nerdexam
Cisco

200-601 · Question #51

Refer to the exhibit. You are required to implement traffic segmentation in the network. See the table for relevant device details: L2SW4, L2SW5, and L2SW6 are connected to L3SW1 with 802.1Q trunks…

The correct answer is B. Deploy an inbound ACL on interface VLAN 191 to control the traffic from the Administrator's. See the full explanation below for the reasoning.

Question

Refer to the exhibit. You are required to implement traffic segmentation in the network. See the table for relevant device details:

L2SW4, L2SW5, and L2SW6 are connected to L3SW1 with 802.1Q trunks with VLAN 191 and VLAN 398 allowed on the trunk. You have the following information from L3SW1:

L3SW1# show run interfaces interface Vlan1 no ip address shutdown ! interface Vlan2 ip address 10.2.2.2 255.255.255.248 ! interface Vlan191 ip address 10.10.27.126 255.255.255.192 ! interface Vlan200 ip address 10.20.20.1 255.255.255.248 ! interface Vlan398 ip address 10.15.153.1 255.255.255.0 L3SW1# show ip route *** Output Omitted *** 10.0.0.0/8 is variably subnetted, 5 subnets, 3 masks C 10.2.2.1/29 is directly connected, Vlan2 C 10.10.27.64/26 is directly connected, Vlan191 C 10.15.153.0/24 is directly connected, Vlan398 C 10.20.20.0/29 is directly connected, Vlan200 S 10.200.200.0/24 [1/0] via 10.20.20.2 S* 0.0.0.0/0 [1/0] via 10.2.2.1 You are required to implement a configuration that will meet the following connectivity requirements:

  • The Administrator's Station must have full access to PanelView
  • PanelView should have limited access, based on specific TCP ports, to

PLC#1 and I/O#1

  • The Administrator's Station should have no access to PLC#1 and I/O#1
  • PLC#1 and I/O#1 should be able to communicate with each other on any

port Which action will allow you to meet the connectivity requirements?

Exhibit

200-601 question #51 exhibit

Options

  • APut interface VLAN 191 and interface VLAN 398 into different Virtual Routing and Forwarding
  • BDeploy an inbound ACL on interface VLAN 191 to control the traffic from the Administrator's
  • CNo change is required, the traffic is already limited appropriately by the VLAN segmentation
  • DImplement an ACL on Firewall1 to control the traffic flow between VLAN 191 and VLAN

How the community answered

(36 responses)
  • A
    17% (6)
  • B
    75% (27)
  • C
    6% (2)
  • D
    3% (1)

Community Discussion

No community discussion yet for this question.

Full 200-601 Practice