IT2626 Game

The computers used by the network administrators for a school are on the 10.7.0.0/27 network. Which command is needed to apply an ACL that will ensure that only devices that are used by the network administrators will be allowed Telnet access to the routers?

• • access-list standard VTY

• • access-list 5 permit 10.7.0.0 0.0.0.31

• • ip access-group 5 in

• • ip access-group 5 out

A network administrator is writing a standard ACL to deny any traffic from the 10.10.0.0/16 network but permit all other traffic. Which command should be used?

• R1(config)# access-list 55 host 10.10.0.0

• R1(config)# access-list 55 deny 10.10.0.0 0.0.255.255

• R1(config)# access-list 55 deny 10.10.0.0 255.255.0.0

• R1(config)# access-list 55 10.10.0.0 255.255.255.255

Which command will verify the number of packets that are permitted or denied by an ACL that restricts SSH access?

• show running-config

• show ip interface brief

• show ip ssh

• show access-lists

Which access list statement permits HTTP traffic that is sourced from host 10.1.129.100 port 4300 and destined to host 192.168.30.10?

• access-list 101 permit tcp 10.1.128.0 0.0.1.255 eq 4300 192.168.30.0 0.0.0.15 eq www

• access-list 101 permit tcp any eq 4300

• access-list 101 permit tcp 192.168.30.10 0.0.0.0 eq 80 10.1.0.0 0.0.255.255

• access-list 101 permit tcp 10.1.129.0 0.0.0.255 eq www 192.168.30.10 0.0.0.0 eq www

When configuring router security, which statement describes the most effective way to use ACLs to control Telnet traffic that is destined to the router itself?

• Apply the ACL to the vty Ilines without the in or out option required when applying ACLS to interfaces.

   

• The ACL must be applied to each vty line individually.

• The ACL should be applied to all vty lines in the in direction to prevent an unwanted user from connecting to an unsecured port.

• The ACL is applied to the Telnet port with the ip access-group command.

A network administrator needs to configure a standard ACL so that only the workstation of the administrator with the IP address 10.1.1.10 can access the virtual terminal of the main router. Which configuration command can achieve the task?

• R1(config)# access-list 10 permit 10.1.1.10 255.255.255.0

• R1(config)# access-list 10 permit 10.1.1.10 0.0.0.255

• R1(config)# access-list 10 permit 10.1.1.10 255.255.255.255

• R1(config)# access-list 10 permit 10.1.1.10 0.0.0.0

You create a standard ACL called PERMIT-VTY to permit only an administrative host vty access to the router. Which line configuration command would correctly apply this ACL to the vty lines?

• access-class PERMIT-VTY in

• ip access-group PERMIT-VTY out

• ip access-group PERMIT-VTY in

• access-class PERMIT-VTY out

What does the CLI prompt change to after you enter the command ip access-list extended AAAFILTER in global configuration mode?

• R1(config-router)#

• R1(config-ext-nacl)#

• R1(config-if)#

• R1(config-line)#

Which command will configure a standard ACL?

• Router(config)# access-list 45 permit 192.168.200.4 host

• Router(config)# access-list 10 permit 10.20.5.0 0.255.255.255 any

• Router(config)# access-list 20 permit host 192.168.5.5 any any

• Router(config)# access-list 35 permit host 172.31.22.7

To facilitate the troubleshooting process, which inbound ICMP message should be permitted on an outside interface?

• time-stamp request

• router advertisement

• echo reply

• echo request