350-001 Question #19: Real Exam Question with Answer & Explanation

The correct answer is B: The access list has logging enabled.. B is correct because the presence of logging output for the ACL confirms that the 'log' or 'log-input' keyword was added to the access list entry, enabling logging. D is correct because the 'ip access-list logging hash-generation' command causes IOS to include a hash value in ACL

Question

Refer to the exhibit. Which two statements are correct? (Choose two.)

Options

AThe hexadecimal value of the number of packets that hit the access list is 0x723E6E12.
BThe access list has logging enabled.
CThe packet was discarded.
DThe command ip access-list logging hash-generation is enabled.
EThe Telnet connection is successfully set up.

Explanation

B is correct because the presence of logging output for the ACL confirms that the 'log' or 'log-input' keyword was added to the access list entry, enabling logging. D is correct because the 'ip access-list logging hash-generation' command causes IOS to include a hash value in ACL log messages; this hash is used to detect and suppress duplicate log entries, and its presence in the output confirms the feature is enabled. The other options are not supported: A cannot be confirmed without verifying the exact hex value against the packet count; C requires seeing a 'deny' action in the ACL entry; and E cannot be determined from ACL log output alone.

Community Discussion

No community discussion yet for this question.

Full 350-001 Practice