Correct Answer: D.

Short Explanation with reference:

A rewrite policy is a set of rules that defines how the Citrix ADC appliance modifies the requests and responses that it processes. A rewrite policy consists of an expression that evaluates to true or false, and an action that specifies what modification to perform. A rewrite action can use the replace_all function to replace all occurrences of a pattern in a string with another string.

In an SSL offload deployment, the Citrix ADC appliance terminates the SSL traffic from the clients and forwards the clear text traffic to the servers. This can cause a problem if the response body from the servers contains URLs that start with “http://”, as they will not match the protocol of the original request, which was “https://”. To fix this problem, the administrator can use a rewrite policy to modify all URLs in the response body from “http://” to “https://”.

The correct policy for this task is D, as it uses the replace_all function to replace all occurrences of “http://” with “https://” in the HTTP response body. The other policies are incorrect, as they either use the wrong pattern or the wrong replacement string. For example, policy A replaces “https://” with “http://”, which is the opposite of what is required. Policy B uses an incorrect escape character (“ " ) before the colon (”:“) in both the pattern and the replacement string. Policy C uses a space (” “) instead of a colon (”: " ) in the replacement string.

Configuring rewrite actions | NetScaler

destPort TCP or UDP port to which to send the probe. If the parameter is set to 0, the port number of the service to which the monitor is bound is considered the destination port. For a monitor of type USER, however, the destination port is the port number that is included in the HTTP request sent to the dispatcher. Does not apply to monitors of type PING.

https://docs.citrix.com/en-us/citrix-adc/current-release/global-server-load-balancing/methods/dynamic-round-trip-time-method.html

https://support.citrix.com/article/CTX101990

Correct Answer: D. CLIENT.IP.SRC IN_SUBNET(10.107.149.0/24) & & (client.UDP.DSTPORT.EQ(53) || client.TCP.DSTPORT.EQ(53))

Short Explanation with reference:

An expression is a logical statement that evaluates to true or false, and can be used to match the required traffic for various purposes, such as filtering, rewriting, or load balancing. An expression can use different operators, functions, and values to specify the criteria for matching the traffic. Some of the common elements of an expression are:

CLIENT.IP.SRC: This function returns the source IP address of the client request.

IN_SUBNET: This operator checks whether an IP address belongs to a specified subnet.

& & : This operator performs a logical AND operation between two expressions.

||: This operator performs a logical OR operation between two expressions.

client.UDP.DSTPORT and client.TCP.DSTPORT: These functions return the destination port of the client request for UDP and TCP protocols, respectively.

EQ: This operator checks whether two values are equal.

In this scenario, the administrator needs to block all DNS requests from subnet 10.107.149.0/24. DNS requests are typically sent over UDP or TCP protocols, and use port 53 as the destination port. Therefore, the expression that can match this traffic is:

CLIENT.IP.SRC IN_SUBNET(10.107.149.0/24) & & (client.UDP.DSTPORT.EQ(53) || client.TCP.DSTPORT.EQ(53))

This expression evaluates to true if the source IP address of the client request is in the subnet 10.107.149.0/24, and the destination port of the client request is 53 for either UDP or TCP protocol.

The other options are incorrect, as they either use the wrong function, operator, or syntax for matching the traffic. For example, option A uses the SRC function instead of the IN_SUBNET operator, which will only match a single IP address instead of a subnet. Option B uses an incorrect delimiter (space) between the subnet address and mask, which will cause a syntax error. Option C uses parentheses incorrectly, which will change the order of evaluation and result in a different meaning.

Configuring expressions | NetScaler : How to Configure an Expression to Filter Traffic - Citrix Customer Support : How to Use Operators in Expressions - Citrix Customer Support