Refer to the exhibit. A network technician enters the following line into the router. Tidmorel(config)# access-list 106 deny tcp 192.168.254.0 0.0.0.255 any eq www What is the effect of this configura

Question

Options

• AThe change has no effect on the packets being filtered.
• BAll traffic from the 192.168.254.0 LAN to the Internet is permitted.
• CWeb pages from the Internet cannot be accessed by hosts in the 192.168.254.0 LAN.
• DNo hosts in the 192.168.254.0 LAN except 192.168.254.7 can access web pages from the Internet.

• A
  69% (27)
• B
  15% (6)
• C
  5% (2)
• D
  10% (4)

Explanation

The correct answer is A - the added line has no effect. The exhibit (not shown here) contains ACL 106 with an earlier 'permit ip any any' or equivalent broad permit statement that already matches all traffic from 192.168.254.0/24 before the new deny statement is ever evaluated. Cisco IOS ACLs are processed top-down and stop at the first match. Because the permit statement appears before the new deny entry, the deny is never reached. This illustrates a critical ACL design principle: order matters - specific deny rules must be placed before broad permit rules to have any effect.

No community discussion yet for this question.