. Which access list statement permits HTTP traffic that is sourced from host 10.1.129.100 port 4300 and destined to host 192.168.30.10?

access-list 101 permit tcp host 192.168.30.10 eq 80 10.1.0.0 0.0.255.255 eq 4300

access-list 101 permit tcp 192.168.30.10 0.0.0.0 eq 80 10.1.0.0 0.0.255.255

access-list 101 permit tcp 10.1.129.0 0.0.0.255 eq www 192.168.30.10 0.0.0.0 eq www

access-list 101 permit tcp 10.1.128.0 0.0.1.255 eq 4300 192.168.30.0 0.0.0.15 eq www

access-list 101 permit tcp any eq 4300

Which access list statement permits HTTP traffic that is sourced from host 10.1.129.100 port 4300 and destined to host 192.168.30.10?

access-list 101 permit tcp 10.1.128.0 0.0.1.255 eq 4300 192.168.30.0 0.0.0.15 eq www

access-list 101 permit tcp 10.1.129.0 0.0.0.255 eq www 192.168.30.10 0.0.0.0 eq www

access-list 101 permit tcp host 192.168.30.10 eq 80 10.1.0.0 0.0.255.255 eq 4300

access-list 101 permit tcp 192.168.30.10 0.0.0.0 eq 80 10.1.0.0 0.0.255.255

access-list 101 permit tcp any eq 4300

When configuring router security, which statement describes the most effective way to use ACLs to control Telnet traffic that is destined to the router itself?

Apply the ACL to the vty Ilines without the in or out option required when applying ACLS to interfaces.

The ACL must be applied to each vty line individually.

The ACL should be applied to all vty lines in the in direction to prevent an unwanted user from connecting to an unsecured port.

The ACL is applied to the Telnet port with the ip access-group command.

What packets would match the access control list statement that is shown below? access-list 110 permit tcp 172.16.0.0 0.0.0.255 any eq 22

SSH traffic from any source network to the 172.16.0.0 network

any TCP traffic from the 172.16.0.0 network to any destination network

SSH traffic from the 172.16.0.0 network to any destination network

any TCP traffic from any host to the 172.16.0.0 network

access-list 110 permit tcp 172.16.0.0 0.0.0.255 any eq 22

Consider the access list command applied outbound on a router serial interface. access-list 100 deny icmp 192.168.10.0 0.0.0.255 any echo reply What is the effect of applying this access list command?

No traffic will be allowed outbound on the serial interface.

The only traffic denied is ICMP-based traffic. All other traffic is allowed.

The only traffic denied is echo-replies sourced from the 192.168.10.0/24 network. All other traffic is allowed.

Users on the 192.168.10.0/24 network are not allowed to transmit traffic to any other destination.

Consider the following output for an ACL that has been applied to a router via the access-class in command. What can a network administrator determine from the output that is shown? R1# <output omitted> Standard IP access list 2 10 permit 192.168.10.0, wildcard bits 0.0.0.255 (2 matches) 20 deny any (1 match)

Two devices were able to use SSH or Telnet to gain access to the router.

Traffic from one device was not allowed to come into one router port and be routed outbound a different router port.

Two devices connected to the router have IP addresses of 192.168.10.x.

Traffic from two devices was allowed to enter one router port and be routed outbound to a different router port.

Which two commands will configure a standard ACL? (Choose two.)

Router(config)# access-list 35 permit host 172.31.22.7

Router(config)# access-list 90 permit 192.168.10.5 0.0.0.0

Router(config)# access-list 10 permit 10.20.5.0 0.255.255.255 any

Router(config)# access-list 20 permit host 192.168.5.5 any any

Router(config)# access-list 45 permit 192.168.200.4 host

What two ACEs could be used to deny IP traffic from a single source host 10.1.1.1 to the 192.168.0.0/16 network? (Choose two.)

access-list 100 deny ip 192.168.0.0 0.0.255.255 10.1.1.1 255.255.255.255

access-list 100 deny ip 192.168.0.0 0.0.255.255 host 10.1.1.1

access-list 100 deny ip host 10.1.1.1 192.168.0.0 0.0.255.255

access-list 100 deny ip 10.1.1.1 255.255.255.255 192.168.0.0 0.0.255.255

access-list 100 deny ip 10.1.1.1 0.0.0.0 192.168.0.0 0.0.255.255

12. An administrator has configured an access list on R1 to allow SSH administrative access from host 172.16.1.100. Which command correctly applies the ACL?

