Citrix ADC 13 Advanced Topics – Security, Management and Optimization — Question 5

Scenario: A Citrix Administrator executed the following commands on the Citrix ADC:
> add policy dataset Admin_group ipv4
> bind policy dataset Admin_group 192.168.149.10 -index 11
> bind policy dataset Admin_group 192.168.149.39 -index 12
> bind policy dataset Admin_group 192.168.149.49 -index 13
> add responder policy POL_1 `!(CLIENT.IP.SRC.TYPECAST_TEXT_T.CONTAINS_ANY(\`Admin_group\`))` RESET
> bind lb vServer lb_vsrv_www -policyName POL_1 -priority 100 -gotoPriorityExpression END -type REQUEST
What will be the effect of these commands?

Answer options

• A. Only users with a source IP address of 192.168.149.10, 192.168.149.39, or 192.168.149.49 will be allowed to connect to vServer lb_vsrv_www.
• B. Only users with a source IP address of 192.168.149.10, 192.168.149.39, or 192.168.149.49 will be blocked when attempting to connect to vServer lb_vsrv_www.
• C. Only users with a source IP address of 192.168.149.10 or 192.168.149.39 will be allowed to connect to vServer lb_vsrv_www.
• D. All traffic from users with a source IP address of 192.168.149.10, 192.168.149.39, or 192.168.149.49 will be blocked through the Citrix ADC.

Correct answer: A

Explanation

The correct answer is A because the responder policy defined with the condition `!(CLIENT.IP.SRC.TYPECAST_TEXT_T.CONTAINS_ANY('Admin_group'))` allows connections from the specified IP addresses. Options B and D are incorrect as they suggest blocking traffic from those IPs, while option C is incorrect because it excludes 192.168.149.49 from being allowed.