logo

CuriousTab

CuriousTab

Discussion


Home Networking Security See What Others Are Saying!
  • Question
  • If you wanted to deny FTP access from network 200.200.10.0 to network 200.199.11.0 but allow everything else, which of the following command strings is valid?


  • Options
  • A. access-list 110 deny 200.200.10.0 to network 200.199.11.0 eq ftp
    access-list 111 permit ip any 0.0.0.0 255.255.255.255
  • B. access-list 1 deny ftp 200.200.10.0 200.199.11.0 any any
  • C. access-list 100 deny tcp 200.200.10.0 0.0.0.255 200.199.11.0 0.0.0.255 eq ftp
  • D. access-list 198 deny tcp 200.200.10.0 0.0.0.255 200.199.11.0 0.0.0.255 eq ftp
    access-list 198 permit ip any 0.0.0.0 255.255.255.255

  • Correct Answer
  • access-list 198 deny tcp 200.200.10.0 0.0.0.255 200.199.11.0 0.0.0.255 eq ftp
    access-list 198 permit ip any 0.0.0.0 255.255.255.255
     

    Explanation
    Extended IP access lists use numbers 100-199 and 2000-2699 and filter based on source and destination IP address, protocol number, and port number. The last option is correct because of the second line that specifies permit ip any any. (I used 0.0.0.0 255.255.255.255, which is the same as the any option.) The third option does not have this, so it would deny access but not allow everything else.

  • More questions

    • 1. How many collision domains are created when you segment a network with a 12-port switch?

    • Options
    • A. 1
    • B. 2
    • C. 5
    • D. 12
    • Discuss
    • 2. What is the maximum distance with maximum data rate for 802.11g?

    • Options
    • A. About 65-75 feet
    • B. About 90-100 feet
    • C. About 150 feet
    • D. Over 200 feet
    • Discuss
    • 3. Which of the following commands will allow you to set your Telnet password on a Cisco router?

    • Options
    • A. line telnet 0 4
    • B. line aux 0 4
    • C. line vty 0 4
    • D. line con 0
    • Discuss
    • 4. You need to subnet a network that has 5 subnets, each with at least 16 hosts. Which classful subnet mask would you use?

    • Options
    • A. 255.255.255.192
    • B. 255.255.255.224
    • C. 255.255.255.240
    • D. 255.255.255.248
    • Discuss
    • 5. Which command is required for connectivity in a Frame Relay network if Inverse ARP is not operational?

    • Options
    • A. frame-relay arp
    • B. frame-relay map
    • C. frame-relay interface-dci
    • D. frame-relay lmi-type
    • Discuss
    • 6. What VTP mode allows you to change VLAN information on the switch?

    • Options
    • A. Client
    • B. STP
    • C. Server
    • D. Transparent
    • Discuss
    • 7. The network address of 172.16.0.0/19 provides how many subnets and hosts?

    • Options
    • A. 7 subnets, 30 hosts each
    • B. 8 subnets, 8,190 hosts each
    • C. 8 subnets, 2,046 hosts each
    • D. 7 subnets, 2,046 hosts each
    • Discuss
    • 8. Which command will allow you to see real-time translations on your router?

    • Options
    • A. show ip nat translations
    • B. show ip nat statistics
    • C. debug ip nat
    • D. clear ip nat translations *
    • Discuss
    • 9. Which of the following is an IEEE standard for frame tagging?

    • Options
    • A. ISL
    • B. 802.3Z
    • C. 802.1Q
    • D. 802.3U
    • Discuss
    • 10. Which command will display all the EIGRP feasible successor routes known to a router?

    • Options
    • A. show ip routes *
    • B. show ip eigrp summary
    • C. show ip eigrp topology
    • D. show ip eigrp adjacencies
    • Discuss


    Comments

    There are no comments.

Enter a new Comment