200-150 · Question #7
When command set will create an access control 1st on a Cisco Nexus switch to permit only unencrypted Web traffic from any source to destination host 10.10.1.110?
The correct answer is C. N5K-A(config)#Ip access-list 101. On Cisco Nexus NX-OS, an IP ACL is created by first entering 'ip access-list <id>' to enter ACL configuration mode, then adding permit or deny statements as separate steps.
Question
When command set will create an access control 1st on a Cisco Nexus switch to permit only unencrypted Web traffic from any source to destination host 10.10.1.110?
Options
- AN5K-A(config)#access-list 101 permit tcp any host 10.10.1.110 eq 80
- BN5K-A(config)# Ip access-list 101
- CN5K-A(config)#Ip access-list 101
- DN5K-A(config)#Ip access-list 101 permit tcp any host 10.10.1.100 eq 80
How the community answered
(21 responses)- A5% (1)
- B5% (1)
- C76% (16)
- D14% (3)
Why each option
On Cisco Nexus NX-OS, an IP ACL is created by first entering 'ip access-list <id>' to enter ACL configuration mode, then adding permit or deny statements as separate steps.
This uses the IOS-style 'access-list 101 permit ...' single-line syntax, which is not valid on Cisco Nexus NX-OS - NX-OS requires entering ACL config mode separately before adding entries.
Although the command text appears similar to C, the extra space after the prompt character represents inconsistent or erroneous CLI formatting that does not reflect a valid NX-OS command entry.
On NX-OS, 'ip access-list 101' is the correct first command to create a numbered IP access-list and enter ACL configuration mode. Permit and deny statements are then added as sub-commands within that mode, following standard NX-OS two-step ACL construction syntax.
This option specifies the wrong destination host IP address - 10.10.1.100 instead of the required 10.10.1.110 - making it factually incorrect regardless of syntax.
Concept tested: Cisco Nexus NX-OS IP ACL creation syntax
Source: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5000/sw/security/503_n2_1/b_Cisco_Nexus_5000_Series_NX-OS_Security_Configuration_Guide_Release_503_N2_1/b_Cisco_Nexus_5000_Series_NX-OS_Security_Configuration_Guide_Release_503_N2_1_chapter_01000.html
Topics
Community Discussion
No community discussion yet for this question.