- Home
- Networking
- CCENT/CCNA ICND1 100-105
141.
Which of the following fields cannot be compared based on an extended IP ACL? (Choose two answers.)
- A.Protocol
- B.Source IP address
- C.Destination IP address
- D.TOS byte
- E.URL
- F.Filename for FTP transfers
- Answer & Explanation
- Report
Answer : [E, F]
Explanation :
Explanation :
142.
Which of the following access-list commands permit packets going from host 10.1.1.1 to all web servers whose IP addresses begin with 172.16.5? (Choose two answers.)
- A.access-list 101 permit tcp host 10.1.1.1 172.16.5.0 0.0.0.255 eq www
- B.access-list 1951 permit ip host 10.1.1.1 172.16.5.0 0.0.0.255 eq www
- C.access-list 2523 permit ip host 10.1.1.1 eq www 172.16.5.0 0.0.0.255
- D.access-list 2523 permit tcp host 10.1.1.1 eq www 172.16.5.0 0.0.0.255
- E.access-list 2523 permit tcp host 10.1.1.1 172.16.5.0 0.0.0.255 eq www
- Answer & Explanation
- Report
Answer : [A and E]
Explanation :
Explanation :
143.
Which of the following access-list commands permits packets going to any web client from all web servers whose IP addresses begin with 172.16.5?
- A.access-list 101 permit tcp host 10.1.1.1 172.16.5.0 0.0.0.255 eq www
- B.access-list 1951 permit ip host 10.1.1.1 172.16.5.0 0.0.0.255 eq www
- C.access-list 2523 permit tcp any eq www 172.16.5.0 0.0.0.255
- D.access-list 2523 permit tcp 172.16.5.0 0.0.0.255 eq www 172.16.5.0 0.0.0.255
- E.access-list 2523 permit tcp 172.16.5.0 0.0.0.255 eq www any
- Answer & Explanation
- Report
Answer : [E]
Explanation :
Explanation :
144.
n a router running a recent IOS version (at least version 15.0), an engineer needs to delete the second line in ACL 101, which currently has four commands configured. Which of the following options could be used? (Choose two answers.)
- A.Delete the entire ACL and reconfigure the three ACL statements that should remain in the ACL.
- B.Delete one line from the ACL using the no access-list... global command.
- C.Delete one line from the ACL by entering ACL configuration mode for the ACL and then deleting only the second line based on its sequence number.
- D.Delete the last three lines from the ACL from global configuration mode, and then add the last two statements back into the ACL.
- Answer & Explanation
- Report
Answer : [A, C]
Explanation :
Explanation :
145.
An engineer is considering configuring an ACL on Router R1. The engineer could use ACL A which would be enabled with the ip access-group A out command on interface G0/1, or ACL B, which would be enabled with the ip access-group B in command on that same interface. R1’s G0/1 interface uses IPv4 address 1.1.1.1. Which of the answers is true when comparing these options? (Choose two answers.)
- A.ACL A creates more risk of filtering important overhead traffic than ACL B.
- B.ACL B creates more risk of filtering important overhead traffic than ACL A.
- C.A ping 1.1.1.1 command on R1 would bypass ACL A even if enabled.
- D.A ping 1.1.1.1 command on R1 would bypass ACL B even if enabled.
- Answer & Explanation
- Report
Answer : [B, C]
Explanation :
Explanation :