Which two policies can a Citrix Administrator configure using only the advanced policy expression? (Choose two.)

1. A. DNS
2. B. Integrated caching
3. C. SSL
4. D. System

Correct Answer: AB
Reference: https://docs.citrix.com/en-us/citrix-adc/current-release/appexpert/policies-and-expressions/introduction-to-policies-and-exp/classic-and-advanced-policy.html

To protect an environment against Hash DoS attacks, which two configurations can a Citrix Administrator use to block all post requests that are larger than 10,000 bytes? (Choose two.)

1. A. > add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(\”POST\”)&& http.REQ.CONTENT_LENGTH.GT(10000)”> add rewrite policy drop_rewrite expr_hashdos_prevention DROP> bind rewrite global drop_rewrite 100 END –type REQ_OVERRIDE
2. B. > add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(\”POST\”)&& http.REQ.CONTENT_LENGTH.GT(10000)”> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP> bind responder global pol_resp_hashdos_prevention 70 END –type REQ_OVERRIDE
3. C. > add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(\”POST\”) || http.REQ.CONTENT_LENGTH.GT(10000)”> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP> bind responder global pol_resp_hashdos_prevention 70 END –type REQ_OVERRIDE
4. D. > add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(\”POST\”) || http.REQ.CONTENT_LENGTH.GT(10000)”> add rewrite policy drop_rewrite expr_hashdos_prevention DROP> bind rewrite global drop_rewrite 70 END –type REQ_OVERRIDE
5. E. > add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(\”POST\”) || http.REQ.CONTENT_LENGTH.GT(10000)”> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP> bind responder global pol_resp_hashdos_prevention 100 END –type REQ_OVERRIDE
6. F. > add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(\”POST\”) || http.REQ.CONTENT_LENGTH.GT(10000)”> add rewrite policy drop_rewrite expr_hashdos_prevention DROP> bind rewrite global drop_rewrite 100 END –type REQ_OVERRIDE

Correct Answer: BE
Reference: https://support.citrix.com/article/CTX131868

Scenario: A Citrix Administrator configured a responder policy as follows:
> add responder action Redirect_Act respondwith “DIAMETER.NEW_REDIRECT(”aaa://host.example.com”)”
> add responder policy Redirect_Pol “diameter.req.avp(264).value.eq(”host1.example.net”)” Redirect_Act > bind lb vServer vs1 –policyName Redirect_Pol –priority 10 –type REQUEST
What will be the effect of this configuration?

1. A. Request originated from “host1.example.net” will be redirected to “host.example.com”.
2. B. Response originated from “host1.example.net” will be redirected to “host.example.com”.
3. C. Response originated from “host.example.net” will be redirected to “host1.example.com”.
4. D. Request originated from “host.example.net” will be redirected to “host1.example.com”.

Correct Answer: A

How can a Citrix Administrator configure a rewrite policy to change the version of HTTP from 1.1 to 1.0 in every request?

1. A. >add rewrite action RW_ACT replace http.res.version “\”HTTPS/1.0\””> add rewrite policy RW_POL true RW_ACT
2. B. >add rewrite action RW_ACT replace http.req.version “\”HTTPS/1.1\””> add rewrite policy RW_POL true RW_ACT
3. C. >add rewrite action RW_ACT replace http.res.version “\”HTTPS/1.1\””> add rewrite policy RW_POL true RW_ACT
4. D. >add rewrite action RW_ACT replace http.req.version “\”HTTPS/1.0\””> add rewrite policy RW_POL true RW_ACT

Correct Answer: B

Scenario: A Citrix Administrator executed the following command in a global server load balancing (GSLB) environment:
set gslb site SiteB –triggerMonitor MEPDOWN
What will be the effect of this command on the default service monitoring behavior on a remote site?

1. A. The service monitor is invoked only when Metric Exchange Protocol (MEP) has marked the service as DOWN.
2. B. The service monitor is invoked only when Metric Exchange Protocol (MEP) connectivity has been lost between Site A and Site B.
3. C. The service monitor will take precedence over Metric Exchange Protocol (MEP).
4. D. The state of the GSLB service will always be controlled by Metric Exchange Protocol (MEP).

Correct Answer: A