1Y0-231 · Question #119
Scenario: A Citrix Administrator configured an authentication, authorization, and auditing (AAA) policy to allow users access through the Citrix ADC. The administrator bound the policy to a specific…
The correct answer is C. ns_true. ns_true is the correct built-in Citrix ADC policy expression that evaluates to TRUE for all requests, allowing universal access - it is the Citrix-recommended (leading practice) expression for permitting all users through a virtual server. Using the raw keyword true (option A)…
Question
Scenario: A Citrix Administrator configured an authentication, authorization, and auditing (AAA) policy to allow users access through the Citrix ADC. The administrator bound the policy to a specific virtual server. Which policy expression will allow all users access through the virtual server based on leading practices?
Options
- Atrue
- Bns_false
- Cns_true
- Dfalse
How the community answered
(36 responses)- A3% (1)
- B6% (2)
- C89% (32)
- D3% (1)
Explanation
ns_true is the correct built-in Citrix ADC policy expression that evaluates to TRUE for all requests, allowing universal access - it is the Citrix-recommended (leading practice) expression for permitting all users through a virtual server. Using the raw keyword true (option A) is not a valid ADC classic or advanced policy expression syntax, making it incorrect. ns_false (option B) is the built-in expression that evaluates to FALSE, which would deny all users - the exact opposite of what is needed. false (option D) has the same problem as true: it is not a recognized ADC policy expression and would be rejected or behave unpredictably.
Memory tip: Think of the ns_ prefix as "NetScaler built-in" - Citrix ADC (formerly NetScaler) provides ns_true and ns_false as its official always-true/always-false expressions. When you need to allow everyone, reach for ns_true; when you need to block everyone, use ns_false. The bare words true/false are traps - they look right but aren't valid ADC syntax.
Topics
Community Discussion
No community discussion yet for this question.