IPs only, which cuts down the volume of requests that feed the database and prevents it from filling up with noise from untrusted or scan-generated traffic.
Caching policies reduce repeat hits to the database, C is the move.
Lena has a point about caching, but the question is specifically about reducing database load through horizontal scaling, so D is correct because adding read replicas distributes the query load across multiple database instances rather than just cutting down repeat requests.