To provide stricter access through Citrix ADC, a Citrix Administrator needs to create a customized block list of IP addresses to supplement the Webroot reputation check. How can the administrator…

Question

Options

• AEnable MAC-based forwarding.
• BCreate a data set for IPv4 address matching.
• CCreate a pattern set.
• DEnable USNIP mode.

• A
  6% (2)
• B
  71% (22)
• C
  16% (5)
• D
  6% (2)

Explanation

B is correct because Citrix ADC uses data sets as typed collections of values for policy matching - specifically, an IPv4 data set allows administrators to define a named list of IP addresses that can be referenced in responder or AppFirewall policies to block traffic, effectively creating a custom block list that supplements reputation-based checks like Webroot.

A (MAC-based forwarding) is a network topology feature that routes traffic based on client MAC addresses rather than routing tables - it addresses asymmetric routing, not IP reputation or blocking. C (pattern set) is used for string/text pattern matching (e.g., URLs, hostnames), not for typed IP address data; confusing pattern sets and data sets is a common mistake. D (USNIP mode) controls whether the ADC uses subnet IPs when communicating with backend servers - a completely unrelated network configuration setting.

Memory tip: Think "Data Set = Data Type" - when your list contains a specific data type like IPv4 addresses, you use a data set. Pattern sets handle text strings; data sets handle typed objects like IPs. The word "IPv4" in the answer choice is the giveaway that a typed data set is required.

No community discussion yet for this question.