Exam 300-410 topic 1 question 153 discussion

Actual exam question from Cisco's 300-410

Question #: 153
Topic #: 1

Refer to the exhibit. A network administrator wants to block all traffic toward the Internet after business hours and on weekends. When the administrator applies an access list on interface Gi0/1, all traffic is blocked and there is no access to the Internet at any time.
Which action resolves the issue?

A. Add the permit ip any any time-range no-conn statement after the deny udp any any time-range no-conn command in the access list.
B. Add the permit ip any any statement after the deny icmp any any time-range no-conn command in the access list.
C. Add the permit allowed time-range no-conn statement after the deny icmp any any time-range no-conn command in the access list.
D. Add the permit ip any any time-range no-conn statement after the deny icmp any any time-range no-conn command in the access list.

Show Suggested Answer

Suggested Answer: B 🗳️

by [deleted] at Aug. 4, 2021, 5:56 p.m.

Comments

Submit Cancel

leecharxos

Highly Voted 3 years, 4 months ago

Selected Answer: B

without the statement "permit ip any any" wins the default line of every ACL deny all

upvoted 8 times

...

deech

Most Recent 3 months ago

Selected Answer: B

b is correct

upvoted 1 times

...

tubirubs

10 months, 2 weeks ago

Selected Answer: D

I think that D is correct, because "wants to block all traffic toward the Internet after business hours and on weekends". If do not SET the time-range in ACE, the permit ip any any always permit, without time restriction.

upvoted 1 times