Scenario: A Citrix Engineer is notified that improper requests are reacting the web application. While investigating, the engineer notices that the Citrix Web App Firewall policy has zero hits.
What are two possible causes for this within the Citrix Web App Firewall policy? (Choose two.)
One possible cause is that the expression is incorrect. If the policy's expression is not correctly formulated, it won't match any real traffic, resulting in zero hits. Another possible cause is that the policy is not bound to the virtual server. For any policy to take effect, it must be properly bound; otherwise, it will not be applied to any traffic, and therefore no hits will be registered.
A and C
A. The expression is incorrect: If the policy expression does not correctly identify the traffic it is supposed to catch, then it will not trigger when that traffic is encountered. This is a common reason for a policy to have zero hits, indicating that the policy logic does not match the nature of the traffic. C. It is NOT bound to the virtual server: For a Web App Firewall policy to be evaluated, it must be bound to the virtual server handling the traffic for the web application. If it is not bound, the policy will not be applied, and no hits will be registered regardless of the traffic.