Cisco
300-410 · Question #90
Refer to the exhibit. The ACL is placed on the inbound Gigabit 0/1 interface of the router. Host 192.168.10.10 cannot SSH to host 192.168.10.0 even though the flow is permitted. Which action resolves
Sign in or unlock 300-410 to reveal the answer and full explanation for question #90. The question stem and answer options stay visible for context.
Infrastructure Security
Question
Refer to the exhibit. The ACL is placed on the inbound Gigabit 0/1 interface of the router. Host 192.168.10.10 cannot SSH to host 192.168.10.0 even though the flow is permitted. Which action resolves the issue without opening full access to this router?
ip access-list extended FILTER
deny tcp 192.168.10.0 0.0.0.255 192.168.10.0 0.0.0.255 eq 22
deny tcp 192.168.10.0 0.0.0.255 192.168.10.0 0.0.0.255 eq 23
deny tcp 192.168.10.0 0.0.0.255 192.168.10.0 0.0.0.255 eq 80
deny tcp 192.168.10.0 0.0.0.255 192.168.10.0 0.0.0.255 eq 443
permit tcp host 192.168.10.10 host 192.168.10.0 eq ssh
permit ip any any
!
interface GigabitEthernet0/1
ip address 192.168.10.1 255.255.255.0
ip access-group FILTER in
Exhibit
Options
- AMove the SSH entry to the beginning of the ACL
- BTemporarily move the permit ip any any line to the beginning of the ACL to see if the flow works
- CTemporarily remove the ACL from the interface to see if the flow works
- DRun the show access-list FILTER command to view if the SSH entry has any hit statistic associated with it
Unlock 300-410 to see the answer
You've previewed enough free 300-410 questions. Unlock 300-410 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#ACLs#Access Control Lists#Security Policies#Troubleshooting