Scenario: A Citrix Administrator suspects an attack on a load balancing virtual server. The administrator needs to restrict access to the load balancing virtual server (192.168.100.25) for 10…

The correct answer is B. add ns acl rule1 DENY -destIP 192.168.100.25 -TTL 600. The correct syntax for adding a simple ACL rule is: add simpleacl <aclname> <ALLOW | DENY> -srcIP <IPAddress> [-destIP <IPAddress>] [-TTL <timeInSeconds>] The correct syntax for adding an extended ACL rule is: add ns acl <aclname> <ALLOW | DENY> -srcIP <IPAddress> [-destIP…

High Availability and Load Balancing

Question

Scenario: A Citrix Administrator suspects an attack on a load balancing virtual server. The administrator needs to restrict access to the load balancing virtual server (192.168.100.25) for 10 minutes. Which Access Control List (ACL) will help to accomplish this requirement?

Options

Aadd simpleacl rule1 DENY -srcIP 192.168.100.25-TTL 600
Badd ns acl rule1 DENY -destIP 192.168.100.25 -TTL 600
Cadd simpleacl rule1 DENY -srcIP 192.168.100.25 -TTL 600000
Dadd ns acl rule1 DENY -destIP 192.168.100.25 -TTL 600000

How the community answered

(35 responses)

A
11% (4)
B
77% (27)
C
9% (3)
D
3% (1)

Explanation

The correct syntax for adding a simple ACL rule is: add simpleacl <aclname> <ALLOW | DENY> -srcIP <IPAddress> [-destIP <IPAddress>] [-TTL <timeInSeconds>] The correct syntax for adding an extended ACL rule is: add ns acl <aclname> <ALLOW | DENY> -srcIP <IPAddress> [-destIP <IPAddress>] [-TTL <timeInSeconds>] Therefore, the correct answer is B, because it uses the extended ACL rule format and specifies the destination IP address of the load balancing virtual server (192.168.100.25) and the TTL value of 10 minutes (600 seconds).

Topics

#ACL#load balancing security#TTL units#destIP filtering

Community Discussion

No community discussion yet for this question.

Full 1Y0-204 Practice