CCNP 350-401 ENCOR Question 367 DISCUSSION

  • 623 views
  • 2023-06-26
« Back to Main Menu

Refer to the exhibit. Extended access-list 100 is configured on interface GigabitEthernet 0/0 in an inbound direction but it does not have the expected behavior of allowing only packets to or from 192 168 0 0/16. Which command set properly configures the access list?

Q367

A. 
R1 (config)#no access-list 100 seq 10
R1(config)#access-list 100 seq 40 deny ip any any

B.
R1 (config)#ip access-list extended 100
R1(config-ext-nacl)#no 10

C. 
R1(config)#no access-list 100 deny ip any any

D. 
R1(config)#ip access-list extended 100
R1(config-ext-nacl)#5 permit ip any any

Refer to the exhibit. Extended access-list 100 is configured on interface GigabitEthernet 0/0 in an inbound direction but it does not have the expected behavior of allowing only packets to or from 192 168 0 0/16. Which command set properly configures the access list?

Q367

A. 
R1 (config)#no access-list 100 seq 10
R1(config)#access-list 100 seq 40 deny ip any any

B.
R1 (config)#ip access-list extended 100
R1(config-ext-nacl)#no 10

C. 
R1(config)#no access-list 100 deny ip any any

D. 
R1(config)#ip access-list extended 100
R1(config-ext-nacl)#5 permit ip any any

Correct Answer: B

Support AceITCert.com by buying stuff you need!

2 Comments

ohhhvictor

Note: At the end of each access list there is an explicit deny all statement, so the second ACL statement wasn’t really necessary.

After applying an access list, every traffic not explicitly permited will be denied.

2024-04-24 11:38:08
IgorLVG

2024-08-07 19:24:47
In order to participate in the comments you need to be logged-in.
You can sign-up or login (it's free).