R1(config-line)# access-class 1 in

R1(config-line)# access-class 1 out

R1(config-if)# ip access-group 1 in

A network administrator is configuring an ACL to restrict access to certain servers in the data center. The intent is to apply the ACL to the interface connected to the data center LAN. What happens if the ACL is incorrectly applied to an interface in the inbound direction instead of the outbound direction?

The ACL does not perform as designed.

The ACL will analyze traffic after it is routed to the outbound interface

On which router should the show access-lists command be executed?

on the router that has the ACL configured

on the router that routes the packet referenced in the ACL to the final destination network

on the router that routes the packet referenced in the ACL from the source network

on any router through which the packet referenced in the ACL travels

What is the quickest way to remove a single ACE from a named ACL?

Use the no keyword and the sequence number of the ACE to be removed.

Use the no access-list command to remove the entire ACL, then recreate it without the ACE.

Copy the ACL into a text editor, remove the ACE, then copy the ACL back into the router.

Create a new ACL with a different number and apply the new ACL to the router interface.

What is the effect of configuring an ACL with only ACEs that deny traffic?

The ACL will block all traffic.

The ACL will permit any traffic that is not specifically denied.

The ACL must be applied inbound only.

The ACL must be applied outbound only.

If the provided ACEs are in the same ACL, which ACE should be listed first in the ACL according to best practice?

permit udp 172.16.0.0 0.0.255.255 host 172.16.1.5 eq snmptrap

permit udp any any range 10000 20000

permit tcp 172.16.0.0 0.0.3.255 any established

deny udp any host 172.16.1.5 eq snmptrap

A network administrator is writing a standard ACL to deny any traffic from the 10.10.0.0/16 network but permit all other traffic. Which two commands should be used? (Choose two.) R1(config)# access-list 55 host 10.10.0.0

R1(config)# access-list 55 deny 10.10.0.0 0.0.255.255

R1(config)# access-list 55 permit any

R1(config)# access-list 55 deny 10.10.0.0 255.255.0.0

R1(config)# access-list 55 10.10.0.0 255.255.255.255

R1(config)# access-list 55 deny any

What single access list statement matches all of the following networks? 192.168.16.0 192.168.17.0 192.168.18.0 192.168.19.0

access-list 10 permit 192.168.16.0 0.0.3.255

access-list 10 permit 192.168.0.0 0.0.15.255

access-list 10 permit 192.168.16.0 0.0.0.255

access-list 10 permit 192.168.16.0 0.0.15.255

Which three statements describe ACL processing of packets? (Choose three.) A packet that does not match the conditions of any ACE will be forwarded by default.

A packet can either be rejected or forwarded as directed by the ACE that is matched.

An implicit deny any rejects any packet that does not match any ACE.

Each statement is checked only until a match is detected or until the end of the ACE list.

Each packet is compared to the conditions of every ACE in the ACL before a forwarding decision is made.

A packet that has been denied by one ACE can be permitted by a subsequent ACE.

Which scenario would cause an ACL misconfiguration and deny all traffic?

Apply an ACL that has all deny ACE statements.

Apply a standard ACL using the ip access-group outcommand.

Apply a named ACL to a VTY line.

Apply a standard ACL in the inbound direction.

In applying an ACL to a router interface, which traffic is designated as outbound?

traffic that is leaving the router and going toward the destination host

traffic that is coming from the source IP address into the router

traffic for which the router can find no routing table entry

traffic that is going from the destination IP address into the router

. What two functions describe uses of access control lists? (Choose two.)

ACLs can control which areas a host can access on a network.

ACLs provide a basic level of security for network access.

Standard ACLs can filter traffic based on source and destination network addresses.

Standard ACLs can restrict access to specific applications and ports.

ACLs assist a router in determining the best path to a destination.

Which three statements describe how an ACL processes packets? (Choose three.) A packet is compared with all ACEs in the ACL before a forwarding decision is made.

If an ACE is matched, the packet is either rejected or forwarded, as directed by the ACE.

An implicit deny at the end of an ACL rejects any packet that does not match an ACE.

A packet that has been denied by one ACE can be permitted by a subsequent ACE.

Each ACE is checked only until a match is detected or until the end of the ACL.

If an ACE is not matched, the packet is forwarded by default.

Which two statement describes a difference between the operation of inbound and outbound ACLs? (Choose two.)

Outbound ACLs are processed after the routing is completed.

