exam questions

Exam 1Y0-231 All Questions

View all questions & answers for the 1Y0-231 exam

Exam 1Y0-231 topic 1 question 33 discussion

Actual exam question from Citrix's 1Y0-231
Question #: 33
Topic #: 1
[All 1Y0-231 Questions]

A Citrix Administrator needs to configure a Citrix Gateway virtual IP to allow incoming connections initiated exclusively from web browser sessions.
Which advanced policy will accomplish this?

  • A. REQ.HTTP.HEADER User-Agent NOTCONTAINS CitrixReceiver
  • B. REQ.HTTP.HEADER User-Agent CONTAINS Chrome/78.0.3904.108 Safari/537.36
  • C. HTTP.REQ.HEADER(“User-Agent”).CONTAINS(“Mozilla”)
  • D. HTTP.REQ.HEADER(“User-Agent”).CONTAINS(“CitrixReceiver”)
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Cole41
1 month, 1 week ago
Selected Answer: A
Citrix Gateway (formerly NetScaler Gateway) uses advanced policy expressions to control access based on request attributes like HTTP headers. The User-Agent header in HTTP requests identifies the client. The native Citrix Workspace app (formerly Receiver) includes "CitrixReceiver" in its User-Agent string (e.g., "CitrixReceiver/VersionInfo"), while standard web browsers (e.g., Chrome, Firefox, Safari) typically use strings like "Mozilla/5.0" followed by browser-specific details but not "CitrixReceiver". To restrict incoming connections to only web browser sessions (excluding Citrix Workspace app clients), bind an advanced policy expression that checks for the absence of "CitrixReceiver" in the User-Agent. This can be applied to a responder policy, authentication profile, or session policy on the Gateway VIP to either allow or deny based on the match.
upvoted 1 times
...
4f6bb17
1 year, 9 months ago
Selected Answer: C
NotContains Cirix Receiver, means no CitrixReceiver but there is Android, iOS and so on. Specific Browser types doesn't mean ALL browsers. As a matter of fact, all browser send as user-agent Mozilla! Mozilla/5.0 is the general token that says that the browser is Mozilla-compatible. For historical reasons, almost every browser today sends it. https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/User-Agent
upvoted 3 times
yromem
1 year, 5 months ago
I might be wrong but eben of you are right the command http.req.header is wrong it should be req.http.header so cant be c and should be a?
upvoted 2 times
...
...
sailorsoul
3 years ago
Selected Answer: A
Confirm A https://help.duo.com/s/article/7524?language=en_US
upvoted 1 times
...
Vik84
3 years ago
Selected Answer: A
More likely to be "A", not fully compliant with citrix options provided here https://docs.citrix.com/en-us/citrix-gateway/current-release/storefront-integration/ng-clg-session-policies-overview-con.html
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...