Scenario: A Citrix Engineer configures Citrix Web App Firewall to protect an application. Upon reviewing the log files, the engineer notices a pattern of forceful browsing toward the configuration page for the application. To protect against this, the engineer enforces Start URL and enables Enforce URL Closure. What is the effect of enforcing Start URL and enabling Enforce URL Closure on the application?
A) Access to the path /config.aspx is unblocked when a user clicks a referring link elsewhere on the website.
B) Non-administrative users are blocked from the path /config.aspx. Administrative users are permitted to the path /config.aspx.
C) External users are blocked from the path /config.aspx. Internal users are permitted to the path /config.aspx.
D) Access to the path /config.aspx is blocked.

Question

Quizplus · Accepted Answer

Enforcing Start URL and enabling Enforce URL Closure ensures that only URLs starting from a specified point are accessible, blocking direct access to sensitive paths like /config.aspx.

Scenario: a Citrix Engineer Configures Citrix Web App Firewall to Protect