350-501 · Question #536
Refer to the exhibit. The network manager asked a network engineer to increase data-plane security on an Edge router connected to the internet with these requirements: - Allow incoming HTTP traffic…
The correct answer is C. Implement an access control list under the Gi1/0 interface. You meet those requirements by applying an IP ACL on the internet‑facing interface (Gi1/0) that permits TCP port 80 to 192.168.1.10, permits TCP port 22 from 10.0.0.10, explicitly denies TCP port 23, then permits any other traffic. ip access-list extended INTERNET-IN permit tcp…
Question
Refer to the exhibit. The network manager asked a network engineer to increase data-plane security on an Edge router connected to the internet with these requirements:
- Allow incoming HTTP traffic from any source to the Web server with IP address 192.168.1.10.
- Allow incoming SSH traffic from the management host with IP address 10.0.0.10.
- Block incoming Telnet traffic from all sources.
Which action must the engineer take to meet the requirements?
Exhibit
Options
- AImplement port security under the Gi0/0 interface.
- BImplement uRPF under the Gi1/0 interface.
- CImplement an access control list under the Gi1/0 interface.
- DImplement Network Address Translation under the Gi0/0 interface.
How the community answered
(39 responses)- A5% (2)
- B8% (3)
- C72% (28)
- D15% (6)
Explanation
You meet those requirements by applying an IP ACL on the internet‑facing interface (Gi1/0) that permits TCP port 80 to 192.168.1.10, permits TCP port 22 from 10.0.0.10, explicitly denies TCP port 23, then permits any other traffic. ip access-list extended INTERNET-IN permit tcp any host 192.168.1.10 eq 80 permit tcp host 10.0.0.10 host 192.168.1.10 eq 22 deny tcp any any eq 23 permit ip any any interface GigabitEthernet1/0 ip access-group INTERNET-IN in
Topics
Community Discussion
No community discussion yet for this question.