To protect an environment against Hash DoS attacks, which two configurations can a Citrix Administrator use to block all post requests that are larger than 10,000 bytes? (Choose two.)

To protect an environment against Hash DoS attacks, which two configurations can a Citrix Administrator use to block all post requests that are larger than 10,000 bytes? (Choose two.)
A . > add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(”POST”)&& http.REQ.CONTENT_LENGTH.GT(10000)”
> add rewrite policy drop_rewrite expr_hashdos_prevention DROP
> bind rewrite global drop_rewrite 100 END Ctype REQ_OVERRIDE
B. > add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(”POST”)&& http.REQ.CONTENT_LENGTH.GT(10000)”
> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP
> bind responder global pol_resp_hashdos_prevention 70 END Ctype REQ_OVERRIDE
C. > add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(”POST”) || http.REQ.CONTENT_LENGTH.GT(10000)”
> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP
> bind responder global pol_resp_hashdos_prevention 70 END Ctype REQ_OVERRIDE
D. > add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(”POST”) || http.REQ.CONTENT_LENGTH.GT(10000)”
> add rewrite policy drop_rewrite expr_hashdos_prevention DROP
> bind rewrite global drop_rewrite 70 END Ctype REQ_OVERRIDE
E. > add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(”POST”) || http.REQ.CONTENT_LENGTH.GT(10000)”
> add responder policy pol_resp_hashdos_prevention expr_hashdos_prevention DROP NOOP
> bind responder global pol_resp_hashdos_prevention 100 END Ctype REQ_OVERRIDE
F. > add policy expression expr_hashdos_prevention “http.REQ.METHOD.EQ(”POST”) || http.REQ.CONTENT_LENGTH.GT(10000)”
> add rewrite policy drop_rewrite expr_hashdos_prevention DROP
> bind rewrite global drop_rewrite 100 END Ctype REQ_OVERRIDE

View Answer

Answer: A,B