Question 4 - Extended ACL Flashcards
0
Q
All hosts should be prevented from accessing 177.0.0.1 for any
purpose.
A
access-list 101 deny ip any host 177.0.0.1
The destination address is specified with the term host as it is a specific address.
1
Q
Block traffic coming from the third subnet (use subnet 0) of 196.18.12.0/27 from accessing HTTP.
A
access-list 101 deny tcp 196.18.12.64 0.0.0.31 any eq 80 (or www) Only a source address is required as traffic is blocked to any address
using the HTTP protocol.
2
Q
All other traffic should be allowed.
A
access-list 101 permit ip any any
Required because there is an implicit deny statement.