Exam 1Y0-341 topic 1 question 37 discussion

Should be B

B. CLIENT.IP.SRC.IPREP_THREAT_CATEGORY(BOTNETS) This is because botnets are commonly used to perform DDoS attacks, and selecting this category would help in creating a policy that focuses on preventing traffic that is likely to be part of such an attack. If a more specific category related to DDoS attacks is available in the actual Citrix system, that would be the ideal choice.

The correct answer should be DOS but its not here. The closest thing is probably botnet. Another crappy question.

I agree, but would go for B (botnets) unless DOS is not listed

Correct answer doesn't seem to be in the list, the most appropriate here would be CLIENT.IP.SRC.IPREP_THREAT_CATEGORY(DOS) - see https://docs.citrix.com/en-us/citrix-adc/13/reputation/ip-reputation.html