HAHAHAHAHA

Which statement accurately describes dynamic NAT?

• • It always maps a private IP address to a public IP address.

• • It provides an automated mapping of inside local to inside global IP addresses.

• • It provides a mapping of internal host names to IP addresses.

• • It dynamically provides IP addressing to internal hosts.

True or False? A side effect of NAT is that it hides the inside local IP address of a host from the outside network.

• • False

• • True

True or False? With NAT overload, each inside local IP address is translated to a unique inside global IP address on a one-for-one basis.

• • True

• • False

True or False? The use of NAT makes end-to-end traceability between source and destination easier.

• • True

• • False

True or False? Tunneling protocols such as IPsec do not work well through NAT.

• • True

• • False

. The computers used by the network administrators for a school are on the 10.7.0.0/27 network. Which two commands are needed at a minimum to apply an ACL that will ensure that only devices that are used by the network administrators will be allowed Telnet access to the routers? (Choose two.)

• access-list standard VTY
  permit 10.7.0.0 0.0.0.127

• access-list 5 permit 10.7.0.0 0.0.0.31

• • access-class 5 in

• • ip access-group 5 in

• • access-list 5 deny any

• • ip access-group 5 out

• • access-list 5 permit 10.7.0.0 0.0.0.31

Consider the configured access list.

R1# show access-lists extended IP access list 100 deny tcp host 10.1.1.2 host 10.1.1.1 eq telnet deny tcp host 10.1.2.2 host 10.1.2.1 eq telnet permit ip any any (15 matches)

What are two characteristics of this access list? (Choose two.)

• • Only the 10.1.1.2 device can telnet to the router that has the 10.1.1.1 IP address assigned.

• • A network administrator would not be able to tell if the access list has been applied to an interface or not.

• • Any device on the 10.1.1.0/24 network (except the 10.1.1.2 device) can telnet to the router that has the IP address 10.1.1.1 assigned.

• • The access list has been applied to an interface.

• • Any device can telnet to the 10.1.2.1 device.

Which command will verify the number of packets that are permitted or denied by an ACL that restricts SSH access?

• • show ip interface brief

• • show ip ssh

• • show running-config

• • show access-lists

. Which access list statement permits HTTP traffic that is sourced from host 10.1.129.100 port 4300 and destined to host 192.168.30.10?

• • access-list 101 permit tcp 192.168.30.10 0.0.0.0 eq 80 10.1.0.0 0.0.255.255

• • access-list 101 permit tcp 10.1.129.0 0.0.0.255 eq www 192.168.30.10 0.0.0.0 eq www

• • access-list 101 permit tcp 10.1.128.0 0.0.1.255 eq 4300 192.168.30.0 0.0.0.15 eq www

• • access-list 101 permit tcp host 192.168.30.10 eq 80 10.1.0.0 0.0.255.255 eq 4300

• • access-list 101 permit tcp any eq 4300

Which access list statement permits HTTP traffic that is sourced from host 10.1.129.100 port 4300 and destined to host 192.168.30.10?

• • access-list 101 permit tcp 10.1.129.0 0.0.0.255 eq www 192.168.30.10 0.0.0.0 eq www

• • access-list 101 permit tcp 10.1.128.0 0.0.1.255 eq 4300 192.168.30.0 0.0.0.15 eq www

• • access-list 101 permit tcp host 192.168.30.10 eq 80 10.1.0.0 0.0.255.255 eq 4300

• • access-list 101 permit tcp 192.168.30.10 0.0.0.0 eq 80 10.1.0.0 0.0.255.255

• • access-list 101 permit tcp any eq 4300