MENU
Scenario: A Citrix Administrator suspects an attack on a load-balancing vServer (IP address 192.168.100.25).
The administrator needs to restrict access to this vServer for 10 minutes.
Which Access Control List (ACL) will accomplish this?
Suggested Answer: D
Get Premium 1Y0-241 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
https://docs.citrix.com/en-us/citrix-adc/current-release/networking/access-control-lists-acls/extended-acls-and-extended-acl6s.html
By binding a multiple SAN certificate, we only need to adapt the DNS entries of the websites to point to the same IP (1 IP with 3 DNS) and we will be able to forward the requests to any backend server since all of them are serving the same content.
28 comments · newest first
AN
Anjelica
D is also valid, but B is more straightforward.
VA
Vallie
5 days ago
But what about option D? It uses destIP.
TH
Thea
10 days ago
I agree, B is clear and concise.
HU
Huey
15 days ago
Option B seems right. 600 seconds is 10 minutes.
SI
Simona
21 days ago
I feel like it's about timing.
LU
Lucina
26 days ago
This question is tricky.
SA
Santos
1 month ago
Same here. Let’s hope for the best!
SI
Silvana
1 month ago
I’m confident in B!
PH
Phyliss
1 month ago
So B it is then?
VI
Vilma
2 months ago
Definitely, it’s about srcIP, not destIP.
SA
Santos
2 months ago
D seems wrong too.
SI
Silvana
2 months ago
True, A is misleading with that long TTL.
PH
Phyliss
2 months ago
I feel like A could confuse some.
VI
Vilma
2 months ago
Yeah, 10 minutes is 600 seconds.
SA
Santos
2 months ago
But isn't 600000 too long?
SI
Silvana
3 months ago
It sets the TTL to 600 seconds, right?
PH
Phyliss
3 months ago
Why B?
SI
Silvana
3 months ago
I think option B is correct.
VI
Vilma
3 months ago
This question is tricky.
KE
Kerrie
3 months ago
I’m not convinced, why not just block it longer?
JE
Jess
3 months ago
Totally agree with B, it's straightforward!
MA
Mariann
4 months ago
Wait, are we sure about the TTL values?
PA
Pamella
4 months ago
I think D is better since it uses destIP.
DE
Deeanna
4 months ago
Option B is the right choice, 600 seconds is 10 minutes.
DE
Dean
4 months ago
I feel like option B could be correct since it uses seconds, but I can't recall if the TTL should be longer or shorter.
LA
Lavina
6 months ago
I might be mixing up the syntax, but I think the "add ns acl" command is the right format for this kind of restriction.
LO
Louann
6 months ago
I remember practicing with ACLs, and I feel like the destination IP is what we need to focus on for this scenario.
MA
Magnolia
6 months ago
I think the TTL value is important here, but I'm not sure if it should be in milliseconds or seconds.