nerdexam
GAQM

CPEH-001 · Question #148

The security administrator of ABC needs to permit Internet traffic in the host 10.0.0.2 and UDP traffic in the host 10.0.0.3. He also needs to permit all FTP traffic to the rest of the network and…

The correct answer is D. The first ACL is denying all TCP traffic and the other ACLs are being ignored by the router. See the full explanation below for the reasoning.

Question

The security administrator of ABC needs to permit Internet traffic in the host 10.0.0.2 and UDP traffic in the host 10.0.0.3. He also needs to permit all FTP traffic to the rest of the network and deny all other traffic. After he applied his ACL configuration in the router, nobody can access to the ftp, and the permitted hosts cannot access the Internet. According to the next configuration, what is happening in the network?

Options

  • AThe ACL 104 needs to be first because is UDP
  • BThe ACL 110 needs to be changed to port 80
  • CThe ACL for FTP must be before the ACL 110
  • DThe first ACL is denying all TCP traffic and the other ACLs are being ignored by the router

How the community answered

(31 responses)
  • A
    3% (1)
  • B
    6% (2)
  • C
    10% (3)
  • D
    81% (25)

Community Discussion

No community discussion yet for this question.

Full CPEH-001 Practice