GIAC Systems and Network Auditor GSNA Question # 96 Topic 10 Discussion

GIAC Systems and Network Auditor GSNA Question # 96 Topic 10 Discussion

GSNA Exam Topic 10 Question 96 Discussion:
Question #: 96
Topic #: 10

You are tasked with creating an ACL to apply to Fa0/0 based on the following requirements: The ACL must be protocol specific. All traffic from host 10.10.45.2 and subnet 10.10.1.32/27 must be denied access through the router. Telnet and SSH must be denied for ALL hosts except the management host with the IP address of 10.10.0.100. This management host must not only have Telnet and SSH access, but access to any port in the TCP and UDP suite to any destination. HTTP, HTTPS, and DNS requests must be allowed for all hosts on subnets 10.10.2.0/24 and 10.10.3.0/24 to any destination. All remaining traffic must be denied. Cisco IOS applies an implied deny all at the end of an ACL. However, you must provide this configuration manually so that engineers can see hit counts on the deny all traffic when running the show ip access-lists command. Which of the following sets of commands will you choose to complete the configuration on Router A?


A.

RouterA(config)#access-list 110 deny ip host 10.10.45.2 any

RouterA(config)#access-list 110 deny ip 10.10.1.32 0.0.0.31 any

RouterA(config)#access-list 110 permit tcp host 10.10.0.100 any

RouterA(config)#access-list 110 permit udp host 10.10.0.100 any

RouterA(config)#access-list 110 permit tcp 10.10.2.0 0.0.1.255 any eq 80

RouterA(config)#access-list 110 permit tcp 10.10.2.0 0.0.1.255 any eq 443

Rou


B.

RouterA(config)#access-list 110 deny ip host 10.10.45.2 any

RouterA(config)#access-list 110 deny ip 10.10.1.32 0.0.0.31 any

RouterA(config)#access-list 110 permit ip host 10.10.0.100 any

RouterA(config)#access-list 110 permit tcp 10.10.2.0 0.0.1.255 any eq 80

RouterA(config)#access-list 110 permit tcp 10.10.2.0 0.0.1.255 any eq 443

RouterA(config)#access-list 110 permit udp 10.10.2.0 0.0.1.255 any eq 53


C.

RouterA(config)#access-list 110 deny ip host 10.10.45.2 any

RouterA(config)#access-list 110 deny ip 10.10.1.32 0.0.0.31 any

RouterA(config)#access-list 110 permit tcp host 10.10.0.100 any

RouterA(config)#access-list 110 permit udp host 10.10.0.100 any

RouterA(config)#access-list 110 permit tcp 10.10.2.0 0.0.1.255 any eq 80

RouterA(config)#access-list 110 permit tcp 10.10.2.0 0.0.1.255 any eq 443

Rout


D.

RouterA(config)#access-list 99 deny ip host 10.10.45.2 any

RouterA(config)#access-list 99 deny ip 10.10.1.32 0.0.0.31 any

RouterA(config)#access-list 99 permit tcp host 10.10.0.100 any

RouterA(config)#access-list 99 permit udp host 10.10.0.100 any

RouterA(config)#access-list 99 permit tcp 10.10.2.0 0.0.1.255 any eq 80

RouterA(config)#access-list 99 permit tcp 10.10.2.0 0.0.1.255 any eq 443

RouterA(c


Get Premium GSNA Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.