ENSA Part 2 Final Exam

A technician is tasked with using ACLs to secure a router. When would the technician use the access-class 20 in configuration option or command?

• to secure administrative access to the router

• to display all restricted traffic

• to secure management traffic into the router

• to remove all ACLs from the router

An administrator has configured an access list on R1 to allow SSH administrative access from host 172.16.1.100. Which command correctly applies the ACL?

• R1(config-if)# ip access-group 1 in

• R1(config-if)# ip access-group 1 out

• R1(config-line)# access-class 1 in

• R1(config-line)# access-class 1 out

Refer to the exhibit. The network administrator that has the IP address of 10.0.70.23/25 needs to have access to the corporate FTP server (10.0.54.5/28). The FTP server is also a web server that is accessible to all internal employees on networks within the 10.x.x.x address. No other traffic should be allowed to this server. Which extended ACL would be used to filter this traffic, and how would this ACL be applied? (Choose two.)

• access-list 105 permit ip host 10.0.70.23 host 10.0.54.5access-list 105 permit tcp any host 10.0.54.5 eq wwwaccess-list 105 permit ip any any

• access-list 105 permit tcp host 10.0.54.5 any eq wwwaccess-list 105 permit tcp host 10.0.70.23 host 10.0.54.5 eq 20access-list 105 permit tcp host 10.0.70.23 host 10.0.54.5 eq 21

• access-list 105 permit tcp host 10.0.70.23 host 10.0.54.5 eq 20access-list 105 permit tcp host 10.0.70.23 host 10.0.54.5 eq 21access-list 105 permit tcp 10.0.0.0 0.255.255.255 host 10.0.54.5 eq wwwaccess-list 105 deny ip any host 10.0.54.5access-list 105 permit ip any any

• R2(config)# interface gi0/0R2(config-if)# ip access-group 105 in

• R1(config)# interface gi0/0R1(config-if)# ip access-group 105 out

Refer to the exhibit. A network administrator is configuring a standard IPv4 ACL. What is the effect after the command no access-list 10 is entered?

• ACL 10 is disabled on Fa0/1.

• ACL 10 is removed from the running configuration.

• ACL 10 will be disabled and removed after R1 restarts.

• ACL 10 is removed from both the running configuration and the interface Fa0/1.

Refer to the exhibit. A network administrator has configured ACL 9 as shown. Users on the 172.31.1.0 /24 network cannot forward traffic through router CiscoVille. What is the most likely cause of the traffic failure?

• The permit statement specifies an incorrect wildcard mask.

• The sequence of the ACEs is incorrect.

• The established keyword is not specified.

• The port number for the traffic has not been identified with the eq keyword.

Refer to the exhibit. What has to be done in order to complete the static NAT configuration on R1?

• R1 should be configured with the command ip nat inside source static 209.165.200.1 192.168.11.11 .

• R1 should be configured with the command ip nat inside source static 209.165.200.200 192.168.11.11 .

• Interface S0/0/0 should be configured with the command ip nat outside .

• Interface Fa0/0 should be configured with the command no ip nat inside .

A network administrator is troubleshooting the dynamic NAT that is configured on router R2. Which command can the administrator use to see the total number of active NAT translations and the number of addresses that are allocated from the NAT pool?

• R2# show ip nat statistics

• R2# show ip nat translations

• R2# show running-config

• R2# clear ip nat translation

Which type of NAT maps a single inside local address to a single inside global address?

• dynamic

• static

• port address translation

• overloading

Refer to the exhibit. R1 is configured for static NAT. What IP address will Internet hosts use to reach PC1?

• 192.168.0.10

• 192.168.0.1

• 209.165.200.225

• 209.165.201.1

What is correct in relation to NAT for IPv6?

• It is used to convert private IPv6 addresses to public IPv6 addresses.​

• It is a temporary mechanism to assist in the migration from IPv4 to IPv6.

• NAT64 has been deprecated by IETF in favor of NAT-PT.

• Dual stack is an example of implementation of NAT for IPv6.