nerdexam
Citrix

1Y0-231 · Question #166

Which Citrix ADC Access Control List (ACL) command can a Citrix Administrator use to bridge traffic originating from the IP address 192.168.10.200?

The correct answer is B. add ns acl. add ns acl (option B) is correct because it creates an extended IPv4 ACL that supports the BRIDGE action, allowing traffic from a specified source IP (like 192.168.10.200) to be bridged rather than routed or dropped. Why the distractors are wrong: A (add ns acl6) handles IPv6…

ADC Platforms

Question

Which Citrix ADC Access Control List (ACL) command can a Citrix Administrator use to bridge traffic originating from the IP address 192.168.10.200?

Options

  • Aadd ns acl6
  • Badd ns acl
  • Cadd ns simpleacl6
  • Dadd ns simpleacl

How the community answered

(20 responses)
  • B
    90% (18)
  • C
    5% (1)
  • D
    5% (1)

Explanation

add ns acl (option B) is correct because it creates an extended IPv4 ACL that supports the BRIDGE action, allowing traffic from a specified source IP (like 192.168.10.200) to be bridged rather than routed or dropped.

Why the distractors are wrong:

  • A (add ns acl6) handles IPv6 traffic - 192.168.10.200 is an IPv4 address, so this command is the wrong IP version.
  • C (add ns simpleacl6) is again IPv6-specific, and Simple ACLs only support the DENY action - bridging is not available.
  • D (add ns simpleacl) is IPv4 but still limited to DENY-only - Simple ACLs lack support for ALLOW or BRIDGE actions.

Memory tip: Think of it as two axes - IP version (4 vs. 6) and complexity (simple = DENY only, extended = full actions). Any question involving BRIDGE, ALLOW, or redirect actions points to the extended (ns acl) command; any IPv4 address eliminates the acl6 variants.

Topics

#Access Control Lists#ADC Commands#IPv4 Traffic Filtering#Traffic Management

Community Discussion

No community discussion yet for this question.

Full 1Y0-231 Practice