A Citrix Administrator needs to block all the DNS requests from subnet 10.107.149.0/24. Which expression can the administrator use to match the required traffic?

The correct answer is B. CLIENT.IP.SRC.IN_SUBNET(10.107.149.0/24)&& (client UDP.DSTPORT.EQ(53) || client. The expression B matches the required traffic because it uses the IN_SUBNET function to check if the source IP address belongs to the subnet 10.107.149.0/24, and it uses parentheses to group the logical OR condition for the destination port being either UDP or TCP 53.

Citrix Gateway

Question

Options

ACLIENT.IP.SRC.IN_SUBNET(10.107.149.0/24)&& client UDP.DSTPORT.EQ(53) || client.
BCLIENT.IP.SRC.IN_SUBNET(10.107.149.0/24)&& (client UDP.DSTPORT.EQ(53) || client.
CCLIENT.IP.SRC(10.107.149.0) && (client.UDP.DSTPORT.EQ(53) || client.
DCLIENT.IP.SRC(10.107.149.0) && client.UDP.DSTPORT.EQ(53) || client.

How the community answered

(29 responses)

A
7% (2)
B
79% (23)
C
10% (3)
D
3% (1)

Explanation

The expression B matches the required traffic because it uses the IN_SUBNET function to check if the source IP address belongs to the subnet 10.107.149.0/24, and it uses parentheses to group the logical OR condition for the destination port being either UDP or TCP 53.

Topics

#policy expressions#ACL#subnet filtering#DNS blocking

Community Discussion

No community discussion yet for this question.

Full 1Y0-204 Practice