PrepAway - Latest Free Exam Questions & Answers

Which traffic is permitted by this ACL?

Refer to the exhibit.

Which traffic is permitted by this ACL?

PrepAway - Latest Free Exam Questions & Answers

A.
TCP traffic sourced from any host in the 172.26.26.8/29 subnet on any port to host 192.168.1.2
port 80 or 443

B.
TCP traffic sourced from host 172.26.26.21 on port 80 or 443 to host 192.168.1.2 on any port

C.
any TCP traffic sourced from host 172.26.26.30 destined to host 192.168.1.1

D.
any TCP traffic sourced from host 172.26.26.20 to host 192.168.1.2

Explanation:
www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a00800a5b9a.shtm
l
Extended ACLs
Extended ACLs were introduced in Cisco IOS Software Release 8.3. Extended ACLs control traffic
by the comparison of the source and destination addresses of the IP packets to the addresses
configured in the ACL.
IP
access-list access-list-number
[dynamic dynamic-name [timeout minutes]]
{deny|permit} protocol source source-wildcard
destination destination-wildcard [precedence precedence]
[tos tos] [log|log-input] [time-range time-range-name]
ICMP
access-list access-list-number
[dynamic dynamic-name [timeout minutes]]
{deny|permit} icmp source source-wildcard
destination destination-wildcard
[icmp-type [icmp-code] |icmp-message]
[precedence precedence] [tos tos] [log|log-input]
[time-range time-range-name]
TCP
access-list access-list-number
[dynamic dynamic-name [timeout minutes]]
{deny|permit} tcp source source-wildcard [operator [port]]
destination destination-wildcard [operator [port]]
[established] [precedence precedence] [tos tos]
[log|log-input] [time-range time-range-name]

UDP
access-list access-list-number
[dynamic dynamic-name [timeout minutes]]
{deny|permit} udp source source-wildcard [operator [port]]
destination destination-wildcard [operator [port]]
[precedence precedence] [tos tos] [log|log-input]
[time-range time-range-name]


Leave a Reply