A network engineer must create an access control list on a Cisco Router to permit TCP DNS traffic to the internet from the organization's inside network 192.168.1.0/24. Which IOS command must be…

The correct answer is A. access-list 102 permit tcp 192.168.1.0 0.0.0.255 any eq domain. The command must permit TCP traffic originating from the inside subnet, use the correct wildcard mask, specify any destination, and match DNS by using the domain keyword, which represents TCP/UDP port 53.

Submitted by anjalisingh· Mar 30, 2026Network Security

Question

A network engineer must create an access control list on a Cisco Router to permit TCP DNS traffic to the internet from the organization’s inside network 192.168.1.0/24. Which IOS command must be used to implement the access control list?

Options

Aaccess-list 102 permit tcp 192.168.1.0 0.0.0.255 any eq domain
Caccess-list 102 permit tcp 192.168.1.0 0.0.0.255 eq 53
Daccess-list 102 permit tcp 192.168.1.0 0.0.0.255 any eq 53 any

How the community answered

(29 responses)

A
79% (23)
C
7% (2)
D
14% (4)

Explanation

The command must permit TCP traffic originating from the inside subnet, use the correct wildcard mask, specify any destination, and match DNS by using the domain keyword, which represents TCP/UDP port 53.

Topics

#ACL#DNS#TCP port 53#Cisco IOS

Community Discussion

No community discussion yet for this question.

Full 350-701 Practice