1Y0-241 · Question #139
Scenario: A Citrix Administrator needs to configure a security policy so that when the users try to access the VIP from the source IP addresses below, the rewrite policy should NOT be applied…
The correct answer is D. CLIENT.IP.SRC.TYPECAST_TEXT_T.EQUALS_ANY("Admin_group").NOT. Using the dataset you defined, CLIENT.IP.SRC.TYPECAST_TEXT_T.EQUALS_ANY("Admin_group") matches only those three IPs. Appending .NOT inverts it, so the policy fires for all other clients-and therefore does not apply the rewrite for the IPs in your Admin_group.
Question
Scenario: A Citrix Administrator needs to configure a security policy so that when the users try to access the VIP from the source IP addresses below, the rewrite policy should NOT be applied.
- 10.107.149.10
- 10.107.149.39
- 10.107.149.49
The administrator created the below configurations:
add policy dataset Admin_group ipv4 > bind policy dataset Admin_group 10.107.149.10 -index 1 > bind policy dataset Admin_group 10.107.149.39 -index 2 > bind policy dataset Admin_group 10.107.149.49 -index 3 Which policy expression can the administrator use to meet this requirement?
Options
- ACLIENT.IP.SRC.TYPECAST_TEXT_T.EQUALS_ANY("Admin_group")
- BCLIENT.IP.SRC.BETWEEN(10.107.149.10,10.107.149.49)
- CCLIENT.IP.SRC.EQ(10.107.149.0)
- DCLIENT.IP.SRC.TYPECAST_TEXT_T.EQUALS_ANY("Admin_group").NOT
How the community answered
(59 responses)- A3% (2)
- B10% (6)
- C5% (3)
- D81% (48)
Explanation
Using the dataset you defined, CLIENT.IP.SRC.TYPECAST_TEXT_T.EQUALS_ANY("Admin_group") matches only those three IPs. Appending .NOT inverts it, so the policy fires for all other clients-and therefore does not apply the rewrite for the IPs in your Admin_group.
Topics
Community Discussion
No community discussion yet for this question.