Inbound ACLs are processed before the packets are routed.

Unlike outbound ACLs, inbound ACLs can be used to filter packets with multiple criteria

Inbound ACLs can be used in both routers and switches.

Multiple outbound ACLs can be applied to an interface.

Which statement describes a characteristic of standard IPv4 ACLs?

They filter traffic based on source IP addresses only.

They can be configured to filter traffic based on both source IP addresses and source ports.

They can be created with a number but not with a name.

They filter traffic based on destination IP addresses only.

Which two statements describe appropriate general guidelines for configuring and applying ACLs? (Choose two.)

If an ACL contains no permit statements, all traffic is denied by default.

The most specific ACL statements should be entered first because of the top-down sequential nature of ACLs.

If a single ACL is to be applied to multiple interfaces, it must be configured with a unique number for each interface.

Multiple ACLS per protocol and per direction can be applied to an interface.

Standard ACLS are placed closest to the source, whereas extended ACLS are placed closest to the destination.

Standard ACLS are placed closest to the source,

a location centered between traffic destinations and sources to filter as much traffic as possible

if using the established keyword, a location close to the destination to ensure that return traffic is allowed

whereas extended ACLS are placed closest to the destination.

a location as close to the destination of traffic as possible

What is a security feature of using NAT on a network?

allows internal IP addresses to be concealed from external users

denies all packets that originate from private IP addresses

denies all internal hosts from communicating outside their own network

allows external IP addresses to be concealed from internal users

What is one advantage of using NAT at the edge of the network? Group of answer choices

Changing ISPs is simpler because the devices on the inside network do not have to be configured with new addresses when the outside address changes.

Dynamic NAT allows devices from outside the local network to easily initiate TCP connections to inside hosts.

NAT enables end-to-end IPv4 traceability, making troubleshooting easier.

Performance is significantly increased because the router does not have to perform as many route lookups.

Which two statements accurately describe an advantage or a disadvantage when deploying NAT for IPv4 in a network? (Choose two.) NAT adds authentication capability to IPv4.

NAT introduces problems for some applications that require end-to-end connectivity.

NAT provides a solution to slow down the IPv4 address depletion.

NAT causes routing tables to include more information.

NAT will impact negatively on switch performance.

What are two tasks to perform when configuring static NAT? (Choose two.)

Identify the participating interfaces as inside or outside interfaces.

Create a mapping between the inside local and outside local addresses.

Define the inside global address on the server

Define the outside global address.

Why is NAT not needed in IPv6?

Any host or user can get a public IPv6 network address because the number of available IPv6 addresses is extremely large.

The end-to-end connectivity problems that are caused by NAT are solved because the number of routes increases with the number of nodes that are connected to the Internet.

The problems that are induced by NAT applications are solved because the IPv6 header improves packet handling by intermediate routers.

Because IPv6 has integrated security, there is no need to hide the IPv6 addresses of internal networks.

HAHAHAHAHA

Authored by Minase Aoi

Computers

University

Used 8+ times

AI Actions

Add similar questions

Adjust reading levels

Convert to real-world scenario

Translate activity

More...

Content View

Student View

52 questions

Show all answers

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Which statement accurately describes dynamic NAT?

It always maps a private IP address to a public IP address.

It provides an automated mapping of inside local to inside global IP addresses.

It provides a mapping of internal host names to IP addresses.

It dynamically provides IP addressing to internal hosts.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

True or False? A side effect of NAT is that it hides the inside local IP address of a host from the outside network.

False

True

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

True or False? With NAT overload, each inside local IP address is translated to a unique inside global IP address on a one-for-one basis.

True

False

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

True or False? The use of NAT makes end-to-end traceability between source and destination easier.

True

False

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

True or False? Tunneling protocols such as IPsec do not work well through NAT.

True

False

MULTIPLE SELECT QUESTION

45 sec • 1 pt

. The computers used by the network administrators for a school are on the 10.7.0.0/27 network. Which two commands are needed at a minimum to apply an ACL that will ensure that only devices that are used by the network administrators will be allowed Telnet access to the routers? (Choose two.)
access-list standard VTY
permit 10.7.0.0 0.0.0.127
access-list 5 permit 10.7.0.0 0.0.0.31

access-class 5 in

ip access-group 5 in

access-list 5 deny any

ip access-group 5 out

access-list 5 permit 10.7.0.0 0.0.0.31

MULTIPLE SELECT QUESTION

45 sec • 1 pt

Consider the configured access list.
R1# show access-lists extended IP access list 100 deny tcp host 10.1.1.2 host 10.1.1.1 eq telnet deny tcp host 10.1.2.2 host 10.1.2.1 eq telnet permit ip any any (15 matches)
What are two characteristics of this access list? (Choose two.)

