Explanation According to the Citrix documentation1, the correct syntax for adding a simple ACL rule is: add simpleacl <aclname> <ALLOW | DENY> -srcIP <IPAddress> [-destIP <IPAddress>] [-TTL <timeInSeconds>] The correct syntax for adding an extended ACL rule is: add ns acl <aclname> <ALLOW | DENY> -srcIP <IPAddress> [-destIP <IPAddress>] [-TTL <timeInSeconds>] Therefore, the correct answer is B, because it uses the extended ACL rule format and specifies the destination IP address of the load balancing virtual server (192.168.100.25) and the TTL value of 10 minutes (600 seconds). 1: https://docs.citrix.com/en-us/citrix-adc/13/networking/acl.html