Scenario: A Citrix Administrator has configured the Citrix ADC as a DNS Proxy Server. The administrator executed the commands in the screenshot on the Citrix ADC using the command- line interface…

Question

Exhibit

Options

• ACreate a DNS Request with TC bit set and rcode as NOERROR
• BCreate a DNS Response with TC bit set and rcode as NOERROR
• CSet TC bit and rcode as NOERROR in the DNS Request from Client
• DSet TC bit and rcode as NOERROR in the DNS Response from DNS server

• A
  7% (2)
• B
  75% (21)
• C
  14% (4)
• D
  4% (1)

Explanation

The commands in the screenshot create a responder action and policy that modify the DNS response from the Citrix ADC to the client. The responder action uses the DNS.NEW_RESPONSE function, which creates a new DNS response with the specified parameters. The first parameter is true, which means the response will have the TC (truncated) bit set. The second parameter is true, which means the response will have the AA (authoritative answer) bit set. The third parameter is NOERROR, which means the response will have the rcode (response code) set to NOERROR. The responder policy matches the DNS requests that use UDP as the transport protocol and applies the responder action to them. Therefore, the effect of this configuration is to create a DNS response with TC bit set and rcode as NOERROR for UDP requests. This can be used to prevent DNS amplification attacks by limiting the size of the

No community discussion yet for this question.