350-701 · Question #639
A network engineer must create an access control list on a Cisco Adaptive Security Appliance firewall. The access control list must permit HTTP traffic to the internet from the organization's inside…
The correct answer is C. access-list HTTP-ONLY extended permit tcp 192.168.1.0 255.255.255.0 any eq 80. Option C is correct because it follows the proper Cisco ASA extended ACL syntax: 'access-list [name] extended [action] [protocol] [source] [source-mask] [destination] [destination-mask] [port]'. It specifies the ACL name 'HTTP-ONLY', declares it as 'extended', permits TCP…
Question
A network engineer must create an access control list on a Cisco Adaptive Security Appliance firewall. The access control list must permit HTTP traffic to the internet from the organization’s inside network 192.168.1.0/24. Which IOS command must be used to create the access control list? A. B. C. D.
Options
- Aaccess-list HTTP-ONLY extended permit tcp 192.168.1.0 255.255.255.0
- Baccess-list EXTENDED permit tcp 192.168.1.0 255.255.255.0 any eq 80.
- Caccess-list HTTP-ONLY extended permit tcp 192.168.1.0 255.255.255.0 any eq 80.
- Daccess-list permit http 192.168.1.0 255.255.255.0 any.
How the community answered
(39 responses)- A5% (2)
- B3% (1)
- C79% (31)
- D13% (5)
Explanation
Option C is correct because it follows the proper Cisco ASA extended ACL syntax: 'access-list [name] extended [action] [protocol] [source] [source-mask] [destination] [destination-mask] [port]'. It specifies the ACL name 'HTTP-ONLY', declares it as 'extended', permits TCP traffic from the 192.168.1.0/24 network to 'any' destination on port 80 (HTTP), which is exactly what the requirement demands.
Topics
Community Discussion
No community discussion yet for this question.