Which NS ACL command would deny access to a specific destination IP for 10 minutes?

Which NS ACL command would deny access to a specific destination IP for 10 minutes?

• A. add ns acl rule1 DENY 'destIP 192.168.100.25' TTL 600000
• B. add ns acl rule1 DENY 'destIP 192.168.100.25' TTL 600
• C. add ns acl rule1 DENY 'destIP 192.168.100.25' TTL 6000000
• D. add simpleacl rule1 DENY 'destIP 192.168.100.25' TTL 600000

Answer: (A)

TTL-based duration for an NS ACL rule is specified in milliseconds, so to deny access to a single destination IP for 10 minutes you need a TTL of 600,000 ms. The command that exactly uses this duration and proper NS ACL syntax is the one that adds the ACL rule with TTL 600000, applying the denial to the specified destination IP for ten minutes. The other options don’t fit because 600 translates to six-tenths of a second in milliseconds, which is far too short for a 10-minute block; 6,000,000 ms would last about 100 minutes, not 10; and using a different form like simpleacl is not the correct NS ACL construct for this time-bound rule.

TTL-based duration for an NS ACL rule is specified in milliseconds, so to deny access to a single destination IP for 10 minutes you need a TTL of 600,000 ms. The command that exactly uses this duration and proper NS ACL syntax is the one that adds the ACL rule with TTL 600000, applying the denial to the specified destination IP for ten minutes. The other options don’t fit because 600 translates to six-tenths of a second in milliseconds, which is far too short for a 10-minute block; 6,000,000 ms would last about 100 minutes, not 10; and using a different form like simpleacl is not the correct NS ACL construct for this time-bound rule.