SY0-701 · Question #116
An enterprise is trying to limit outbound DNS traffic originating from its internal network. Outbound DNS requests will only be allowed from one device with the IP address 10.50.10.25. Which of the…
The correct answer is D. Access list outbound permit 10.50.10.25 32 0.0.0.0/0 port 53. The correct answer is D because it allows only the device with the IP address 10.50.10.25 to send outbound DNS requests on port 53, and denies all other devices from doing so. The other options are incorrect because they either allow all devices to send outbound DNS requests (A…
Question
An enterprise is trying to limit outbound DNS traffic originating from its internal network. Outbound DNS requests will only be allowed from one device with the IP address 10.50.10.25. Which of the following firewall ACLs will accomplish this goal?
Options
- AAccess list outbound permit 0.0.0.0 0 0.0.0.0/0 port 53
- BAccess list outbound permit 0.0.0.0/0 10.50.10.25 32 port 53
- CAccess list outbound permit 0.0.0.0 0 0.0.0.0/0 port 53
- DAccess list outbound permit 10.50.10.25 32 0.0.0.0/0 port 53
How the community answered
(30 responses)- A3% (1)
- B3% (1)
- C10% (3)
- D83% (25)
Explanation
The correct answer is D because it allows only the device with the IP address 10.50.10.25 to send outbound DNS requests on port 53, and denies all other devices from doing so. The other options are incorrect because they either allow all devices to send outbound DNS requests (A and C), or they allow no devices to send outbound DNS requests (B).
Community Discussion
No community discussion yet for this question.