Exam 300-510 topic 1 question 213 discussion

Actual exam question from Cisco's 300-510

Question #: 213
Topic #: 1

Refer to the exhibit. A network engineer must correct the security policy on the EDGE_R router, which is connected to two Tier 1 ISPs. After another engineer added ip as-path access-list 11 permit 11 to EDGE_R, some routes from AS 11 and AS 4832 started to appear in the routing information base (RIB). Traffic control via Community options is disabled on both ISPs.
How should the network engineer update the router configuration on EDGE_R so that only routes for AS 11 are permitted?

A. Configure ip as-path distribution-list 11 deny *[0-9]+$.
B. Configure ip as-path access-list 11 deny_4832$.
C. Configure ip as-path access-list 11 permit_11_.
D. Configure ip as-path prefix-list 11 permit_11$.

Show Suggested Answer

Suggested Answer: B 🗳️

by snowbow at May 24, 2024, 7:13 p.m.

Comments

Submit Cancel

snowbow

11 months, 2 weeks ago

What a strange way to word this.. What does "only routes for AS 11 are permitted" mean?? Do we mean routes that traverse AS 11? then C, Do we mean routes originating from AS 11? Then D. B will just deny ALL routes due to implicit deny..

upvoted 2 times

Seele

9 months, 4 weeks ago

And since also the question said that "some routes from AS 11" so we can safely assume that it indeed originated in AS11.

upvoted 1 times

...

Seele

9 months, 4 weeks ago

Definitely a weird way to construct the question. I think when it meant by updating the configuration, it just wants to add the configuration after the initial one, hence why B is the answer.

upvoted 1 times

...

Exam 300-510 All Questions

View all questions & answers for the 300-510 exam

Exam 300-510 topic 1 question 213 discussion

Comments

snowbow

Seele

Seele

SY0-701