ExamGecko
Question list
Search
Search

Related questions











Question 372 - 312-50v12 discussion

Report
Export

The security administrator of PLUS needs to permit Internet traffic in the host 10.0.0.2 and UDP traffic in the host 10.0.0.3. He also needs to permit all FTP traffic to the rest of the network and deny all other traffic.

After he applied his ACL configuration in the router, nobody can access the ftp, and the permitted hosts cannot access the Internet. According to the next configuration, what is happening in the network? access-list 102 deny tcp any any access-list 104 permit udp host 10.0.0.3 any access-list 110 permit tcp host 10.0.0.2 eq www any access-list 108 permit tcp any eq ftp any

A.
The ACL 104 needs to be first because is UDP
Answers
A.
The ACL 104 needs to be first because is UDP
B.
The first ACL is denying all TCP traffic and the other ACLs are being ignored by the router
Answers
B.
The first ACL is denying all TCP traffic and the other ACLs are being ignored by the router
C.
The ACL for FTP must be before the ACL 110
Answers
C.
The ACL for FTP must be before the ACL 110
D.
The ACL 110 needs to be changed to port 80
Answers
D.
The ACL 110 needs to be changed to port 80
Suggested answer: B

Explanation:

https://www.cisco.com/c/en/us/support/docs/ip/access-lists/26448-ACLsamples.html Since the first line prohibits any TCP traffic (access-list 102 deny tcp any any), the lines below will simply be ignored by the router. Below you will find the example from CISCO documentation.

This figure shows that FTP (TCP, port 21) and FTP data (port 20) traffic sourced from NetB destined to NetA is denied, while all other IP traffic is permitted.

FTP uses port 21 and port 20. TCP traffic destined to port 21 and port 20 is denied and everything else is explicitly permitted. access-list 102 deny tcp any any eq ftp access-list 102 deny tcp any any eq ftp-data access-list 102 permit ip any any

asked 18/09/2024
Jason Potter
45 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first