An administrator wants to restrict access to a load-balancing virtual server (192.168.100.25) for 10 minutes using an ACL. Which command best accomplishes this?

• A. add simpleacl rule1 DENY- srcIP 192.168.100.25- TTL 600
• B. add ns acl rule1 DENY -destIP 192.168.100.25- TTL 600000
• C. add ns acl rule1 DENY -destIP 192.168.100.25- TTL 600
• D. add simpleacl rule1 DENY- srcIP 192.168.100.25- TTL 600000

Answer: (A)

The scenario is about temporarily blocking access to a virtual server for a fixed short duration, which is best done with a time-limited ACL on a simple level. A TTL of 600 seconds equals 10 minutes, so choosing a deny rule that lasts for 600 seconds exactly matches the requirement. Using a simple ACL keeps the configuration straightforward: you deny traffic from a specific source IP for a set TTL, then the entry automatically expires after 10 minutes without extra cleanup. The other approaches either set a TTL that’s far too long (600000 seconds), or try to block by destination IP (which is more complex and not needed for a simple short-term block), whereas a simple ACL with a 10-minute TTL provides the quickest, most focused control for this need.