PrepAway - Latest Free Exam Questions & Answers

A network associate is adding security to the configuration of the Corp1 router…

Lab – Access List Simulation
A network associate is adding security to the configuration of the Corp1 router. The user on host C
should be able to use a web browser to access financial information from the Finance Web Server.
No other hosts from the LAN nor the Core should be able to use a web browser to access this
server. Since there are multiple resources for the corporation at this location including other
resources on the Finance Web Server, all other traffic should be allowed.
The task is to create and apply a numbered access-list with no more than three statements that
will allow ONLY host C web access to the Finance Web Server. No other hosts will have web
access to the Finance Web Server. All other traffic is permitted.
Access to the router CLI can be gained by clicking on the appropriate host.
All passwords have been temporarily set to “cisco”.
The Core connection uses an IP address of 198.18.196.65
The computers in the Hosts LAN have been assigned addresses of 192.168.33.1 – 92.168.33.254
Host A 192.168.33.1
Host B 192.168.33.2
Host C 192.168.33.3
Host D 192.168.33.4
The servers in the Server LAN have been assigned addresses of 172.22.242.17 – 172.22.242.30
The Finance Web Server is assigned an IP address of 172.22.242.23.
The Public Web Server is assigned an IP address of 172.22.242.17

PrepAway - Latest Free Exam Questions & Answers

Answer: See the explanation

Explanation:
Corp1#configure terminal

2 Comments on “A network associate is adding security to the configuration of the Corp1 router…

  1. Wompers says:

    Corp1>enable
    Password: cisco
    Corp1#show ip interface brief
    Interface IP-Address OK? Method Status Protocol
    FastEthernet0/0 192.168.33.254 YES manual up up
    FastEthernet0/1 172.22.242.30 YES manual up up
    Serial0/0 198.18.196.65 YES manual up up
    Corp1#configure terminal

    Corp1(config)#access-list 100 permit tcp host 192.168.33.3 host 172.22.242.23 eq 80

    Corp1(config)#access-list 100 deny tcp any host 172.22.242.23 eq 80

    Corp1(config)#access-list 100 permit ip any any

    Corp1(config)#interface fa0/1
    Corp1(config-if)#ip access-group 100 out

    Corp1(config-if)#end
    Corp1#copy running-config startup-config




    0



    0

Leave a Reply