Citrix
1Y0-240 · Question #142
Scenario: A Citrix Administrator needs to implement a Content Filter policy to ensure the following conditions are met: The user with source IP 10.100.32.211 should NOT be allowed to access the…
The correct answer is B. REQ.IP.SOURCEIP == 10.100.32.211 || REQ.IP.SOURCEIP != 10.100.32.0 -netmask. https://docs.citrix.com/en-us/citrix-adc/12-1/appexpert/responder/setting-responder-default-
Content Filtering / Security
Question
Scenario: A Citrix Administrator needs to implement a Content Filter policy to ensure the following conditions are met:
- The user with source IP 10.100.32.211 should NOT be allowed to access
the vserver 10.10.10.1.
- All other users from subnet 10.100.32.0/24 should have access to the
vserver 10.10.10.1.
- Access to the vserver should be blocked for all the other users.
Which policy expression will meet this requirement if the policy action is RESET and the policy is bound to the vserver (VIP:10.10.10.1)?
Options
- AREQ.IP.SOURCEIP != 10.100.32.211 || REQ.IP.SOURCEIP != 10.100 32.211 -netmask
- BREQ.IP.SOURCEIP == 10.100.32.211 || REQ.IP.SOURCEIP != 10.100.32.0 -netmask
- CREQ.IP.SOURCEIP != 10.100.32.211 && REQ.IP.SOURCEIP == 10.100.32.0 -netmask
- DREQ.IP.SOURCEIP == 10.100.32.211 && REQ.IP.SOURCEIP != 10.100.32.0 -netmask
How the community answered
(30 responses)- A7% (2)
- B80% (24)
- C3% (1)
- D10% (3)
Explanation
https://docs.citrix.com/en-us/citrix-adc/12-1/appexpert/responder/setting-responder-default-
Topics
#Content Filtering#policy expressions#IP-based access control#boolean logic
Community Discussion
No community discussion yet for this question.