ACMP_6.3 · Question #77
Refer to the following configuration segment for this item. netdestination "internal" no invert network 172.16.43.0 255.255.255.0 position 1 range 172.16.11.0 172.16.11.16 position 2 ! ip…
The correct answer is B. The frame will be dropped because of the implicit deny all at the end of the firewall policy. See the full explanation below for the reasoning.
Question
Refer to the following configuration segment for this item. netdestination "internal" no invert network 172.16.43.0 255.255.255.0 position 1 range 172.16.11.0 172.16.11.16 position 2 ! ip access-list session "My-Policy" alias "user" alias "internal" service_any permit queue low ! A user frame is evaluated against this firewall policy with the following attributes:
Source IP: 172.17.49.3 Destination IP: 10.100.86.37 Destination Port:
80 Referring to the above file segment, how will the frame be handled by this firewall policy?
Options
- AThe frame will be dropped because of the implicit deny all at the end of the netdestination
- BThe frame will be dropped because of the implicit deny all at the end of the firewall policy.
- CThe frame will be forwarded because of the implicit permit all at the end of the firewall policy.
- DThe frame will be passed because there is no service specified in the firewall policy.
- EThe frame will be dropped because there is no service specified in the firewall policy.
How the community answered
(14 responses)- A14% (2)
- B79% (11)
- D7% (1)
Community Discussion
No community discussion yet for this question.