Exam 300-410 All Questions

View all questions & answers for the 300-410 exam

Exam 300-410 topic 1 question 242 discussion

Actual exam question from Cisco's 300-410

Question #: 242
Topic #: 1

Refer to the exhibit. A network administrator notices these console messages from host 10.11.110.12 originating from interface E1/0. The administrator considers this an unauthorized attempt to access SNMP on R1. Which action prevents the attempts to reach R1 E1/0?

A. Configure IOS control plane protection using ACL 90 on interface E1/0.
B. Create an inbound ACL on interface E1/0 to deny SNMP from host 10.11.110.12.
C. Add a permit statement including the host 10.11.110.12 into ACL 90.
D. Configure IOS management plane protection using ACL 90 on interface E1/0.

Show Suggested Answer

Suggested Answer: B 🗳️

by inteldarvid at July 14, 2023, 3:10 p.m.

Comments

Submit Cancel

[Removed]

Highly Voted 1 year, 4 months ago

Selected Answer: B

Its B. ACL blocks the specific host/port incoming. You cannot use ACLs to protect the 'management plane' on an interface

upvoted 9 times

...

[Removed]

Highly Voted 1 year, 9 months ago

Selected Answer: D

Lets think through this. A) is wrong because SNMP functions in the management not the control plane. B) this sounds correct, but if you think about it, it may cause unintended traffic denies. If we create a new ACL to deny the host, the answer does not specify other parameters, and we could assume that a permit any at the end will be configured as well. C) is wrong, we are trying to block the host. D) seems to be the best answer. If we use the same ACL 90, we are inherently deny any other hosts that do not require access to R1's management plane, and only permit the ones defined in the ACL. D is the best answer B works, but not entirely the best answer.

upvoted 5 times

default_route

1 year ago

but option D has no association with SNMP... or is it implicit in the management plane??

upvoted 1 times

...

rgg

1 year, 4 months ago

In ACL 90 there is no IP that we need to block, so I think the right answer B.

upvoted 1 times

...

[Removed]

Most Recent 10 months, 1 week ago

Selected Answer: B

B is corerct

upvoted 1 times

...

Pietjeplukgeluk

10 months, 2 weeks ago

Selected Answer: B

So , management plane protection(MPP) can be added to an interface. This makes your router only reachable from that interface. But with MPP you can not specify an ACL. So i do not see how D could be correct. Picking B https://www.cisco.com/c/en/us/td/docs/ios/security/configuration/guide/sec_mgmt_plane_prot.html

upvoted 3 times

...

Coffee_bean_master

12 months ago

Selected Answer: B

The ACL would block SNMP packets from reaching the MGMT plane in the first place. Option D would also work but would still be processed via the MGMT plane and then be discarded. The less unnecessary packets processed through the MGMT/control plane the better in my opinion.

upvoted 3 times

...

ZamanR

1 year, 5 months ago

D is correct

upvoted 1 times

Tim303

1 year, 1 month ago

How D is correct?

upvoted 1 times

...

Fenix7

1 year, 8 months ago

snmp-server community Public RO 90 snmp-server community Private W 90 R1#show access-list 90 Standard IP access list 90 permit 10.11.110.11 permit 10.11.111.12 Console messages are from 10.11.110.12 See the difference between the permit IP statement and host IP? B is correct.

upvoted 4 times

...

guy276465281819372

1 year, 10 months ago

Selected Answer: D

The question does not specify if the new ACL (answer B) will allow other hosts to access the router through E1/0. I believe the best answer would be D as it uses the existing ACL which block access from the suspected attacker to access R1.

upvoted 1 times

...

inteldarvid

1 year, 10 months ago

Selected Answer: B

yes, correct option B. Easy question

upvoted 2 times

...