nerdexam
Cisco

200-301 · Question #338

Refer to the exhibit. A network administrator must permit SSH access to remotely manage routers in a network. The operations team resides on the 10.20.1.0/25 network. Which command will accomplish thi

The correct answer is D. no access-list 2699 deny ip any 10.20.1.0 0.0.0.255. Already a statement is there in last to allow SSH Traffic for network 10.20.1.0 0.0.0.127, but Second statement says deny ip any 10.20.1.0 0.0.0.255, so how it will work once it is denied. So the right answer is remove the --- no access-list 2699 deny ip any 10.20.1.0 0.0.0.255.

Submitted by devops_kid· Mar 5, 20265.0 Security Fundamentals

Question

Refer to the exhibit. A network administrator must permit SSH access to remotely manage routers in a network. The operations team resides on the 10.20.1.0/25 network. Which command will accomplish this task?

Exhibits

200-301 question #338 exhibit 1
200-301 question #338 exhibit 2

Options

  • Aaccess-list 2699 permit udp 10.20.1.0 0.0.0.255
  • Bno access-list 2699 deny tcp any 10.20.1.0 0.0.0.127 eq 22
  • Caccess-list 2699 permit tcp any 10.20.1.0 0.0.0.255 eq 22
  • Dno access-list 2699 deny ip any 10.20.1.0 0.0.0.255

How the community answered

(51 responses)
  • A
    4% (2)
  • B
    8% (4)
  • C
    18% (9)
  • D
    71% (36)

Explanation

Already a statement is there in last to allow SSH Traffic for network 10.20.1.0 0.0.0.127, but Second statement says deny ip any 10.20.1.0 0.0.0.255, so how it will work once it is denied. So the right answer is remove the --- no access-list 2699 deny ip any 10.20.1.0 0.0.0.255.

Topics

#Cisco ACLs#SSH#Wildcard Masks#ACL Configuration

Community Discussion

No community discussion yet for this question.

Full 200-301 Practice