Refer to the exhibit. An administrator first configured an extended ACL as shown by the output of the show access-lists command. The administrator then edited this access-list by issuing the commands below. Which two conclusions can be drawn from this new configuration?​ (Choose two.)

  • Post author:
  • Post category:Q&A
  • Reading time:1 min read
  • Post last modified:March 15, 2025

Refer to the exhibit. An administrator first configured an extended ACL as shown by the output of the show access-lists command. The administrator then edited this access-list by issuing the commands below.

Router(config)# ip access-list extended 101
Router(config-ext-nacl)# no 20
Router(config-ext-nacl)# 5 permit tcp any any eq 22
Router(config-ext-nacl)# 20 deny udp any any

Which two conclusions can be drawn from this new configuration?​ (Choose two.)

CCNA3 v7 – ENSA – Modules 3 – 5 Network Security Exam Answers 10
CCNA3 v7 – ENSA – Modules 3 – 5 Network Security Exam Answers 10
  • Ping packets will be permitted.
  • Telnet packets will be permitted.
  • All TCP and UDP packets will be denied.​
  • SSH packets will be permitted.
  • TFTP packets will be permitted.​
Answers Explanation & Hints:

After the editing, the final configuration is as follows:
Router# show access-lists
Extended IP access list 101
5 permit tcp any any eq ssh
10 deny tcp any any
20 deny udp any any
30 permit icmp any any
So, only SSH packets and ICMP packets will be permitted.​

For more Questions and Answers:

CCNA 3 v7 – ENSA v7.02 – Modules 3 – 5: Network Security Exam Answers Full 100%

CCNA 3 v7 – ENSA v7.02 Final Exam Answers Full 100%