If you wanted to deny FTP access from network 200.200.10.0 to network 200.199.11.0 but allow everything else, which of the following command strings is valid?
| 1. | If you wanted to deny FTP access from network 200.200.10.0 to network 200.199.11.0 but allow everything else, which of the following command strings is valid? |
|||||||
Answer: Option D Explanation: Extended IP access lists use numbers 100-199 and 2000-2699 and filter based on source and destination IP address, protocol number, and port number. The last option is correct because of the second line that specifies permit ip any any. (I used 0.0.0.0 255.255.255.255, which is the same as the any option.) The third option does not have this, so it would deny access but not allow everything else. |
Leave a Comment
Computer Science & Engineering :: Networking Questions and Answers : More Exercises
- Networking Basics - Networking Basics
- TCP/IP - TCP/IP
- IOS and Security Device Manager - IOS and Security Device Manager
- IP Routing - IP Routing
- Spanning Tree Protocol - Spanning Tree Protocol
- Security - Security
- Wireless Technologies - Wireless Technologies
- Wide Area Networks - Wide Area Networks
- Internetworking - Internetworking
- Subnetting - Subnetting
- Managing a Cisco Internetwork - Managing a Cisco Internetwork
- EIGRP and OSPF - EIGRP and OSPF
- Virtual LANs - Virtual LANs
- Network Address Translation - Network Address Translation
- IPv6 - IPv6