Cisco
500-260 · Question #45
An inside client on the 10.0.0.0/8 network connects to an outside server on the 172.16.0.0/16 network using TCP and the server port of 2001. The inside client negotiates a client port in the range…
The correct answer is A. access-list INSIDE line 1 permit tcp 10.0.0.0 255.0.0.0 172.16.0.0 255.255.0.0 eq 2001 G. established tcp 2001 permit to udp 5000-5500. See the full explanation below for the reasoning.
Question
An inside client on the 10.0.0.0/8 network connects to an outside server on the 172.16.0.0/16 network using TCP and the server port of 2001. The inside client negotiates a client port in the range between UDP ports 5000 to 5500. The outside server then can start sending UDP data to the inside client on the negotiated port within the specified UDP port range. Which two options show the required Cisco ASA command(s) to allow this scenario? (Choose two.)
Options
- Aaccess-list INSIDE line 1 permit tcp 10.0.0.0 255.0.0.0 172.16.0.0 255.255.0.0 eq 2001
- Baccess-list INSIDE line 1 permit tcp 10.0.0.0 255.0.0.0 172.16.0.0 255.255.0.0 eq 2001
- Caccess-list OUTSIDE line 1 permit tcp 172.16.0.0 255.255.0.0 eq 2001 10.0.0.0 255.0.0.0
- Daccess-list OUTSIDE line 1 permit tcp 172.16.0.0 255.255.0.0 eq 2001 10.0.0.0 255.0.0.0
- Eestablished tcp 2001 permit udp 5000-5500
- Festablished tcp 2001 permit from udp 5000-5500
- Gestablished tcp 2001 permit to udp 5000-5500
How the community answered
(20 responses)- A80% (16)
- C5% (1)
- D10% (2)
- F5% (1)
Community Discussion
No community discussion yet for this question.