In a responder policy, the expression '!(CLIENT.IP.SRC.TYPECAST_TEXT_T.CONTAINS_ANY("Admin_group"))' RESET applied to a load-balanced vServer will primarily cause what behavior?

In a responder policy, the expression '!(CLIENT.IP.SRC.TYPECAST_TEXT_T.CONTAINS_ANY("Admin_group"))' RESET applied to a load-balanced vServer will primarily cause what behavior?

• A. It will allow only admin-group IPs to pass.
• B. It will block requests from clients whose IPs are not in the Admin_group dataset.
• C. It will apply the policy only to responses, not requests.
• D. It will log non-admin access attempts without blocking.

Answer: (B)

The expression is checking if the client’s source IP is listed in the Admin_group dataset, and then negating that result. CLIENT.IP.SRC gives the client IP, TYPECAST_TEXT_T converts it to text so the string-dataset check can run, and CONTAINS_ANY("Admin_group") returns true when the IP is in Admin_group. The NOT operator flips that, so the policy is considered true for any non-admin IP. With the action set to RESET, that true condition causes the server to terminate the connection for that request. So non-admin clients get blocked (their connection is reset), while admin-group IPs pass through.

The expression is checking if the client’s source IP is listed in the Admin_group dataset, and then negating that result. CLIENT.IP.SRC gives the client IP, TYPECAST_TEXT_T converts it to text so the string-dataset check can run, and CONTAINS_ANY("Admin_group") returns true when the IP is in Admin_group. The NOT operator flips that, so the policy is considered true for any non-admin IP. With the action set to RESET, that true condition causes the server to terminate the connection for that request. So non-admin clients get blocked (their connection is reset), while admin-group IPs pass through.