nerdexam
Citrix

1Y0-240 · Question #129

Which two configurations can a Citrix Administrator use to block all the post requests that are larger than 10,000 bytes in order to protect the environment against HashDoS attacks? (Choose two.)

The correct answer is A. add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\") && B. add policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ(\"POST\") &&. It should be AB as BG given multiple choices. Because C is with OR logic (||) it causes every POST requests are dropped. AND logic (&&) choices should be the right answers.

Security / Application Firewall

Question

Which two configurations can a Citrix Administrator use to block all the post requests that are larger than 10,000 bytes in order to protect the environment against HashDoS attacks? (Choose two.)

Options

  • Aadd policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ("POST") &&
  • Badd policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ("POST") &&
  • Cadd policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ("POST") ||
  • Dadd policy expression expr_hashdos_prevention "http.REQ.METHOD.EQ("POST") ||

How the community answered

(25 responses)
  • A
    76% (19)
  • C
    16% (4)
  • D
    8% (2)

Explanation

It should be AB as BG given multiple choices. Because C is with OR logic (||) it causes every POST requests are dropped. AND logic (&&) choices should be the right answers.

Topics

#policy expressions#HashDoS prevention#HTTP POST filtering#Application Firewall

Community Discussion

No community discussion yet for this question.

Full 1Y0-240 Practice