nerdexam
Cisco

350-001 · Question #19

Refer to the exhibit. Which two statements are correct? (Choose two.)

The correct answer is B. The access list has logging enabled. D. The command ip access-list logging hash-generation is enabled. B is correct because the presence of logging output for the ACL confirms that the 'log' or 'log-input' keyword was added to the access list entry, enabling logging. D is correct because the 'ip access-list logging hash-generation' command causes IOS to include a hash value in…

Security

Question

Refer to the exhibit. Which two statements are correct? (Choose two.)

Options

  • AThe hexadecimal value of the number of packets that hit the access list is 0x723E6E12.
  • BThe access list has logging enabled.
  • CThe packet was discarded.
  • DThe command ip access-list logging hash-generation is enabled.
  • EThe Telnet connection is successfully set up.

How the community answered

(60 responses)
  • A
    3% (2)
  • B
    83% (50)
  • C
    3% (2)
  • E
    10% (6)

Explanation

B is correct because the presence of logging output for the ACL confirms that the 'log' or 'log-input' keyword was added to the access list entry, enabling logging. D is correct because the 'ip access-list logging hash-generation' command causes IOS to include a hash value in ACL log messages; this hash is used to detect and suppress duplicate log entries, and its presence in the output confirms the feature is enabled. The other options are not supported: A cannot be confirmed without verifying the exact hex value against the packet count; C requires seeing a 'deny' action in the ACL entry; and E cannot be determined from ACL log output alone.

Topics

#ACL logging#hash-generation#access-list#packet logging

Community Discussion

No community discussion yet for this question.

Full 350-001 Practice