To restrict access to a specific load-balancing vServer for 10 minutes using an ACL, which command should be used?

To restrict access to a specific load-balancing vServer for 10 minutes using an ACL, which command should be used?

• A. add ns acl rule1 DENY -destIP 192.168.100.25 -TTL 600
• B. add simpleacl rule1 DENY -srcIP 192.168.100.25 -TTL 600000
• C. add ns acl rule1 DENY -destIP 192.168.100.25 -TTL 600000
• D. add simpleacl rule1 DENY -srcIP 192.168.100.25 -TTL 600

Answer: (A)

Blocking access to a specific vServer with an ACL relies on matching the destination resource and applying a time-bound deny. The TTL is the duration the rule remains in effect, and TTL values are in seconds, so 600 seconds equals 10 minutes. To target a single vServer, you specify its destination IP with -destIP, and you use the full ACL type that supports destination matching, which is the ns ACL. This makes the rule apply to traffic destined for that vServer and deny it for 10 minutes. Using a simple ACL would apply restrictions based on the source alone and wouldn’t specifically target the vServer, and a TTL of 600000 would correspond to far more than 10 minutes.

Blocking access to a specific vServer with an ACL relies on matching the destination resource and applying a time-bound deny. The TTL is the duration the rule remains in effect, and TTL values are in seconds, so 600 seconds equals 10 minutes. To target a single vServer, you specify its destination IP with -destIP, and you use the full ACL type that supports destination matching, which is the ns ACL. This makes the rule apply to traffic destined for that vServer and deny it for 10 minutes. Using a simple ACL would apply restrictions based on the source alone and wouldn’t specifically target the vServer, and a TTL of 600000 would correspond to far more than 10 minutes.