nerdexam
Cisco

350-501 · Question #229

Refer to the exhibit. A network engineer notices that router R2 is failing to install network 172.16.33.1/32 in the routing table. Which configuration must the engineer apply to R2 to fix the problem?

The correct answer is C. R2(config)# access-list 1 permit 172.16.33.0 0.0.0.255. If a router is failing to install a specific /32 host route, an access-list acting as a route filter needs to be configured correctly to permit that precise IP address.

Networking

Question

Refer to the exhibit. A network engineer notices that router R2 is failing to install network 172.16.33.1/32 in the routing table. Which configuration must the engineer apply to R2 to fix the problem?

Exhibit

350-501 question #229 exhibit

Options

  • AR2(config)# access-list 1 permit 172.16.33.0 255.0.0.0
  • BR2(config)# access-list 1 permit 172.16.33.0 255.255.255.0
  • CR2(config)# access-list 1 permit 172.16.33.0 0.0.0.255
  • DR2(config)# access-list 1 permit 172.16.33.0 255.255.0.0

How the community answered

(56 responses)
  • A
    5% (3)
  • B
    9% (5)
  • C
    84% (47)
  • D
    2% (1)

Why each option

If a router is failing to install a specific /32 host route, an access-list acting as a route filter needs to be configured correctly to permit that precise IP address.

AR2(config)# access-list 1 permit 172.16.33.0 255.0.0.0

A wildcard mask of 255.0.0.0 is syntactically incorrect for a standard access list; wildcard masks are inverse masks and should have zeros for bits that must match and ones for bits that can vary.

BR2(config)# access-list 1 permit 172.16.33.0 255.255.255.0

A wildcard mask of 255.255.255.0 is syntactically incorrect; it should be an inverse mask (e.g., 0.0.0.255 for a /24 network).

CR2(config)# access-list 1 permit 172.16.33.0 0.0.0.255Correct

The access-list entry 'permit 172.16.33.0 0.0.0.255' uses a wildcard mask that matches any IP address within the 172.16.33.0/24 subnet. This range includes 172.16.33.1, thereby allowing the 172.16.33.1/32 route to be permitted and installed in the routing table if this ACL is used for filtering.

DR2(config)# access-list 1 permit 172.16.33.0 255.255.0.0

A wildcard mask of 255.255.0.0 is syntactically incorrect for a standard access list, as it does not follow the inverse mask convention for specifying network ranges.

Concept tested: Cisco ACL wildcard masks for route filtering

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_acl/configuration/xe-16/sec-acl-xe-16-book/sec-acl-overview.html

Topics

#Access-Lists#Wildcard Masks#Routing Policies#IP Addressing

Community Discussion

No community discussion yet for this question.

Full 350-501 Practice