ExamTopics Logo
Mail Us[email protected]
Menu
Cisco Discussions
exam questions

Exam 200-150 All Questions

View all questions & answers for the 200-150 exam
Go to Exam

Exam 200-150 topic 1 question 57 discussion

Actual exam question from Cisco's 200-150
Question #: 57
Topic #: 1
[All 200-150 Questions]

What is the correct format of an access control list on a Cisco Nexus switch to deny hosts on the 172.16.1.0/21 network from accessing HTTP proxy servers listening on port 8080?

  • A. N5K-A(config)# ip access-list 101 N5K-A(config-acl)# deny tcp 172.16.1.0 0.0.7.255 any eq 8080 N5K-A(config-acl)# permit ip any any
  • B. N5K-A(config)# ip access-list 101 N5K-A(config-acl)# deny tcp any 172.16.1.0 255.255.248.0 eq 8080 N5K-A(config-acl)# permit ip any any
  • C. N5K-A(config)# access-list 101 deny tcp 172.16.1.0 0.0.15.255 eq 8080
  • D. N5K-A(config)# ip access-list 101 N5K-A(config-acl)# deny tcp any host 172.16.1.0/21 eq 8080
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
by snapper at Aug. 19, 2019, 12:18 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
snapper
5 years, 10 months ago
That should say the wildcard mask is the inverse of the subnet mask.
upvoted 1 times
...
snapper
5 years, 10 months ago
This one was easy because of the mask. A /21 is: 11111000.00000000 The mask is the opposite of the mask: 00000111.1111111 (or 7.255). Only anwer A has a mask of 0.0.7.255
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel