Scenario: A Citrix Administrator suspects an attack on a load-balancing vServer (IP address 192.168.100.25). The administrator needs to restrict access to this vServer for 10 minutes. Which Access…

The correct answer is D. add ns acl rule1 DENY -destIP 192.168.100.25 -TTL 600. By binding a multiple SAN certificate, we only need to adapt the DNS entries of the websites to point to the same IP (1 IP with 3 DNS) and we will be able to forward the requests to any backend server since all of them are serving the same content…

Basic Networking

Question

Scenario: A Citrix Administrator suspects an attack on a load-balancing vServer (IP address 192.168.100.25). The administrator needs to restrict access to this vServer for 10 minutes. Which Access Control List (ACL) will accomplish this?

Options

Aadd simpleacl rule1 DENY -srcIP 192.168.100.25 -TTL 600000
Badd simpleacl rule1 DENY -srcIP 192.168.100.25 -TTL 600
Cadd ns acl rule1 DENY -destIP 192.168.100.25 -TTL 600000
Dadd ns acl rule1 DENY -destIP 192.168.100.25 -TTL 600

How the community answered

(19 responses)

A
11% (2)
B
5% (1)
D
84% (16)

Explanation

By binding a multiple SAN certificate, we only need to adapt the DNS entries of the websites to point to the same IP (1 IP with 3 DNS) and we will be able to forward the requests to any backend server since all of them are serving the same content. https://docs.citrix.com/en-us/citrix-adc/current-release/networking/access-control-lists- acls/extended-acls-and-extended-acl6s.html

Topics

#ACL#simpleacl vs ns acl#TTL units#destIP vs srcIP

Community Discussion

No community discussion yet for this question.

Full 1Y0-241 Practice