Citrix ADC 13 Advanced Topics – Security, Management and Optimization — Question 87

A Citrix Administrator needs to configure a rate-limiting policy setting DNS requests to a threshold of 1,000 per second.

Which set of commands does the administrator need to run to correctly configure and enable this policy?

Answer options

• A. > add stream selector DNSSelector1 client.udp.dns.domain > add ns limitIdentifier DNSLimitIdentifier1 -threshold 5 -timeSlice 1000 -selectorName DNSSelector1 > add dns policy DNSLimitPolicy1 " sys.check_limit(\"DNSLimitIdentifier1\")" -preferredLocation "North America.US.TX.Dallas.. " > bind dns global DNSLimitPolicy1 5
• B. > add stream selector DNSSelector1 client.udp.dns.domain > add ns limitIdentifier DNSLimitIdentifier1 -threshold 1000 -timeSlice 1000 -selectorName DNSSelector1 > add dns policy DNSLimitPolicy1 " sys check_limit(\"DNSLimitIdentifier1\")" -preferredLocation "North America.US.TX.Dallas.. " > bind dns global DNSLimitPolicy1 5
• C. > add stream selector DNSSelector1 client.udp.dns.domain > add ns limitIdentifier DNSLimitIdentifier1 -threshold 5 -timeSlice 1000 -selectorName DNSSelector1 > add dns policy DNSLimitPolicy1 " sys.check_limit(\"DNSLimitIdentifier1\")" -preferredLocation "North America.US.TX.Dallas.. "
• D. > add stream selector DNSSelector1 client.udp.dns.domain > add ns limitIdentifier DNSLimitIdentifier1 -threshold 1000 -timeSlice 1000 -selectorName DNSSelector1 > add dns policy DNSLimitPolicy1 " sys check_limit(\"DNSLimitIdentifier1\")" -preferredLocation "North America.US.TX.Dallas.. "

Correct answer: B

Explanation

The correct answer is B because it sets the threshold to 1000, which matches the requirement of limiting DNS requests to 1,000 per second. Options A and C use a threshold of 5, which is insufficient, and while D has the correct threshold, it lacks the necessary command to bind the policy globally, making B the only complete and correct solution.