Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Citrix 1Y0-241 Exam - Topic 11 Question 112 Discussion

Scenario: A Citrix Administrator suspects an attack on a load-balancing vServer (IP address 192.168.100.25).The administrator needs to restrict access to this vServer for 10 minutes.Which Access Control List (ACL) will accomplish this?
D) add ns acl rule1 DENY --destIP 192.168.100.25 --TTL 600
A) add simpleacl rule1 DENY --srcIP 192.168.100.25 --TTL 600000
B) add simpleacl rule1 DENY --srcIP 192.168.100.25 --TTL 600
C) add ns acl rule1 DENY --destIP 192.168.100.25 --TTL 600000

Citrix 1Y0-241 Exam - Topic 11 Question 112 Discussion

Actual exam question for Citrix's 1Y0-241 exam
Question #: 112
Topic #: 11
[All 1Y0-241 Questions]

Scenario: A Citrix Administrator suspects an attack on a load-balancing vServer (IP address 192.168.100.25).

The administrator needs to restrict access to this vServer for 10 minutes.

Which Access Control List (ACL) will accomplish this?

Show Suggested Answer Hide Answer
Suggested Answer: D

https://docs.citrix.com/en-us/citrix-adc/current-release/networking/access-control-lists-acls/extended-acls-and-extended-acl6s.html

By binding a multiple SAN certificate, we only need to adapt the DNS entries of the websites to point to the same IP (1 IP with 3 DNS) and we will be able to forward the requests to any backend server since all of them are serving the same content.


by Karan at May 01, 2026, 09:57 PM

Limited Time Offer

25%

Off

Get Premium 1Y0-241 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Vilma
1 day ago
Definitely, it’s about srcIP, not destIP.
upvoted 0 times
...
Santos
6 days ago
D seems wrong too.
upvoted 0 times
...
Silvana
12 days ago
True, A is misleading with that long TTL.
upvoted 0 times
...
Phyliss
17 days ago
I feel like A could confuse some.
upvoted 0 times
...
Vilma
22 days ago
Yeah, 10 minutes is 600 seconds.
upvoted 0 times
...
Santos
27 days ago
But isn't 600000 too long?
upvoted 0 times
...
Silvana
1 month ago
It sets the TTL to 600 seconds, right?
upvoted 0 times
...
Phyliss
1 month ago
Why B?
upvoted 0 times
...
Silvana
1 month ago
I think option B is correct.
upvoted 0 times
...
Vilma
2 months ago
This question is tricky.
upvoted 0 times
...
Kerrie
2 months ago
I’m not convinced, why not just block it longer?
upvoted 0 times
...
Jess
2 months ago
Totally agree with B, it's straightforward!
upvoted 0 times
...
Mariann
2 months ago
Wait, are we sure about the TTL values?
upvoted 0 times
...
Pamella
2 months ago
I think D is better since it uses destIP.
upvoted 0 times
...
Deeanna
2 months ago
Option B is the right choice, 600 seconds is 10 minutes.
upvoted 0 times
...
Dean
3 months ago
I feel like option B could be correct since it uses seconds, but I can't recall if the TTL should be longer or shorter.
upvoted 0 times
...
Lavina
4 months ago
I might be mixing up the syntax, but I think the "add ns acl" command is the right format for this kind of restriction.
upvoted 0 times
...
Louann
4 months ago
I remember practicing with ACLs, and I feel like the destination IP is what we need to focus on for this scenario.
upvoted 0 times
...
Magnolia
5 months ago
I think the TTL value is important here, but I'm not sure if it should be in milliseconds or seconds.
upvoted 0 times
...

Save Cancel