Skillset can help you prepare! Sign up for your free Skillset account and take the first steps towards your certification.
Refer to the exhibit. An ACL is created to prevent all traffic originating from LAN 192.168.50.0/24 from entering R1 router. The ACL is not functioning properly and all traffic is allowed to pass. Which command can be issued on router R1 to fix this problem?
(The answer is incorrect if you want to prevent the traffic from entering the router)ip access-list 110 out
ip access-group 110 in
ip access-class 110 in
ip access-group 110 out
ip access-list 110 in
Since the ACL is 110, it is an Extended ACL. They get placed as close to the source as possible. In this case, the source is traffic originating in the 192.168.50/24 network, associated with R1. The ACL would be placed on the interface closest to the source. Since we only know of the one interface Serial1/0, that would be our source interface (most likely there would also be an interface facing the LAN).
The ACL has not been assigned to any interface. Use the command "ip access-group 110 out" to assign the ACL to match all outbound traffic to the interface Serial1/0. For more information refer to: http://www.cisco.com/c/en/us/support/docs/security/ios-firewall/23602-confaccesslists.html
Study thousands of practice questions that organized by skills and ranked by difficulty.
Create a tailored training plan based on the knowledge you already possess.
Know when you’re ready for the high-stakes exam. Have the confidence that you will pass on your first attempt.