Join Examsbook
1099 0

Q: If you wanted to deny all Telnet connections to only network 192.168.10.0, which command could you use?

  • 1
    access-list 100 deny tcp 192.168.10.0 255.255.255.0 eq telnet
  • 2
    access-list 100 deny tcp 192.168.10.0 0.255.255.255 eq telnet
  • 3
    access - list 100 deny tcp any 192.168.10.0 0.0.0.255 eq 23
  • 4
    access - list 100 deny 192.168.10.0 0.0.0.255 any eq 23
  • Show AnswerHide Answer
  • Workspace

Answer : 3. "access - list 100 deny tcp any 192.168.10.0 0.0.0.255 eq 23"
Explanation :

Answer: C) access - list 100 deny tcp any 192.168.10.0 0.0.0.255 eq 23 Explanation: The extended access list ranges are 100 - 199 and 2000 - 2699, so the access-list number of 100 is valid. Telnet uses TCP, so the protocol TCP is valid. Now you just need to look for the source and destination address. only the third option has the correct sequence of parameters. Option B may work, but the question specifically states "only" to network 192.168.10.0, and the wildcard in option B is too broad.

Are you sure

  Report Error

Please Enter Message
Error Reported Successfully