Refer to the exhibit. A network administrator configured an IPv6 access list to allow TCP return traffic only, but it is not working as expected. Which changes resolve this issue? A. B. C. D.
TCP hosts establish a connection-oriented session with one another using a “three-way handshake” mechanism.
As far as I know, the TCP return frame is the last frame involved in the three-way handshake (the ACK frame). Then, the session between the two hosts is established.
So:
permit tcp any any established (let the TCP return frame in, from any host)
deny ipv6 any any log (deny any other IPv6 traffic from any host)
Since the TCP return frame must be allowed IN, the ACL must be applied IN.
Answer A is correct.
A and B could be both correct. It is not clear if its about traffic to- or from the router. I assumed TCP session towards the router and picked B. Is there some indication of the direction of the session I missed?
out keyword does not help us. This wont affect traffic coming to router. That leaves A or C. C is not the correct answer: TCP permit any any SYN" refers to a firewall rule that allows any TCP connection with the SYN flag set from any source to any destination.
TCP: Refers to the Transmission Control Protocol.
permit: Indicates that the traffic matching the rule is allowed.
any any: Applies to any source and destination IP addresses.
SYN: Stands for the Synchronize flag, which is set in the first step of the TCP three-way handshake, initiating a TCP connection. If C was permit tcp any any syn and permit tcp any any ack this may work, but this also allows new tcp connections
This section is not available anymore. Please use the main Exam Page.300-410 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
[Removed]
Highly Voted 2 years, 9 months agodapardo
1 year agoAudiunt
Most Recent 1 month, 3 weeks ago[Removed]
9 months, 2 weeks agobk989
10 months, 2 weeks ago[Removed]
3 years, 9 months ago