An administrator wants to restrict traffic to FTP sites regardless of which PC the request comes from. Which of the following would BEST accomplish this?

The correct answer is C. A port filtering ACL. A port filtering ACL blocks or permits traffic based on TCP/UDP port numbers. FTP uses TCP port 21 (control) and port 20 (data transfer). By blocking these ports at the ACL level, FTP traffic is denied regardless of which PC or IP address originates the request. An IP filtering…

Network security

Question

Options

AAn IP filtering ACL
BA MAC filtering ACL
CA port filtering ACL
DA class matching ACL

How the community answered

(47 responses)

A
6% (3)
B
13% (6)
C
79% (37)
D
2% (1)

Explanation

A port filtering ACL blocks or permits traffic based on TCP/UDP port numbers. FTP uses TCP port 21 (control) and port 20 (data transfer). By blocking these ports at the ACL level, FTP traffic is denied regardless of which PC or IP address originates the request. An IP filtering ACL would require knowing and specifying every source IP, which changes per PC and is not scalable. A MAC filtering ACL works at Layer 2 and doesn't apply to routed traffic. A class matching ACL is not a standard ACL type for this use case.

Topics

#ACL#port filtering#FTP restriction#traffic control

Community Discussion

No community discussion yet for this question.

Full N10-005 Practice