CCNA Exploration 4 Accessing the WAN Chapter 5

《CCNA Exploration 4 Accessing the WAN Chapter 5》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、CCNAExploration4AccessingtheWANChapter51WhichthreeparameterscanACLsusetofiltertraffic?(Choosethree.)234packetsizeprotocolsuitesourceaddressdestinationaddresssourcerouterinterfacedestinationrouterinterface2Interfaces0/0/0alreadyhasanIPACLappliedinbound.Whatha

2、ppenswhenthenetworkadministratorattemptstoapplyasecondinboundIPACL?1ThesecondACLisappliedtotheinterface,replacingthefirst.BothACLsareappliedtotheinterface.Thenetworkadministratorreceivesanerror.OnlythefirstACLremainsappliedtotheinterface.3Anetworkadministrat

3、orneedstoallowtrafficthroughthefirewallrouterforsessionsthatoriginatefromwithinthecompanynetwork,buttheadministratormustblocktrafficforsessionsthatoriginateoutsidethenetworkofthecompany.WhattypeofACLismostappropriate?3dynamicport-basedreflexivetime-based4Ref

4、ertotheexhibit.ACL120isconfiguredinboundontheserial0/0/0interfaceonrouterR1,butthehostsonnetwork172.11.10.0/24areabletotelnettonetwork10.10.0.0/16.Onthebasisoftheprovidedconfiguration,whatshouldbedonetoremedytheproblem?1ApplytheACLoutboundontheserial0/0/0int

5、erfaceonrouterR1.ApplytheACLoutboundontheFastEthernet0/0interfaceonrouterR1.IncludetheestablishedkeywordattheendofthefirstlineintheACL.IncludeastatementintheACLtodenytheUDPtrafficthatoriginatesfrom172.11.10.0/24network.5Refertotheexhibit.Theadministratorwish

6、estoblockwebtrafficfrom192.168.1.50fromreachingthedefaultportofthewebserviceon192.168.3.30.Todothis,theaccesscontrollistnameisappliedinboundontherouterR1LANinterface.Aftertestingthelist,theadministratorhasnotedthatthewebtrafficremainssuccessful.Whyiswebtraff

7、icreachingthedestination?4Webtrafficdoesnotuseport80bydefault.Theaccesslistisappliedinthewrongdirection.Theaccesslistneedstobeplacedclosertothedestination,onR3.Therangeofsourceaddressesspecifiedinline10doesnotincludehost192.168.1.50.6Whichbenefitdoesanextend

8、edACLofferoverastandardACL?4ExtendedACLscanbenamed,butstandardACLscannot.UnlikestandardACLs,extendedACLScanbeappliedintheinboundoroutbounddirection.Basedonpayloadcontent,anextendedACLcanfilterpa