Which policy expression blocks HTTP POST requests with content length greater than 10000 bytes?

Which policy expression blocks HTTP POST requests with content length greater than 10000 bytes?

• A. http.REQ.METHOD.EQ("GET") && http.REQ.CONTENT_LENGTH.GT(10000)
• B. http.REQ.METHOD.EQ("POST") && http.REQ.CONTENT_LENGTH.GT(10000)
• C. http.REQ.METHOD.NEQ("POST") && http.REQ.CONTENT_LENGTH.GT(10000)
• D. http.REQ.METHOD.EQ("POST") || http.REQ.CONTENT_LENGTH.GT(10000)

Answer: (B)

To block a request based on both its HTTP method and the size of its body, you combine two conditions with a logical AND. For a rule that blocks POST requests whose body is larger than 10000 bytes, you need a test that the method equals POST and that the content length is greater than 10000. The expression http.REQ.METHOD.EQ("POST") && http.REQ.CONTENT_LENGTH.GT(10000) checks both: the method is POST and the request's content length exceeds 10000. Only when both are true will the policy action apply. The other patterns either target the wrong method (GET only), apply the size check to all methods (using NOT POST with large body or using OR), or would trigger blocks for requests you didn't intend, such as any request with a large body. Therefore this expression is the correct one.

To block a request based on both its HTTP method and the size of its body, you combine two conditions with a logical AND. For a rule that blocks POST requests whose body is larger than 10000 bytes, you need a test that the method equals POST and that the content length is greater than 10000. The expression http.REQ.METHOD.EQ("POST") && http.REQ.CONTENT_LENGTH.GT(10000) checks both: the method is POST and the request's content length exceeds 10000. Only when both are true will the policy action apply. The other patterns either target the wrong method (GET only), apply the size check to all methods (using NOT POST with large body or using OR), or would trigger blocks for requests you didn't intend, such as any request with a large body. Therefore this expression is the correct one.