The security administrator needs to manage traffic on a layer 3 device to support FTP from a new
remote site. Which of the following would need to be implemented?
A.
Implicit deny
B.
VLAN management
C.
Port security
D.
Access control lists
Get 50% Discount on All Your Purchases
at PrepAway.com - Latest Exam Questions
This is ONE TIME OFFER
50%
First, a reminder of all the layers:
Layer 7–Application layer.
Layer 6–Presentation layer.
Layer 5–Session layer.
Layer 4–Transport layer.
Layer 3–Network layer.
Layer 2–Data Link layer.
Layer 1–Physical layer.
In this question we need to configure routing using a layer 3 device ( a Network layer device.)
In the OSI model, IP addressing and IP routing are performed at layer 3 (the network layer).
When configuring routing, you specify which IP range (in this case, the IP subnet of the remote site) is allowed to route traffic through the router to the FTP server.
Traffic that comes into the router is compared to ACL entries based on the order that the entries occur in the router.
New statements are added to the end of the list. The router continues to look until it has a match.
If no matches are found when the router reaches the end of the list, the traffic is denied.
For this reason, you should have the frequently hit entries at the top of the list. There is an implied deny for traffic that is not permitted.
0
0