Exam 300-410 topic 1 question 410 discussion

Actual exam question from Cisco's 300-410

Question #: 410
Topic #: 1

Refer to the exhibit. The ACL is placed on the inbound Gigabit 0/1 interface of the router. Host 192.168.10.10 cannot SSH to host 192.168.100.10 even though the flow is permitted. Which action resolves the issue without opening full access to this router?

A. Temporarily move the permit ip any any line to the beginning of the ACL to see if the flow works
B. Temporarily remove the ACL from the interface to see if the flow works.
C. Move the SSH entry to the beginning of the ACL.
D. Run the show access-list FILTER command to view if the SSH entry has any hit statistics associated with it.

Show Suggested Answer

Suggested Answer: C 🗳️

by inteldarvid at Aug. 2, 2023, 1:36 p.m.

Comments

Submit Cancel

bk989

1 year ago

A or B open up full access to the router, even temporarily. D doesn't solve problem. But C isn't an existing command....

upvoted 1 times

...

Coffee_bean_master

1 year, 2 months ago

Selected Answer: C

Remember that ACLs are read by the router from top to bottom. If there is a hit in any of the first entries, it will go ahead and perform the permit or deny that is specified in the entry.

upvoted 3 times

...

inteldarvid

2 years ago

Selected Answer: C

correct

upvoted 2 times

Pietjeplukgeluk

1 year, 6 months ago

The answer could be a little more descriptive on what ACL entry needs to be moved, anyway, C is correct :)

upvoted 1 times

...