Exam 200-301 topic 1 question 621 discussion

Edit: forget, answer is OK. I misread.

extended ACL close to source source IP if applied to R2 is 10.0.10.0 destination 10.0.20.0 all configs has to do with the R2 two int

Can't be E because an extended access list needs to be closest to source

deny tcp 10.0.10.0 0.0.0.63 10.0.20.0 0.0.0.63 eq 25 deny tcp 10.0.10.0 0.0.0.63 10.0.20.0 0.0.0.63 eq 80 permit ip any any

A and D are the correct, all the configuration is applied on R2. R1 has nothing to do on this question.

A and D are correct All ACLs have a implicit deny at the end which blocks all traffic so we need to add a permit to allow that traffic through The Source and destinations then need swapped. Using packet tracer the source has to be first... R1(config)#access-list 101 deny tcp ? A.B.C.D Source address any Any source host host A single source host and then the destination- R1(config)#access-list 101 deny tcp 10.0.10.0 0.0.0.63 ? A.B.C.D Destination address any Any destination host eq Match only packets on a given port number gt Match only packets with a greater port number host A single destination host lt Match only packets with a lower port number neq Match only packets not on a given port number range Match only packets in the range of port numbers

it should be A and E, moving the acl to the router 1 port 2, does the same like in the router router 2 port 2, important is the allow command at the end of the acl or the implicit deny kicks in

without the permit statement, it'll just deny those things and do nothing else for acls, you enter the source first and then the dest: source_address_argument [port_argument] dest_address_argument [port_argument] indicated answers are good

I think A, C are correct

I THINK its DE because D should be moved closest to the source for extended, and because we are denying traffic, it auto permits all the rest of the traffic, leaving us with needing to swap the dest and source around to make the question true.

I think A, C are correct

Correct Answers

Wrong. Should be D E. Extended should be moved close to the source of trafic, so here interface Gi0/2 on R2. And ip should be swapped.