Only the 10.1.1.2 device can telnet to the router that has the 10.1.1.1 IP address assigned.

A network administrator would not be able to tell if the access list has been applied to an interface or not.

Any device on the 10.1.1.0/24 network (except the 10.1.1.2 device) can telnet to the router that has the IP address 10.1.1.1 assigned.

The access list has been applied to an interface.

Any device can telnet to the 10.1.2.1 device.

Access all questions and much more by creating a free account

Create resources

Host any resource

Get auto-graded reports

Continue with Google

Continue with Email

Continue with Classlink

Continue with Clever

or continue with

Microsoft

Apple

Others

Already have an account?

Similar Resources on Wayground

50 questions

Review-PTS2-Gr5

Quiz

•

5th Grade - University

50 questions

Носії інформації для комп'ютерів.

Quiz

•

University

50 questions

Test Mendix 1

Quiz

•

University

53 questions

Tecnologías de Información en Ambientes de Negocios

Quiz

•

University

50 questions

Excel

Quiz

•

University

47 questions

ทดสอบความรู้ทั่วไปเกี่ยวกับคอมพิวเตอร์

Quiz

•

University

50 questions

Fundamental of OS - Revision 2

Quiz

•

University

47 questions

MS Word Preliminary Examination

Quiz

•

10th Grade - University

Popular Resources on Wayground

15 questions

Fractions on a Number Line

Quiz

•

3rd Grade

20 questions

Equivalent Fractions

Quiz

•

3rd Grade

25 questions

Multiplication Facts

Quiz

•

5th Grade

29 questions

Alg. 1 Section 5.1 Coordinate Plane

Quiz

•

9th Grade

$fractions$

22 questions

fractions

Quiz

•

3rd Grade

11 questions

FOREST Effective communication

Lesson

•

20 questions

Main Idea and Details

Quiz

•

5th Grade

20 questions

Context Clues

Quiz

•

6th Grade

Discover more resources for Computers

12 questions

IREAD Week 4 - Review

Quiz

•

3rd Grade - University

7 questions

Fragments, Run-ons, and Complete Sentences

Interactive video

•

4th Grade - University

7 questions

Renewable and Nonrenewable Resources

Interactive video

•

4th Grade - University

10 questions

DNA Structure and Replication: Crash Course Biology

Interactive video

•

11th Grade - University

5 questions

Inherited and Acquired Traits of Animals

Interactive video

•

4th Grade - University

5 questions

Examining Theme

Interactive video

•

4th Grade - University

20 questions

Implicit vs. Explicit

Quiz

•

6th Grade - University

7 questions

Comparing Fractions

Interactive video

•

1st Grade - University

HAHAHAHAHA

Which statement accurately describes dynamic NAT?

True or False? A side effect of NAT is that it hides the inside local IP address of a host from the outside network.

True or False? With NAT overload, each inside local IP address is translated to a unique inside global IP address on a one-for-one basis.

True or False? The use of NAT makes end-to-end traceability between source and destination easier.

True or False? Tunneling protocols such as IPsec do not work well through NAT.

Consider the configured access list.R1# show access-lists extended IP access list 100 deny tcp host 10.1.1.2 host 10.1.1.1 eq telnet deny tcp host 10.1.2.2 host 10.1.2.1 eq telnet permit ip any any (15 matches)What are two characteristics of this access list? (Choose two.)

Which command will verify the number of packets that are permitted or denied by an ACL that restricts SSH access?

. Which access list statement permits HTTP traffic that is sourced from host 10.1.129.100 port 4300 and destined to host 192.168.30.10?

Which access list statement permits HTTP traffic that is sourced from host 10.1.129.100 port 4300 and destined to host 192.168.30.10?

Access all questions and much more by creating a free account

Similar Resources on Wayground

Popular Resources on Wayground

Discover more resources for Computers

Consider the configured access list.
R1# show access-lists extended IP access list 100 deny tcp host 10.1.1.2 host 10.1.1.1 eq telnet deny tcp host 10.1.2.2 host 10.1.2.1 eq telnet permit ip any any (15 matches)
What are two characteristics of this access list? (Choose two.)