logo

CuriousTab

CuriousTab

Discussion


Home Networking Security See What Others Are Saying!
  • Question
  • If you wanted to deny FTP access from network 200.200.10.0 to network 200.199.11.0 but allow everything else, which of the following command strings is valid?


  • Options
  • A. access-list 110 deny 200.200.10.0 to network 200.199.11.0 eq ftp
    access-list 111 permit ip any 0.0.0.0 255.255.255.255
  • B. access-list 1 deny ftp 200.200.10.0 200.199.11.0 any any
  • C. access-list 100 deny tcp 200.200.10.0 0.0.0.255 200.199.11.0 0.0.0.255 eq ftp
  • D. access-list 198 deny tcp 200.200.10.0 0.0.0.255 200.199.11.0 0.0.0.255 eq ftp
    access-list 198 permit ip any 0.0.0.0 255.255.255.255

  • Correct Answer
  • access-list 198 deny tcp 200.200.10.0 0.0.0.255 200.199.11.0 0.0.0.255 eq ftp
    access-list 198 permit ip any 0.0.0.0 255.255.255.255
     

    Explanation
    Extended IP access lists use numbers 100-199 and 2000-2699 and filter based on source and destination IP address, protocol number, and port number. The last option is correct because of the second line that specifies permit ip any any. (I used 0.0.0.0 255.255.255.255, which is the same as the any option.) The third option does not have this, so it would deny access but not allow everything else.

  • More questions

    • 1. Which of the following encapsulates PPP frames in Ethernet frames and uses common PPP features like authentication, encryption, and compression?

    • Options
    • A. PPP
    • B. PPPoA
    • C. PPPoE
    • D. Token Ring
    • Discuss
    • 2. What flavor of Network Address Translation can be used to have one IP address allow many users to connect to the global Internet?

    • Options
    • A. NAT
    • B. Static
    • C. Dynamic
    • D. PAT
    • Discuss
    • 3. What is the frequency range of the IEEE 802.11g standard?

    • Options
    • A. 2.4Gbps
    • B. 5Gbps
    • C. 2.4GHz
    • D. 5GHz
    • Discuss
    • 4. Which class of IP address has the most host addresses available by default?

    • Options
    • A. A
    • B. B
    • C. C
    • D. A and B
    • Discuss
    • 5. How many non-overlapping channels are available with 802.11a?

    • Options
    • A. 3
    • B. 12
    • C. 23
    • D. 40
    • Discuss
    • 6. You have the following routing table. Which of the following networks will not be placed in the neighbor routing table?
      R    192.168.30.0/24 [120/1] via 192.168.40.1, 00:00:12, Serial0
      C    192.168.40.0/24 is directly connected, Serial0
           172.16.0.0/24 is subnetted, 1 subnets
      C    172.16.30.0 is directly connected, Loopback0
      R    192.168.20.0/24 [120/1] via 192.168.40.1, 00:00:12, Serial0
      R    10.0.0.0/8 [120/15] via 192.168.40.1, 00:00:07, Serial0
      C    192.168.50.0/24 is directly connected, Ethernet0

    • Options
    • A. 172.16.30.0
    • B. 192.168.30.0
    • C. 10.0.0.0
    • D. All of them will be placed in the neighbor routing table.
    • Discuss
    • 7. You have created a named access list called Blocksales. Which of the following is a valid command for applying this to packets trying to enter interface s0 of your router?

    • Options
    • A. (config)# ip access-group 110 in
    • B. (config-if)# ip access-group 110 in
    • C. (config-if)# ip access-group Blocksales in
    • D. (config-if)# blocksales ip access-list in
    • Discuss
    • 8. What multicast addresses does RIPng use?

    • Options
    • A. FF02::A
    • B. FF02::9
    • C. FF02::5
    • D. FF02::6
    • Discuss
    • 9. What is the maximum distance running the lowest data rate for 802.11a?

    • Options
    • A. About 100 feet
    • B. About 175 feet
    • C. About 300 feet
    • D. About 350 feet
    • Discuss
    • 10. Which of the following is considered to be the destination host before translation?

    • Options
    • A. Inside local
    • B. Outside local
    • C. Inside global
    • D. Outside global
    • Discuss


    Comments

    There are no comments.

Enter a new Comment