Practice question

As a hardening step, an administrator wants management access (GUI/SSH) reachable only from the NSIP and a specific management subnet, not from data VIPs. Which approach is BEST?

  1. Disable Management Access on data IPs and restrict access using ACLs/allowed-management networks
  2. Enable Management Access on every SNIP and VIP
  3. Use SOURCEIP persistence on the management vServer
  4. Bind a rewrite policy to the NSIP

Answer: A — Disable Management Access on data IPs and restrict access using ACLs/allowed-management networks

The correct answer is shown above. Try the full quiz for additional practice.

Practice more: CCA-AppDS Traffic Management (1Y0-241) Practice Questions - Citrix Certified Associate - App Delivery and Security (CCA-AppDS) - Traffic Management (Exam 1Y0-241) Exam →