A Citrix Administrator needs to block access to multiple URLs for security reasons. Which configuration should the administrator use to accomplish this requirement?
A.
add policy patset BAD_URL bind policy patset BAD_URL badurl1.mylab.lab index 11 charset ASCll bind policy patset BAD_URL badurl2.mylab.lab index 10 charset ASCll add responder policy BAD_URL_DNS "DNS.REQ.QUESTION.DOMAIN.CONTAINS(\ "BAD_URL\")" DROP bind responder global BAD_URL_DNS 100 END type DNS_REQ_OVERRIDE
B.
add policy patset BAD_URL bind policy patset BAD_URL badurl1.mylab.lab index 11 charset ASCll bind policy patset BAD_URL badurl2.mylab.lab index 10 charset ASCll add responder policy BAD_URL_DNS "DNS.REQ.QUESTION.DOMAIN.CONTAINS_ANY(\ "BAD_URL\")" RESET bind responder global BAD_URL_DNS 100 END type DNS_REQ_OVERRIDE
C.
bind policy patset BAD_URL badurl1.mylab index 11 charset ASCll bind policy patset BAD_URL badurl2.mylab,lab index 10 charset ASCll add responder policy BAD_URL_DNS "DNS.REQ.QUESTION.DOMAIN.CONTAINS(\ "BAD_URL\")" RESET bind responder global BAD_URL_DNS 100 END type DNS_REQ
D.
add policy patset BAD_URL bind policy patset BAD_URL badurl1.mylab.lab index 11 charset ASCll bind policy patset BAD_URL badurl2.mylab.lab index 10 charset ASCll add responder policy BAD_URL_DNS "DNS.REQ.QUESTION.DOMAIN.CONTAINS(\ "BAD_URL\")" RESET
A. this is more suited answer.
DROP. If the undefined action is set to DROP, the appliance silently drops the request without responding to the client in any way. This action is appropriate for requests that appear to be part of a DDoS attack or other sustained attack on your servers.
B is wright. "CONTAINS" is not, only "CONTAINS_ANY" https://developer-docs.citrix.com/projects/netscaler-advanced-policy-expression-reference/en/12.0/dns_domainname_t/dns_domainname_t/
upvoted 2 times
...
...
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
aims123456
3 years, 4 months agoGTJ
4 years, 7 months agoRVR
4 years, 6 months agodovoo
4 years ago