An engineer is configuring remote access to a router from IP subnet 10.139.58.0/28. The domain name, crypto keys, and SSH have been configured. Which configuration enables the traffic on the destination router?
A.
line vty 0 15 access-class 120 in ! ip access-list extended 120 permit tcp 10.139.58.0 0.0.0.15 any eq 22
B.
interface FastEthernet0/0 ip address 10.122.49.1 255.255.255.252 ip access-group 10 in ! ip access-list standard 10 permit udp 10.139.58.0 0.0.0.7 host 10.122.49.1 eq 22
C.
interface FastEthernet0/0 ip address 10.122.49.1 255.255.255.252 ip access-group 110 in ! ip access-list standard 110 permit tcp 10.139.58.0 0.0.0.15 eq 22 host 10.122.49.1
D.
line vty 0 15 access-group 120 in ! ip access-list extended 120 permit tcp 10.139.58.0 0.0.0.15 any eq 22
it's clear. under the line vty command line which will be applied an ACL must be as ip access-class, not ip access-group. Therefore A. is the correct answer.
access-list matching statement use wildcard mask not subnet mask. "ip access-class" use in line vty, and "ip access-group" use in interface like gigaethernet, fastethernet
I disagree. In C you are allowing source port 22. Clients will never use port 22 as source port when connecting to a ssh device. They will use a randomly generate port, usually between the 49k-65k port range. The only options that correctly configured the ACL are A and D, but only A uses the correct command for VTY lines which is access-class. So correct answer is A.
This section is not available anymore. Please use the main Exam Page.200-301 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
ricky1802
Highly Voted 1 year, 8 months ago[Removed]
Most Recent 8 months agoNmk3216
1 year agoanchilinq
1 year, 2 months agoanchilinq
1 year, 2 months agoberpiy1028
1 year, 2 months ago[Removed]
1 year, 4 months agoDutch012
1 year, 9 months agoicecool2019
2 years, 1 month agochongtb
1 year agoRougePotatoe
2 years agoEliasM
2 years, 1 month agoRequest7108
1 year, 10 months ago