Ccna 3 Chapter 8 V4.0 Answers
1.Refer to the exhibit. A network administrator needs to add the command deny ip
10.0.0.0 0.255.255.255 any log to R3. After adding the command, the administrator verifies the change using the show access - list command. What sequence number does the new entry have?
0 10, and all other items are shifted down to the next sequence number 50 60 *****
2.Refer to the exhibit. What happens if the network administrator issues the commands shown when an ACL called Managers already exists on the router? The new commands overwrite the current Managers ACL. The new commands are added to the end of the current Managers ACL. *****
The new commands are added to the beginning of the current Managers ACL. An error appears stating that the ACL already exists.
3
Why are inbound ACLs more ef ficient for the router than outbound ACLs? Inbound ACLs deny packets before routing lookups are required. ***** Inbound ACL operation requires less network bandwidth than outbound. Inbound ACLs permit or deny packets to LANs, which are typically more effic ient than WANs. Inbound ACLs are applied to Ethernet interfaces, while outbound ACLs are applied to slower serial interfaces.
4
Refer to the exhibit. The network administrator of a company needs to configure the router RTA to allow its business partner
(Partner A) to access the web server located in the internal network. The web server is assigned a private IP address, and a static
NAT is configured on the router for its public IP address. Finally, the administrator adds the ACL. However, Partner A is de nied access to the web server. What is the cause of the problem? Port 80 should be specified in the ACL. ***** The public IP address of the server, 209.165.201.5, should be specified as the destination. The ACL should be applied on the s0/0 outbound interf ace. The source address should be specified as 198.133.219.0 255.255.255.0 in
10.0.0.0 0.255.255.255 any log to R3. After adding the command, the administrator verifies the change using the show access - list command. What sequence number does the new entry have?
0 10, and all other items are shifted down to the next sequence number 50 60 *****
2.Refer to the exhibit. What happens if the network administrator issues the commands shown when an ACL called Managers already exists on the router? The new commands overwrite the current Managers ACL. The new commands are added to the end of the current Managers ACL. *****
The new commands are added to the beginning of the current Managers ACL. An error appears stating that the ACL already exists.
3
Why are inbound ACLs more ef ficient for the router than outbound ACLs? Inbound ACLs deny packets before routing lookups are required. ***** Inbound ACL operation requires less network bandwidth than outbound. Inbound ACLs permit or deny packets to LANs, which are typically more effic ient than WANs. Inbound ACLs are applied to Ethernet interfaces, while outbound ACLs are applied to slower serial interfaces.
4
Refer to the exhibit. The network administrator of a company needs to configure the router RTA to allow its business partner
(Partner A) to access the web server located in the internal network. The web server is assigned a private IP address, and a static
NAT is configured on the router for its public IP address. Finally, the administrator adds the ACL. However, Partner A is de nied access to the web server. What is the cause of the problem? Port 80 should be specified in the ACL. ***** The public IP address of the server, 209.165.201.5, should be specified as the destination. The ACL should be applied on the s0/0 outbound interf ace. The source address should be specified as 198.133.219.0 255.255.255.0 in